Skip to content

v2.0.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Aug 09:30
· 15 commits to master since this release
v2.0.6
7b1ec07

Changed

  • Supply-chain hardening for the release pipeline: every third-party GitHub
    Action is pinned to an immutable commit SHA (actions/checkout v4.4.0,
    dtolnay/rust-toolchain 1.97.1 branch head, Swatinem/rust-cache v2), checkouts
    run with persist-credentials: false, and the release job now publishes a
    reproducible-build attestation (source commit, committed and freshly rebuilt
    ELF SHA-256, source id, tarball SHA-256) in the release notes.

Artifact: omastonk-qs-2.0.6-linux-x86_64.tar.gz (statically linked musl x86_64).

Reproducible-build attestation

Produced by the verify bundle and publish GitHub release job at commit 7b1ec07161c553880d7698beb633222b2702f758, with all third-party actions pinned to immutable commit SHAs.

source_commit=7b1ec07161c553880d7698beb633222b2702f758
version=2.0.6
committed_sha256=91a33e48ffa806086471c47da45005e989a8ccd7cf5f29607cc4259b53f7c5ac
rebuilt_sha256=91a33e48ffa806086471c47da45005e989a8ccd7cf5f29607cc4259b53f7c5ac
source_id=ab9538cd49b8f42c45f2546beee189a0d0792b0dea979a88c4a4dc583181b90b
tarball_sha256=4c9c559101d773e30ce6ec71f0af5e81de8576198ac9f425b21091a7c74696cd
Assets 3
Loading