v0.9.53

Changelog

• 0dc4783: Port public Falcon changes and guard the subtree publish (#111) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.53 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.52

Changelog

• b91cd1a: Dashboard and modules API: rename Telecom IP fraud list to abuse list (#10) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.52 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.51

Changelog

• 54399e9: Docs: remove fraud wording, accurate telemetry and SECURITY.md (FCC cites verified, unchanged) (#9) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.51 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.50

Changelog

• c8dce31: falcon: build with Go 1.26.10 to distrust the compromised eMudhra intermediates (#8) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.50 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.49

Changelog

• 5f29009: Security: Go 1.26.10, Python 3.13.17, and CA bundle floors for the eMudhra CA compromise (#103) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.49 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.48

Changelog

• e669ec6: config: require a strong fleet token on hubs and members (#98) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.48 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.47

Changelog

• 8044a52: Falcon Asterisk adapter: safer example contexts and hangup handler (#96) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.47 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.46

Changelog

• e80b988: Falcon: require a real token on non-loopback listen (#97) (@dimondevceo)
• 34b8435: falcon bridge: quieter SIP parse failure logging (#83) (@dimondevceo)
• 9298f70: falcon: release verify identity and workflow check (#82) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.46 \
  --certificate-identity 'https://github.com/CallerAPI/Falcon/.github/workflows/release.yml@refs/heads/main' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.45

Changelog

• e76d511: sipguard: block oversized SIP body allocation on UDP in go-api and Falcon (#81) (@dimondevceo)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/CallerAPI/falcon/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.45 \
  --certificate-identity-regexp 'https://github.com/CallerAPI/falcon/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v0.9.44

Changelog

• 2e25e45: falcon bridge: restart cleanup waits for the SIP socket (Cursor cursoragent@cursor.com)

Verify a download:

cosign verify-blob --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'https://github.com/CallerAPI/falcon/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum -c checksums.txt --ignore-missing

Verify the image:

cosign verify ghcr.io/callerapi/falcon:0.9.44 \
  --certificate-identity-regexp 'https://github.com/CallerAPI/falcon/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com