Skip to content

v0.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Sep 06:23
· 84 commits to main since this release
v0.1.1
This tag was signed with the committer’s verified signature. The key has expired.
aramase Anish Ramasekar
GPG key ID: E96F745A34A409C2
Expired
Verified
Learn about vigilant mode.
19bf2b1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

agentsessions v0.1.1

Pre-1.0: the wire contract and the Go SPI may both change. agentsessions.v1 is a proto
namespace, not a stability promise.

There is no authentication, authorization, or transport security. Do not expose a host to an
untrusted network or treat it as multi-tenant. See docs/security.md.

Changelog

Documentation

  • c754d94 docs: record v0.1.1 in the changelog (#47)

Build and CI

  • 9d20a01 build: link changelog entries and skip provenance while private (#43)
  • e64e3e3 build: publish container images to ghcr (#46)
  • b690748 ci: add lint and vulnerability gates (#44)
  • 19bf2b1 ci: validate workflows, and fix the unparseable release file (#48)

Verify an artifact

Every archive is checksummed, and each carries an SBOM alongside it:

sha256sum -c checksums.txt --ignore-missing

Public releases also carry signed build provenance, which ties an archive to the workflow,
commit, and runner that produced it:

gh attestation verify <file> --repo aramase/agentsessions

Container images

ghcr.io/aramase/agentsessions/agentsessionsd:0.1.1
ghcr.io/aramase/agentsessions/harnessnode:0.1.1

Multi-arch (amd64 and arm64), built with ko from the tagged source, each with an SBOM pushed
alongside it. agentsessionsd runs as uid 65532; give its journal path a writable volume.

Assets 11
Loading