Skip to content

Flowdular v0.6.4

Choose a tag to compare

@github-actions github-actions released this 07 Oct 17:34
· 8 commits to main since this release
a709ab1

Flowdular v0.6.4

Source commit: a709ab1

Previous release: v0.6.3

Full comparison

Packages

Package Version Artifact
@flowdular/sdk 0.6.4 flowdular-sdk-0.6.4.tgz
flowdular 0.6.4 flowdular-0.6.4.tgz
create-flowdular 0.6.4 create-flowdular-0.6.4.tgz
@flowdular/sandbox 0.6.4 flowdular-sandbox-0.6.4.tgz

Changes

  • fix(sandbox): keep the skeleton's translation keys and route named files (9b869ecc)
  • fix(sandbox): let the frontend write translations and merge bundles in the CLI (6b8ab852)
  • fix(sandbox): let the frontend hand wording to the business manager (ac5512fc)
  • test(sandbox): keep the run 5 role fixture and cover a symlinked bundle (fc9960ac)
  • Merge pull request #150 from Flowdular/fix/sandbox-scaffold-translations (36c81a0a)
  • fix(sandbox): let a module review pass and say why a chain pauses (ed6b342c)
  • fix(sandbox): let the UX designer write screen designs (f2209b87)
  • fix(sandbox): say why a review report is not accepted (7853886d)
  • fix(sandbox): find local paths from their .flowdular segment (b0b5d100)
  • fix(sandbox): keep the walk back to a path inside that path (a26dd80f)
  • fix(sandbox): read quotes from the line start when finding a path (8ea35b36)
  • Merge pull request #151 from Flowdular/fix/sandbox-review-cycle (28ad9f18)
  • release: 0.6.4 (b3fb7b09)
  • Merge pull request #152 from Flowdular/release/0.6.4 (a709ab1b)

All 14 commits, their complete messages and the file summary are included in the attached CHANGELOG.md.

Verify downloaded assets

Download all release assets into one directory. With Cosign installed, run:

cosign verify-blob SHA256SUMS --bundle SHA256SUMS.sigstore.json \
  --certificate-identity 'https://github.com/Flowdular/flowdular/.github/workflows/platform-release.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-github-workflow-sha 'a709ab1b05762206b58f3455fac003a7d1e34f06'
sha256sum --check SHA256SUMS

Signatures cover the listed artifacts through SHA256SUMS. Git tags and GitHub-generated source downloads are not signed by this workflow; use the attached signed source archive. The release workflow publishes the verified npm packages in a later job for non-draft releases.