Reporch CLI 1.0.1

Official Apache-2.0 Reporch CLI release.

Install with npm install --global @reporch/cli, or download the standalone tar/zip for your target and verify it with SHA256SUMS. Every release asset has GitHub artifact provenance; manifests and an SPDX SBOM are included.

This release does not claim Apple Developer ID, notarization, or Windows Authenticode publisher signing. npm provenance and Reporch runtime signatures are the supported trust path.

Reporch CLI 1.0.0

Official Apache-2.0 Reporch CLI release.

Install with npm install --global @reporch/cli, or download the standalone tar/zip for your target and verify it with SHA256SUMS. Every release asset has GitHub artifact provenance; manifests and an SPDX SBOM are included.

This release does not claim Apple Developer ID, notarization, or Windows Authenticode publisher signing. npm provenance and Reporch runtime signatures are the supported trust path.

Reporch CLI 1.0.0-rc.12

Official Apache-2.0 Reporch CLI release.

Install with npm install --global @reporch/cli, or download the standalone tar/zip for your target and verify it with SHA256SUMS. Every release asset has GitHub artifact provenance; manifests and an SPDX SBOM are included.

This release does not claim Apple Developer ID, notarization, or Windows Authenticode publisher signing. npm provenance and Reporch runtime signatures are the supported trust path.

RC notice: macOS binaries are ad-hoc signed to preserve the virtualization entitlement; Windows binaries are not publisher-signed.

Reporch Runtime v1 sequence 24

Signed Docker-free Reporch VM runtime sequence 24. Assets are target-qualified, digest-bound, and accompanied by SPDX and SLSA provenance evidence.

Reporch CLI 1.0.0-rc.9

Official Apache-2.0 Reporch CLI release.

Install with npm install --global @reporch/cli, or download the standalone archive for your target and verify it with SHA256SUMS. Every release asset has GitHub artifact provenance; manifests and an SPDX SBOM are included.

RC notice: native OS distribution certificates are not configured yet. macOS binaries are ad-hoc signed to preserve the virtualization entitlement; Windows binaries and OS installers are not publisher-signed. Verify SHA-256 and GitHub artifact provenance before installing. Stable 1.0 remains blocked until Developer ID/notarization and Authenticode credentials are configured.

Reporch CLI 1.0.0-rc.8

Official Apache-2.0 Reporch CLI release.

Install with npm install --global @reporch/cli, or download the standalone archive for your target and verify it with SHA256SUMS. Every release asset has GitHub artifact provenance; manifests and an SPDX SBOM are included.

RC notice: native OS distribution certificates are not configured yet. macOS binaries are ad-hoc signed to preserve the virtualization entitlement; Windows binaries and OS installers are not publisher-signed. Verify SHA-256 and GitHub artifact provenance before installing. Stable 1.0 remains blocked until Developer ID/notarization and Authenticode credentials are configured.

Reporch Runtime v1 sequence 23

Signed Docker-free Reporch VM runtime sequence 23. Assets are target-qualified, digest-bound, and accompanied by SPDX and SLSA provenance evidence.

Reporch Runtime v1 sequence 22

Signed Docker-free Reporch VM runtime sequence 22. Assets are target-qualified, digest-bound, and accompanied by SPDX and SLSA provenance evidence.

Reporch Runtime v1 sequence 21

Signed Docker-free Reporch VM runtime sequence 21. Assets are target-qualified, digest-bound, and accompanied by SPDX and SLSA provenance evidence.

Reporch Runtime v1 sequence 20

Signed Docker-free Reporch VM runtime sequence 20. Assets are target-qualified, digest-bound, and accompanied by SPDX and SLSA provenance evidence.