v0.7.2

What's Changed

• fix(broker): suppress child-process console windows (CREATE_NO_WINDOW) (#577) by @MichaelTaylor3d in #12

Full Changelog: v0.7.1...v0.7.2

v0.7.1

What's Changed

• fix(feed): decouple GH-release fallback publish from the S3-primary smoke (availability) by @MichaelTaylor3d in #11

Full Changelog: v0.7.0...v0.7.1

v0.7.0

What's Changed

• feat: S3-primary feed publish to updates.dig.net + Rekor transparency (U4, #535/#533) by @MichaelTaylor3d in #10

Full Changelog: v0.6.2...v0.7.0

v0.6.2

What's Changed

• fix(check): run the dry verify against a writable state dir so a valid feed always verifies by @MichaelTaylor3d in #9

Full Changelog: v0.6.1...v0.6.2

v0.6.1

What's Changed

• fix(trust): rotate alpha root key to environment-scoped custody (#540) by @MichaelTaylor3d in #8

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed

• feat: dig-updater CLI — check --now, channel, pause, status --json (#512) by @MichaelTaylor3d in #7

Full Changelog: v0.5.1...v0.6.0

DIG beacon signed feed

The signed update feed (delegation.json + manifest.json), re-signed every 6h. Served byte-for-byte as signed — do NOT edit assets by hand.

v0.5.1

What's Changed

• fix(release): run the Windows binary build under bash (v0.5.1, #504) by @MichaelTaylor3d in #6

Full Changelog: v0.5.0...v0.5.1

v0.4.0

What's Changed

• feat: broker install path — enumerate, ACL harden, silent install, health-gate, rollback (#504-E) by @MichaelTaylor3d in #4

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• feat: nightly signed feed — feed-signer crate + CI (#513-I) by @MichaelTaylor3d in #3

Full Changelog: v0.2.0...v0.3.0