v1.2.0

Install

npx zengate@1.2.0
# or
docker run -d --name zengate -p 127.0.0.1:8083:8083 -v zengate:/data developingchet/zengate:1.2.0

Image digest: sha256:20491b18ecfebbb75e75710c00f051a5bee6b47bb340152fa305f9ad5cf60a22

Verify the image signature

cosign verify developingchet/zengate:1.2.0 \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Verify the release files

checksums.txt and the package tarball are signed with cosign (*.sigstore.json):

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c checksums.txt

The npm package carries provenance: npm audit signatures.

What's Changed

• docs: link the 1.1.1 release and point Unreleased at it by @developingchet in #22
• chore: bump opencode-ai from 1.18.32 to 1.18.34 in the npm group across 1 directory by @dependabot[bot] in #19
• ci: bump socketsecurity from 2.10.2 to 2.10.7 in /.github/requirements in the socket-cli group across 1 directory by @dependabot[bot] in #20
• docs: note the opencode-ai 1.18.34 update in the changelog by @developingchet in #23
• fix: keep secrets out of logs and bound attachment DNS lookups by @developingchet in #24
• chore: release v1.2.0 by @developingchet in #25

New Contributors

• @dependabot[bot] made their first contribution in #19

Full Changelog: v1.1.1...v1.2.0