Skip to content

Releases

v0.1.22

Choose a tag to compare

@github-actions github-actions released this 31 Oct 07:43
v0.1.22
8f8f637

Kigi 0.1.22 overview

Update path

Security fixes

Under the hood

English

Kigi 0.1.22 moves self-update to GitHub, fixes 19 RustSec advisories, and ships five platforms built on GitHub.

Updates

  • Self-update now reads GitHub Releases at ELY-Open-Source/Kigi-CLI.
  • 0.1.21 reads Gitea. v0.1.22 is published there too, so kigi update on 0.1.21 installs 0.1.22. From then on, Kigi reads GitHub.
  • Gitea and GitHub carry the same five archives and the same SHA256SUMS.

New installs:

# macOS / Linux
curl -fsSL https://kigicli.dev/install.sh | bash
# Windows
irm https://kigicli.dev/install.ps1 | iex

Security

Area Crate Version RUSTSEC-2026-
TLS rustls 0.23.45 → 0.23.46 0346, 0347, 0348, 0349
TLS rustls-webpki 0.103.15 → 0.103.16 0382
TLS roots webpki-roots, webpki-root-certs 1.0.8 → 1.0.11 0381, 0383
Archives zip 3.0 / 8.6 → 9.1.3 0367, 0368, 0369
Compression zstd, zstd-safe 0.13 / 7.2 → 0.14 / 8.2 0391, 0398, 0403
Compression zstd-sys 2.0.16 → 2.1.2 0410
Runtime tokio 1.52.4 → 1.54.1 0386
Crypto crypto-bigint 0.5 removed 0387
Crypto ctutils 0.4.2 → 0.4.7 0385
Markdown pulldown-cmark 0.13.4 → 0.13.6 0414
Build libz-sys 1.1.29 → 1.1.31 0418
Clipboard clipboard-win 5.4.1 → 5.4.3 yanked release

Four unmaintained crates have no fixed release yet. deny.toml names the blocker for each.

Under the hood

  • jsonwebtoken and rsa had no caller left. Removing them takes 24 crates out of the build.
  • zip 9: the PPTX reader and the Windows updater now report an entry name they cannot decode.
  • tokio 1.54: the Linux memory watcher registers its fd through AsyncFd::register_with_interest.
  • zstd 0.14 keeps libzstd 1.5.7 underneath. Compressed data reads as before.
  • Five targets built on GitHub-hosted runners: x86_64-unknown-linux-gnu, aarch64-unknown-linux-gnu, aarch64-apple-darwin, x86_64-apple-darwin, x86_64-pc-windows-msvc. Every archive is listed in SHA256SUMS.
  • Upstream xai-org/grok-build is still at 2bdd1d6, synced in 0.1.19. Nothing new to port.

中文

Kigi 0.1.22 的自更新改读 GitHub,修复 19 项 RustSec 安全公告,五个平台的安装包均在 GitHub 上构建。

更新

  • 自更新改读 GitHub Releases(ELY-Open-Source/Kigi-CLI)。
  • 0.1.21 读 Gitea。v0.1.22 也已发布到 Gitea,0.1.21 执行 kigi update 即可装上 0.1.22。此后 Kigi 只读 GitHub。
  • Gitea 与 GitHub 上的五个安装包和 SHA256SUMS 完全相同。

新安装:

# macOS / Linux
curl -fsSL https://kigicli.dev/install.sh | bash
# Windows
irm https://kigicli.dev/install.ps1 | iex

安全修复

领域 依赖 版本 RUSTSEC-2026-
TLS rustls 0.23.45 → 0.23.46 0346, 0347, 0348, 0349
TLS rustls-webpki 0.103.15 → 0.103.16 0382
TLS 根证书 webpki-roots, webpki-root-certs 1.0.8 → 1.0.11 0381, 0383
压缩包 zip 3.0 / 8.6 → 9.1.3 0367, 0368, 0369
压缩 zstd, zstd-safe 0.13 / 7.2 → 0.14 / 8.2 0391, 0398, 0403
压缩 zstd-sys 2.0.16 → 2.1.2 0410
运行时 tokio 1.52.4 → 1.54.1 0386
加密 crypto-bigint 0.5 已移除 0387
加密 ctutils 0.4.2 → 0.4.7 0385
Markdown pulldown-cmark 0.13.4 → 0.13.6 0414
构建 libz-sys 1.1.29 → 1.1.31 0418
剪贴板 clipboard-win 5.4.1 → 5.4.3 原版本已撤回

另有四个已停止维护的依赖尚无修复版本,deny.toml 逐条写明了阻塞原因。

底层变化

  • jsonwebtoken 与 rsa 已无调用方,移除后构建中少了 24 个 crate。
  • zip 9:PPTX 读取器和 Windows 更新程序遇到无法解码的条目名时会报错。
  • tokio 1.54:Linux 内存监视器改用 AsyncFd::register_with_interest 注册 fd。
  • zstd 0.14 底层仍是 libzstd 1.5.7,已有压缩数据照常读取。
  • 五个目标平台均在 GitHub 托管的 runner 上构建:x86_64-unknown-linux-gnu、aarch64-unknown-linux-gnu、aarch64-apple-darwin、x86_64-apple-darwin、x86_64-pc-windows-msvc。每个安装包都列在 SHA256SUMS 中。
  • 上游 xai-org/grok-build 仍停在 2bdd1d6(0.1.19 已同步),本次无新改动可移植。

Full Changelog: v0.1.21...v0.1.22

v0.1.21

Choose a tag to compare

@Raiden-MeixElysia Raiden-MeixElysia released this 19 Oct 23:06
Kigi 0.1.21