OpenHardwareOS v0.1.2 — published-artefact fixes and a pinned toolchain

OpenHardwareOS v0.1.2 is a Windows x64 preview update. Existing v0.1.0 and v0.1.1 tags and downloads remain available.

Changes

• The published SHA256SUMS is now written with LF. Until v0.1.1 it used the host newline (CRLF on Windows), which made shasum -a 256 -c SHA256SUMS report every entry as a missing file on macOS and Linux. The digests themselves were always correct.
• The published install.ps1 is byte-for-byte the committed script. It used to be copied out of a Windows checkout, where core.autocrlf had converted it to CRLF, so the released file's digest could not be reproduced from the repository. The packager now normalises it, proves it equals the blob in the commit, verifies SHA256SUMS carries no carriage return, and refuses to produce a package when either check fails.
• .gitattributes pins eol=lf, so a checkout reproduces the committed bytes on every platform instead of depending on the machine's git configuration.
• rust-toolchain.toml pins 1.98.1, the compiler CI uses, so every rustup-managed cargo — CI, a fresh checkout, the Windows acceptance machine — resolves the same release. rust-version stays 1.95 as the minimum.
• A new fixture suite, scripts/release/test-packaging.ps1, runs before packaging in the release workflow and covers the asset set, every checksum, a CRLF working tree, a genuinely CRLF blob, and the two guards themselves.
• The six-stage hardware support plan is versioned in docs/plans/hardware-support/: a byte-for-byte mirror of GitHub issues #1–#7 plus an index that states which document is authoritative for what.
• Documentation corrections: what Windows CI has actually run (build, tests, NSIS packaging, public install) versus what still needs a real machine; the Windows-compile gap that the first CI run exposed; and the acceptance entry now lists the CI evidence with links.

Install

Use the Windows PowerShell installation instructions for this version. The prebuilt CLI requires neither Rust nor Node.js. SHA-256 verification happens before extraction. The default command installs to a separate version directory and preserves older installs.

The desktop installer and optional PowerShell script are unsigned. LibreHardwareMonitor is a separate prerequisite for supported motherboard channels and is not bundled.

Scope of validation

Software and installation validation do not establish compatibility with a physical fan or water pump. No fan or pump has responded to a write from this code. This release does not change the control path: the exit-reporting and provider-selection fixes are being prepared separately, and the version catalogue records hardware_validation: not_verified for every release.

release.json identifies the exact source commit and build workflow. SHA256SUMS covers the six accompanying assets.

Verification evidence

• CI: all eight jobs passed on this commit — formatting, Clippy, the three Rust platforms, the frontend, the NSIS bundle, the licence audit and the version catalogue. One desktop behaviour test failed on the first attempt and passed on re-run; its race is a known test defect, not a product one, and is fixed in the next version.
• Windows release assets: built the CLI and the NSIS installer, ran both fixture suites (test-install.ps1, and the new test-packaging.ps1), packaged the assets and installed the packaged CLI in isolation.
• Version-management regression tests: 30 passed, including catalogue validation, failed-update rollback and CRLF checkouts.
• The published SHA256SUMS was re-verified after download: it is LF-only, and shasum -a 256 -c SHA256SUMS validates all six entries on macOS/Linux — the check that failed on every entry for v0.1.0 and v0.1.1.
• The published install.ps1 hashes to the blob committed at this tag (git blob f2617d08), where v0.1.1 published the same committed script as CRLF.