Skip to content

v0.1.7

Choose a tag to compare

View all tags
@Anthony-Bondu Anthony-Bondu released this 08 Jul 08:59
· 32 commits to main since this release
v0.1.7
9e6e0eb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Adds a built-in self-update command and clears every cargo-audit advisory, on top of v0.1.6.

What's new

  • update command: hermes-decomp update --check shows the latest release and its changelog; hermes-decomp update --install downloads the matching archive from GitHub releases, verifies its SHA-256 against the release SHA256SUMS, and replaces the binary in place. A one-line startup notice is available behind HERMES_DECOMP_UPDATE_CHECK=1. Thanks to @aancw (#13). The updater uses a lightweight synchronous stack (ureq), with no tokio/hyper.
  • Security: fixed every cargo-audit advisory. Upgraded rmcp to 2.1 (RUSTSEC-2026-0189, DNS rebinding in the MCP HTTP transport), replaced the unmaintained bincode with rmp-serde for the analysis cache, and bumped vulnerable transitive deps (bytes, crossbeam-epoch, anyhow). cargo audit now reports zero vulnerabilities and zero warnings.

Everything from v0.1.6 is included: TUI xref navigation, loop reconstruction, function-name recovery, HBC >=97 support, Metro/ESM module reconstruction, the on-disk analysis cache, and the CLI/MCP analyst tooling.

Downloads

Each archive contains the hermes-decomp and hermes-mcp binaries. Verify with shasum -a 256 -c SHA256SUMS.

File SHA256
hermes-decomp-v0.1.7-linux-x86_64.tar.gz 7f6ca00d6c7f026e463e5a4863db6a4a513324c75b23e4c8814f532911a28e10
hermes-decomp-v0.1.7-macos-arm64.tar.gz a8604130ff578c876d0116a6b1602dbe9faf48ff34406c4d3554cd30d9c87966
hermes-decomp-v0.1.7-windows-x86_64.zip 68e5a34ab0a478fa0b0cd841768e9e2622b530a3ab5391c4b27125c11dac9949

Contributors

aancw
Assets 6
Loading