v5.1.0

5.1.0 (2026-06-10)

Features

• security: attest release artifacts with sigstore provenance (#128) (554d1c6)

Bug Fixes

• security: harden release pipeline integrity (SC2/SC3/SC4) (#126) (788ff65)

Artifact checksums (SHA-256)

Per-file hashes of the shipped browser bundle. Verify against
the npm-installed package or the attached zip; see SECURITY
docs ("Release artifact integrity") for how.

# webssh2_client v5.1.0 SHA-256 checksums
7a7f5699c9abc95b282991e5b75f4400442e5db74bf6c507581742b5fe2c26a3  client-public.zip
8bd2c550b43f3c78706132aed068dc4657a3828940681788fe15c6e610e7dbf2  public/client.htm
513db94f33e001bad70cc26aeac21a631254619e37644007b4fb4b2267bfb50d  public/favicon.ico
22c12b44a253c1cc3442f54556036d66df4c91edf27c8e010b416c47839ccb3e  public/webssh2-1a63bd4f.css
8b28e773d28aa36e2b2ef9f3fc51bc0e79c459eaea892a4dca8fc6b1825e019b  public/webssh2-f0cf4a4e.js
c68dc01a696e97acd638e353fd701398c16ef1dbf4f871bb377927b7290fdb5f  public/xterm-efe3b2fd.css