v1.4.1

Install

npx zengate@1.4.1
# or
docker run -d --name zengate -p 127.0.0.1:8083:8083 -v zengate:/data developingchet/zengate:1.4.1

The image is also on GitHub: ghcr.io/developingchet/zengate:1.4.1, with the same digest.

Image digest: sha256:12ce69cb5abc74f008fbd999188976387f138c3b0aca577f2e9afc56258e9091

Verify the image signature

cosign verify developingchet/zengate:1.4.1 \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Verify the release files

checksums.txt and the package tarball are signed with cosign (*.sigstore.json):

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c checksums.txt

The npm package carries provenance: npm audit signatures.

What's Changed

• ci: bump socketsecurity from 2.11.3 to 2.11.6 in /.github/requirements in the socket-cli group by @dependabot[bot] in #44
• ci: bump docker/login-action from 4.6.0 to 4.7.0 in the actions group across 1 directory by @dependabot[bot] in #41
• fix: bundle OpenCode 2.1.4 and validate strict chat against it by @developingchet in #46
• ci: drop the macOS runner from the verify matrix by @developingchet in #47
• chore: release v1.4.1 by @developingchet in #48

Full Changelog: v1.4.0...v1.4.1