See the changelog for what changed in this release.
Installation
pip install borgstore, or with the backends you need, e.g.
pip install "borgstore[rest,sftp,s3]".
Verifying the sdist
The sdist has a build provenance attestation:
gh attestation verify --owner borgbackup borgstore-0.6.2.tar.gz
The .sigstore.jsonl asset is that attestation, so the same check also works without asking GitHub for it:
gh attestation verify --owner borgbackup --bundle borgstore-0.6.2.tar.gz.sigstore.jsonl borgstore-0.6.2.tar.gz