Skip to content

ghr 0.5.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jun 08:00
· 4 commits to main since this release
v0.5.1
ea6de53
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A toolkit for GitHub releases.

Highlights since v0.5.0

  • Verify against GitHub's built-in asset digest. GitHub now publishes a SHA-256 digest inline on every release asset (added 2025-06-03), so ghr verifies downloads against it with no extra network request — and still validates a published .sha256/SHA256SUMS sidecar when present. ghr's own releases drop the redundant .sha256 sidecars (a CI-generated checksum shares GitHub's trust root); integrity comes from the built-in digest, provenance from the sigstore and minisign signatures. (#118)

Full changelog: v0.5.0...v0.5.1

Install:

pipx install ghr-bin==0.5.1
uv tool install ghr-bin==0.5.1
winget install ghr --version 0.5.1
curl -fsSL https://raw.githubusercontent.com/cataggar/ghr/main/install.sh | GHR_VERSION=v0.5.1 sh
$env:GHR_VERSION = 'v0.5.1'; iwr -useb https://raw.githubusercontent.com/cataggar/ghr/main/install.ps1 | iex
ghr install cataggar/ghr@v0.5.1 RWSbsumpaHb+N3KCEt/EUXQ5y6Kkk8r/zCb5Z4jhEuEX8x2/U5wr5QC0
Assets 26
Loading