Skip to content

v0.6.0-rc.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Jul 18:34
v0.6.0-rc.1
This tag was signed with the committer’s verified signature.
Cliftonz Zac Clifton
SSH Key Fingerprint: kBE3PN8y73G0km42vo+O/iJR5ugoIx+G5am6Dad59pQ
Verified
Learn about vigilant mode.
6047101
This commit was signed with the committer’s verified signature.
Cliftonz Zac Clifton
SSH Key Fingerprint: kBE3PN8y73G0km42vo+O/iJR5ugoIx+G5am6Dad59pQ
Verified
Learn about vigilant mode.
  • chore(release): bump version to 0.6.0 (6047101)
  • feat(commands): add jarvy run command runner and nushell shell support (83af591)
  • fix(cargo-jarvy): scaffold generated uncompilable module wiring (a7ae221)
  • feat(tools): add k3s and microk8s local Kubernetes tools (72c4ce9)
  • Merge chore/docs-remove-edit-button (16649c5)
  • chore(docs): remove edit/view source buttons from doc pages (d148655)
  • Merge feat/tools-directory (148b8a3)
  • feat(docs): searchable tool directory with per-OS install commands (909ee6e)
  • Merge perf/logging-allocations (5c0c47e)
  • perf(logging): remove per-line allocations in log reading and stats (ec80d7a)
  • Merge feat/tool-todoist (2a1f2da)
  • feat(tools): add todoist CLI tool (8cc1a59)
  • Merge chore/jetbrains-platform-2025.3 (3f90c45)
  • chore(jetbrains): migrate to unified IntelliJ platform 2025.3 (2e666ae)
  • Merge chore/jetbrains-platform-2025.2 (00af2fc)
  • chore(jetbrains): build against IntelliJ platform 2025.2 (45e799f)
  • Merge chore/vscode-dep-security (fc86997)
  • chore(vscode): clear npm audit advisories in extension dev tooling (b6cfdc9)
  • Merge fix/git-config-review-round2 (66e51eb)
  • fix(git): round-2 hardening from parallel-review verification (87f931f)
  • fix(ci): don't let jarvy doctor's health exit code fail the action e2e (a540068)
  • test(e2e): headless VS Code integration + Action setup e2e (8501e93)
  • fix(git): harden [git.extra] from parallel-review findings (b9b6810)
  • ci(editors): PR-gated build/test workflows for the VS Code + JetBrains plugins (d4e5ba0)
  • Merge feat/git-config-extra-os-defaults (b97ba1e)
  • feat(git): [git.extra] escape hatch, OS-aware defaults, guardrails (47bad46)
  • feat(tools): add structurizr tool (C4 architecture models as code) (8e7681c)
  • docs: maintainer marketplace-publishing runbook (f307c11)
  • Merge remote-tracking branch 'origin/feat/jetbrains-plugin' (86bac24)
  • Merge remote-tracking branch 'origin/feat/vscode-extension' (95a642f)
  • Merge remote-tracking branch 'origin/feat/gh-action' (e21f6fc)
  • ci(jetbrains): marketplace publish workflow + signing config + release docs (1b2c0b4)
  • ci(vscode): marketplace publish workflow + release docs (e049901)
  • ci(action): independent action-vX version line + moving major tag (71c4b38)
  • chore(tasks): PRD-017 all six phases built in-repo (b5bf8b3)
  • feat(editor): JetBrains/IntelliJ plugin for jarvy (PRD-017 phase 6) (31d61ba)
  • ci(action-selftest): authenticate install with github.token (b175d0a)
  • Merge remote-tracking branch 'origin/main' into feat/gh-action (fb27bc8)
  • fix(install): bash-3.2-safe empty-array expansion in gh_api_fetch (13c3c0b)
  • Merge remote-tracking branch 'origin/main' into feat/gh-action (3179956)
  • fix(install): stop exit-1-after-success + harden GitHub fetches (148ab31)
  • feat(editor): VS Code extension for jarvy (PRD-017 phase 3) (dd02a3e)
  • feat(ci): publishable GitHub Action for jarvy (PRD-017 phase 2) (893b9ee)
  • feat(integration): consumable pre-commit hook + devcontainer feature (PRD-017) (67f7be6)
  • feat(doctor): add --check category filter + observability integration tests (cbb600a)
  • chore(tasks): reconcile PRD trackers with merged work (54c6889)
  • fix(skills): reconcile update path with companion-fetch after merge (a65dea5)
  • Merge branch 'feat/library-companion-fetch' (58b3f02)
  • Merge branch 'feat/mcp-distribution' (35d79f6)
  • Merge branch 'feat/skills-update-remove' (e2862f9)
  • Merge branch 'feat/new-tools-batch' (57e7177)
  • Merge branch 'chore/observability-cleanup' (27d6015)
  • feat(library): companion file fetch for hook bodies + skill companions (PRD-054) (255478b)
  • feat(dist): npm wrapper, Docker image, and MCP registry server.json (PRD-021) (40dc476)
  • feat(skills): add jarvy skills update/remove + ad-hoc install (PRD-049 ph2) (15a603c)
  • feat(tools): add 10 tools (testing, devops, network utilities) (5190ae3)
  • docs(skill): note codex review --base cannot take a focus prompt (6d1171b)
  • fix(observability): address parallel-review findings on the flag wiring (8bd1845)
  • chore(ci): Bump gitleaks/gitleaks-action from 2 to 3 (#44) (98821f9)
  • chore(ci): Bump codecov/codecov-action from 4 to 7 (#41) (e1aec49)
  • chore(tasks): reconcile stale trackers against verified codebase state (ba804cf)
  • ci(e2e): cover Fedora/Arch/Alpine via container jobs (PRD-014 T11) (bfbcf34)
  • feat(tools): add default hooks for rust, tmux, kubectx, nvim (ede1958)
  • fix(observability): wire setup logging/profiling flags; drop dead modules (661b759)
  • chore(ci): Bump actions/github-script from 8 to 9 (#42) (3747f13)
  • chore(ci): Bump anchore/sbom-action/download-syft from 0.17.9 to 0.24.0 (#40) (a9bf7ad)
  • docs: add Fable 5 model-routing guidance and codex shell-out skills (4849be0)
  • test(init): gate global-config tests behind test-bypass feature (d136a28)
  • ci: upgrade first-party GitHub Actions to the Node 24 runtime (ce27ee6)
  • docs(changelog): add Unreleased section for installer fixes (e3556b9)
  • test(install): add installer unit tests + e2e/lint workflows (b42d0dc)
  • fix(install): verify checksums and request the shipped Linux triple (257adc6)
  • chore: update contributors (#45) (4322d8d)
  • ci(release-paths): warn+skip binary-update when N-1/N-2 predates v0.5.2 (219e8a8)

Full Changelog: v0.5.2...v0.6.0-rc.1

Installation

Quick Install (Unix)

curl -fsSL https://raw.githubusercontent.com/Cliftonz/jarvy/main/dist/scripts/install.sh | bash

Quick Install (Windows PowerShell)

irm https://raw.githubusercontent.com/Cliftonz/jarvy/main/dist/scripts/install.ps1 | iex

Homebrew

brew install Cliftonz/tap/jarvy

Cargo

cargo install jarvy

Early-Release Channel

Pre-release tags (-rc.N, -beta.N) are routed through the beta channel.
Opt in: JARVY_CHANNEL=beta on the install script, or jarvy update --channel beta.
See docs/release-testing.md.

See installation docs for more options.

Security

Verify Signatures

All release artifacts are signed with Sigstore keyless OIDC. Verify any artifact:

# Substitute a triple that matches your platform, e.g.
# aarch64-apple-darwin, x86_64-unknown-linux-musl,
# aarch64-unknown-linux-gnu, x86_64-pc-windows-msvc (.zip).
ARTIFACT=jarvy-v0.6.0-rc.1-x86_64-unknown-linux-musl.tar.gz
BASE=https://github.com/Cliftonz/jarvy/releases/download/v0.6.0-rc.1
curl -LO $BASE/$ARTIFACT
curl -LO $BASE/$ARTIFACT.sig
curl -LO $BASE/$ARTIFACT.pem
cosign verify-blob \
  --signature $ARTIFACT.sig \
  --certificate $ARTIFACT.pem \
  --certificate-identity-regexp '^https://github\.com/Cliftonz/jarvy/\.github/workflows/release\.yml@refs/tags/v[0-9.]+(-[A-Za-z0-9.]+)?$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  $ARTIFACT

Tag Signature

This release was cut from a signed git tag. Verify with:

git -c gpg.ssh.allowedSignersFile=.github/allowed_signers tag --verify v0.6.0-rc.1

SBOM

Software Bill of Materials in SPDX 2.3 (sbom.spdx.json) and CycloneDX 1.4 (sbom.cdx.json).

Checksums

SHA256 checksums for all artifacts are in SHA256SUMS.txt.

24h soak: PASSED — see #51 for the audit trail.

Assets 71
Loading