v0.0.1

First publicly tagged stable release. Validated through the
v0.1.0-rc.1 → v0.1.0-rc.9 soak cycle (same tree, version-string
only differs); cut as 0.0.1 to keep the first-stable surface narrow
and reserve room for 0.1.0 as the first feature-complete milestone.

Features

• provisioner: Cross-platform tool provisioner driven by jarvy.toml
  (macOS, Linux, Windows) with native package managers
• tools: 154+ tool registry covering compilers, runtimes, CLIs, container
  tools, Kubernetes ecosystem (kubectl, helm, k9s, kagent, kmcp, arctl), cloud
  CLIs (gcloud, aws, az), security tools, observability (opentelemetry-collector),
  Dockerfile converter (dfc) (PRD-013)
• tools: Parallel version checking with rayon for ~5x speedup; batch
  package-manager operations
• tools: Declarative define_tool! macro for tool definitions (~2000 lines
  reduced)
• tools: Strict (depends_on) and flexible (depends_on_one_of) tool
  dependencies with topological install ordering (PRD-034)
• hooks: 29+ default post-install hooks for shell completion and
  configuration; idempotent, advisory, user-overridable
• roles: Role-based configurations with deep inheritance, version overrides,
  roles list|show|diff commands (PRD-033)
• packages: Language package deps via [npm], [pip], [cargo] —
  package-manager auto-detection, virtualenv support, lockfile install (PRD-039)
• git: Git configuration automation — identity, SSH/GPG signing, default
  branch, aliases, credential helper auto-detect per OS (PRD-041)
• drift: Configuration drift detection with SHA-256 file hashing, version
  policies, jarvy drift check|status|accept|fix (PRD-043)
• update: Self-updating with stable/beta/nightly channel selection,
  throttled checks, rollback, multi-method install detection (Homebrew, Cargo,
  apt, dnf, winget, Chocolatey, Scoop, binary fallback) (PRD-035)
• telemetry: OTEL-unified logs, metrics, optional traces; OTLP HTTP/gRPC
  endpoints; CI auto-disable; jarvy telemetry status|enable|disable|test|preview
  (PRD-022, PRD-050)
• logging: Persistent file logging with rotation, gzip compression,
  sensitive-data redaction; jarvy logs view|stats|clean|config (PRD-050)
• ticket: Debug bundles via jarvy ticket create|show|list|clean — ZIP with
  system info, tool versions, sanitized logs (PRD-050)
• network: Corporate proxy support — HTTP/HTTPS/SOCKS, NO_PROXY, custom CA
  bundles, per-tool overrides, secure password sources (PRD-019)
• services: Docker Compose and Tilt backend support
• ci: Auto-detection for 11 CI/CD providers with provider-specific output
• env: Environment variable management with .env generation and shell rc
  updates
• mcp: MCP server exposing tools and resources for AI assistants
• interactive: Menu mode when running jarvy without a subcommand
• bootstrap: jarvy bootstrap, jarvy configure, jarvy diagnose for
  onboarding (PRD-023)

Distribution

• Multi-channel: crates.io, Homebrew tap, AUR (source + binary), .deb, .rpm,
  winget, Chocolatey, universal install scripts for macOS/Linux/Windows (PRD-012)
• Prebuilt platforms: macOS arm64, Linux x86_64 (musl), Linux aarch64,
  Linux armv7, Windows x86_64. macOS Intel (x86_64) not shipped as prebuilt —
  Intel users install via cargo install jarvy or Homebrew (both compile from
  source). See docs/release-testing.md for rationale.
• Sigstore keyless signing for all release artifacts (PRD-020)
• SBOM generation in SPDX 2.3 and CycloneDX 1.4 formats per release (PRD-020)
• GitHub build provenance attestation per release (PRD-020)
• Opt-in early-release channel: JARVY_CHANNEL=beta env var on install
  scripts; [update] channel = "beta" in ~/.jarvy/config.toml;
  jarvy update --channel beta

Quality & Security

• Clippy gate, mutation testing, fuzzing, coverage, benchmarks, OpenSSF
  Scorecard (PRD-018)
• Hybrid cross-platform E2E testing harness (PRD-038)
• Tag-signing enforcement (SSH or GPG) on release workflow
• Cosign keyless signing via GitHub OIDC for all release artifacts

Infrastructure

• Semantic version checking with proper semver operators
• Cross-platform shell detection and hook execution
• Workspace lint configuration; Rust 2024 edition; MSRV 1.85

Full Changelog: v0.1.0-rc.9...v0.0.1

Installation

Quick Install (Unix)

curl -fsSL https://raw.githubusercontent.com/bearbinary/jarvy/main/dist/scripts/install.sh | bash

Quick Install (Windows PowerShell)

irm https://raw.githubusercontent.com/bearbinary/jarvy/main/dist/scripts/install.ps1 | iex

Homebrew

brew install bearbinary/tap/jarvy

Cargo

cargo install jarvy

Early-Release Channel

Pre-release tags (-rc.N, -beta.N) are routed through the beta channel.
Opt in: JARVY_CHANNEL=beta on the install script, or jarvy update --channel beta.
See docs/release-testing.md.

See installation docs for more options.

Security

Verify Signatures

All release artifacts are signed with Sigstore keyless OIDC. Verify any artifact:

ARTIFACT=jarvy-linux-x86_64.tar.gz
BASE=https://github.com/bearbinary/jarvy/releases/download/v0.0.1
curl -LO $BASE/$ARTIFACT
curl -LO $BASE/$ARTIFACT.sig
curl -LO $BASE/$ARTIFACT.pem
cosign verify-blob \
  --signature $ARTIFACT.sig \
  --certificate $ARTIFACT.pem \
  --certificate-identity-regexp 'https://github.com/bearbinary/jarvy' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  $ARTIFACT

Tag Signature

This release was cut from a signed git tag. Verify with:

git -c gpg.ssh.allowedSignersFile=.github/allowed_signers tag --verify v0.0.1

SBOM

Software Bill of Materials in SPDX 2.3 (sbom.spdx.json) and CycloneDX 1.4 (sbom.cdx.json).

Checksums

SHA256 checksums for all artifacts are in SHA256SUMS.txt.