v1.4.0

Install

npx zengate@1.4.0
# or
docker run -d --name zengate -p 127.0.0.1:8083:8083 -v zengate:/data developingchet/zengate:1.4.0

The image is also on GitHub: ghcr.io/developingchet/zengate:1.4.0, with the same digest.

Image digest: sha256:e52409c520711612dc51c43d36dde0a20db8a08dd98085cff28f925ba9ff95e4

Verify the image signature

cosign verify developingchet/zengate:1.4.0 \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Verify the release files

checksums.txt and the package tarball are signed with cosign (*.sigstore.json):

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c checksums.txt

The npm package carries provenance: npm audit signatures.

What's Changed

• docs: note the GHCR image and the GitHub Packages npm package by @developingchet in #35
• fix: add strict chat profile, preserve quota timing, and refresh dependencies by @developingchet in #40
• chore: prepare 1.4.0 release by @developingchet in #42
• docs: align release guidance with 1.4.0 behavior by @developingchet in #43

Full Changelog: v1.3.1...v1.4.0