Skip to content

dcg v0.7.6 — complete cross-platform release

Choose a tag to compare

View all tags
@Dicklesworthstone Dicklesworthstone released this 29 Jul 02:16
v0.7.6
4d6d587

Complete cross-platform release

v0.7.6 restores the complete six-target distribution matrix and resolves the
release-delivery failure reported in #238.

Built from annotated tag v0.7.6 at immutable source commit
4d6d5874c9d71e62f47b5a63e91a14bd3718eeb7.

Platform archives

  • Linux x86_64: static PIE using musl
  • Linux ARM64: glibc-compatible through GLIBC 2.17
  • macOS x86_64
  • macOS Apple Silicon
  • Windows x86_64
  • Windows ARM64

The macOS binaries are signed with Developer ID Application: Jeffrey Emanuel (AU8V2Z6NKY), hardened runtime, and secure timestamps. Apple notarization
accepted both submissions with zero issues:

  • ARM64: b3109f1e-e5b7-49fb-a1fd-38d4ed02dbd1
  • x86_64: ce60a4be-8c4a-421d-bd5b-96fbefc7d4b1

Supply-chain verification

Every platform archive includes:

  • a mandatory SHA-256 sidecar;
  • a minisign signature under key ID 69B3955C8D2E62A8;
  • a Sigstore/cosign bundle under the published local-release key;
  • an in-toto SLSA provenance statement, independently minisign- and
    cosign-signed.

The cosign public-key DER SHA-256 fingerprint is
0e6947743daf39d6413cb25f6c96601427e38885f3a756e9f98f37d66e6df7a4.
The aggregate SHA256SUMS file is signed by both trust paths.

Build provenance

GitHub-hosted runners were unavailable because of the documented account-wide
runner scheduling backlog, so this release used the repository's local DSR
fallback. Windows and macOS builds ran in isolated staged-source environments;
Linux artifacts came from a separate clean checkout of the same exact tag.

Linux and Windows used the project-pinned nightly-2026-06-06 toolchain. The
macOS host's pinned compiler stalled in macOS policy/dyld evaluation during the
build run, so both macOS targets used the functioning installed
nightly-2026-07-05; this exception and all raw/archive hashes are recorded in
the attached manifest.

Verification performed

  • Full Rust format, check, Clippy, unit, integration, and 374-case shell E2E gates
  • Linux x86_64 installer, version, safe-command, and destructive-command smoke
  • Native Windows x86_64 hash, version, safe-command, and destructive-command smoke
  • Native macOS ARM64 and Rosetta x86_64 signature, version, safe-command, and
    destructive-command smoke after notarization
  • Architecture checks for all six binaries
  • Offline minisign, cosign, checksum, and SLSA verification before publication
Assets 64
Loading