Skip to content

holt 0.4.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Aug 06:44
· 27 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.4.5
01e017e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

holt 0.4.5 — cross-platform installed proof

Install the signed, version-pinned GitHub release artifact:

npm install -g https://github.com/Raed2180416/holt/releases/download/v0.4.5/holt.tgz

The bare holt npm registry name is not an official distribution. Do not use
npm install -g holt; use the exact GitHub release URL.

This patch makes the installed-artifact smoke repository line-ending invariant before its first
commit. A Windows host-global Git policy can no longer make the deliberately empty worktree look
modified. The 0.4.4 retained-proof release gate remains in force; this is a cross-platform proof
correction, not evidence of customer adoption, productivity gains, universal host enforcement, or
a commercial service.

Verify this exact artifact

After downloading holt.tgz and the release assets:

gh release verify v0.4.5 --repo Raed2180416/holt
gh release verify-asset v0.4.5 holt.tgz --repo Raed2180416/holt
gh attestation verify holt.tgz --repo Raed2180416/holt
holt audit --require-signature

Each command verifies a different boundary. Do not infer provenance if the attestation query does
not succeed.

For the full change ledger and remaining gaps, see the
post-v0.3.1 55-commit audit.

Holt is part of Contrare Research. Product and research queries:
research.contrare@outlook.com.

Assets 10
Loading