v0.3.13
·
62 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Install
This patch release switches Arroxy's release integrity model to GitHub immutable releases.
Highlights
Verified Release Assets
Arroxy now relies on GitHub's immutable release verification for published release assets.
- GitHub Release assets are locked after publish and get GitHub's release-integrity verification path.
- The release workflow still publishes stable binary filenames, updater metadata, package-manager inputs, and
SHA256SUMS. - The workflow no longer generates separate build-provenance attestations for release assets, because those are redundant for GitHub's release asset verification UI.
Release Workflow Cleanup
The publish job is smaller and easier to reason about.
- Removed the extra
actions/atteststep and the follow-upgh attestation verifypolling. - Removed the attestation-specific workflow permissions from the release job.
- Kept draft-first publishing, so all asset mutation still happens before immutable release publication.
Full Changelog: v0.3.12...v0.3.13