Skip to content

Releases: cboxdk/telemetryd

v0.42.0

Choose a tag to compare

@github-actions github-actions released this 13 Aug 18:41

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.42.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.41.1...v0.42.0

v0.41.1

Choose a tag to compare

@github-actions github-actions released this 13 Aug 17:21

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.41.1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.41.0...v0.41.1

v0.41.0

Choose a tag to compare

@github-actions github-actions released this 13 Aug 13:56

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.41.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.40.0...v0.41.0

v0.40.0

Choose a tag to compare

@github-actions github-actions released this 13 Aug 10:53

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.40.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.38.0...v0.40.0

v0.38.0

Choose a tag to compare

@github-actions github-actions released this 13 Aug 09:36

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.38.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.37.0...v0.38.0

v0.37.0

Choose a tag to compare

@github-actions github-actions released this 12 Aug 21:44

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.37.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.36.0...v0.37.0

v0.36.0

Choose a tag to compare

@github-actions github-actions released this 12 Aug 21:12

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.36.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.35.0...v0.36.0

v0.35.0

Choose a tag to compare

@github-actions github-actions released this 12 Aug 20:11

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.35.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.34.0...v0.35.0

v0.34.0

Choose a tag to compare

@github-actions github-actions released this 12 Aug 19:40

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.34.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.33.0...v0.34.0

v0.33.0

Choose a tag to compare

@github-actions github-actions released this 12 Aug 12:23

Install

curl -fsSL https://raw.githubusercontent.com/cboxdk/telemetryd/main/install.sh | sh

Or with Homebrew:

brew install cboxdk/tap/telemetryd

Debian and Ubuntu: download the .deb for your architecture and
sudo dpkg -i telemetryd_*.deb. There is no hosted apt repository —
see the README for why.

Verifying

SHA256SUMS covers every archive, and SHA256SUMS.cosign.bundle is a
keyless Sigstore signature over it. There is no public key to fetch: the
signing identity is this release workflow, attested by GitHub's OIDC
provider and recorded in the public transparency log.

cosign verify-blob \
  --bundle SHA256SUMS.cosign.bundle \
  --certificate-identity "https://github.com/cboxdk/telemetryd/.github/workflows/release.yml@refs/tags/v0.33.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  SHA256SUMS

Pin --certificate-identity as shown. Without it any valid Sigstore
signature would pass, including one made by somebody else.

sbom.json is a CycloneDX 1.5 manifest of everything linked into the
binary.

Full Changelog: v0.32.0...v0.33.0