Skip to content

Unpin v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Aug 18:57
· 30 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.0.0
2307fb5

Unpin v1.0.0

v1.0.0 is the first unified stable release of the Unpin CLI, terminal TUI,
MCP server, and native macOS desktop workbench.

Highlights

  • The workbench organizes large inventories around Discover & Organize,
    Govern & Automate, Change Safely, and Recover & Audit.
  • A bundled, version-matched unpin child remains the sole discovery,
    approval, mutation, backup, drift, audit, and restore authority.
  • The local stdio bridge exposes redacted typed state rather than provider
    payloads, private paths, secret keys, or MCP approval artifacts.
  • CLI, TUI, and MCP compatibility remains intact. Profiles, gateways, sessions,
    and hooks stay on their existing surfaces until later desktop parity phases.
  • Inventory supports prioritized multi-column sorting, unclipped filters, and
    persistent Light and Dark appearance choices.

Desktop artifacts

The release provides separate archives for Apple Silicon and Intel macOS:

  • unpin-desktop-v1.0.0-aarch64-apple-darwin.tar.gz
  • unpin-desktop-v1.0.0-x86_64-apple-darwin.tar.gz

Each archive contains UnpinDesktop.app, the matching native unpin bridge,
the bridge-integrity manifest, README, and license. GitHub supplies build
provenance and CycloneDX SBOM attestations, and SHA256SUMS covers the complete
release asset set.

The app is ad-hoc signed with Hardened Runtime but is not Developer ID signed
or Apple-notarized. This stable release uses an explicit maintainer-approved
unsigned-GA exception and does not claim Gatekeeper trust. Verify the checksum
and GitHub attestation before using Finder's Control-click Open flow. Do not
disable Gatekeeper or strip quarantine metadata. Full instructions are in the
desktop guide.

Desktop updates remain manual: verify the new archive, quit the old app, and
replace the app bundle. Uninstalling means moving UnpinDesktop.app to Trash;
shared CLI state and recovery evidence under ~/.config/unpin are retained.

Stable-release verification

Implementation baseline 6877cd2 passed the full locked Rust workspace gates,
the shared 35-test Xcode scheme, all release-tool tests, native arm64 and
x86_64 desktop archive smokes, live Pi/OpenCode host validation, and the
finalized repository-local provider matrix with 31/31 CLI, 31/31 TUI, and
31/31 MCP cases.

Subsequent release hardening and the stable promotion tree passed locked
metadata, the unpin 1.0.0 version smoke, workflow lint, the focused desktop
release tests (9/9), and git diff --check. Before publication, the exact
merged commit must pass protected-branch CI, Linux release compatibility, and
exact-version native desktop artifact verification for both architectures.

The release PR records the focused delivery-only evidence: actionlint, locked
Cargo metadata and version smoke, the GLIBC_2.35-or-older symbol ceiling, and
the Debian 12 artifact smoke. After tagging, publication waits for a fresh
download of the exact asset set and verification of checksums, attestations,
the ad-hoc signature, CLI/Desktop smokes, the bridge handshake, and installed
artifact identity.

Known limitations

  • No Developer ID signing, notarization, or automatic updates.
  • Desktop support is macOS-only and architecture-specific.
  • Profiles, gateways, sessions, and hooks remain on CLI, TUI, and MCP surfaces.
  • crates.io, Homebrew, Linux ARM64, and Windows distribution remain deferred.
Assets 14
Loading