v0.3.0

What's Changed

• 🌈 [main] add color_set subcommand for RGB displays, fixes #41 by @chicks-net in #46
• ✅ [main] add fuzz targets and fix negative-index panic in extractTimePart, fixes #47 by @chicks-net in #49
• 🍺 [readme] document brew install by @chicks-net in #50
• 🎞️ [just] gh-process v9.9 matured the PR/Copilot lifecycle and added opt-in asciinema recording by @chicks-net in #51
• 🖋️ [readme] note need for sudo on recent versions of MacOS by @chicks-net in #52
• 🙊 [main] warn on epipe about macos workaround by @chicks-net in #53
• 🔅 [main] add dimmer_set subcommand for digit brightness, fixes #40 by @chicks-net in #54
• 🥉 [readme] achieve OpenSSF passing badge for this project by @chicks-net in #55
• 🟠 [claude] /init added a release section to CLAUDE.md by @chicks-net in #56
• Update anthropics/claude-code-action action to v1.0.229 by @renovate[bot] in #57
• Update zizmorcore/zizmor-action action to v0.6.4 by @renovate[bot] in #58
• Update github/codeql-action action to v4.38.1 by @renovate[bot] in #59
• Update cue-lang/setup-cue action to v2 by @renovate[bot] in #60
• 🔍 [gha] pin renovate tag+digest, drop stale version comments (chicks-projects#118) by @chicks-net in #63
• 🛠️ [gha] migrate actionlint from Docker Hub image to official download script (#399) by @chicks-net in #64
• 🎥 [readme] record commands with asciinema, fixes #61 by @chicks-net in #65
• 📝 [readme] front-page rework for discoverability, re #62 by @chicks-net in #66
• 📋 [meta] update topics on github landing page by @chicks-net in #67
• 🖼️ [docs] include social-preview.png for posterity, re #62 by @chicks-net in #68
• 📊 [gha] publish codecov coverage report, add pkg.go.dev/codecov badges, re #62 by @chicks-net in #69

Full Changelog: v0.2...v0.3.0

Verifying the binaries

Each ctm-<os>-<arch> binary is signed keyless with cosign (Sigstore).
Verify a binary against its bundle:

cosign verify-blob \
    --bundle ctm-<os>-<arch>.bundle \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-identity-regexp '^https://github\.com/chicks-net/ctm/\.github/workflows/release\.yml@.+$' \
    ctm-<os>-<arch>

Or check it the old-school way:

cosign verify-blob --bundle ctm-<os>-<arch>.bundle ctm-<os>-<arch>

SLSA-3 build provenance is attached to the release as multiple.intoto.jsonl.