Heimdall v0.1.1
Changes
Highlights
- Publish the official daemonless Heimdall CLI through npm for x86_64 and
aarch64 Linux with no install lifecycle scripts. - Make npm publication consume the exact locally verified GitHub Release asset
through GitHub OIDC instead of a long-lived registry token. - Expand the npm package page with verified install and one-shot commands,
quick start, architecture, operating modes, and security boundaries.
Added
- Add the public
heimdall-egressnpm distribution with embedded x86_64 and
aarch64 Linux musl binaries,heimdallandheimdall-egresslaunchers, no
install lifecycle scripts, and local global-install/npm execacceptance.
Changed
- Expand the npm package page with npm, pnpm, Yarn, Bun, and Deno install and
one-shot commands plus concise setup, architecture, operating-mode, platform,
daemonless lifecycle, and security guidance. - Build the exact npm tarball locally with pinned npm 12 and attach it and its
checksum to the GitHub Release. Publishing the Release triggers the
project-owned workflow, whose native npm CLI uses OIDC without a long-lived
write token or a second release command. - Require curated GitHub Release notes generated from each version's
highlights, structured changelog, known limitations, installation and
artifact details, local verification evidence, and full comparison link.
Removed
- Remove the legacy authenticated local
npm publishtransaction. npm
versions now derive only from checksum-verified GitHub Release assets. - Remove the GitHub Actions Linux CI workflow. Source, package, and current/6.6
LTS real-eBPF gates remain local (just verify,just test-package,
just test-vm);just release-githubreruns them locally before creating
the tag and publishing its archives and checksums.
Known limitations
- Native macOS support is not available yet.
Install
Download the archive and matching SHA-256 file for your Linux architecture.
Follow the versioned installation guide
for checksum verification, setup authorization, upgrade, and rollback.
Release artifacts
heimdall-egress-0.1.1-x86_64-linux-musl.tar.gzheimdall-egress-0.1.1-aarch64-linux-musl.tar.gzheimdall-egress-0.1.1.tgzfor npm trusted publishing- One SHA-256 file beside each archive
Verification
The release host completed the authoritative local source checks, current and
Linux 6.6 LTS real-eBPF VM suites sequentially, and both static package gates
before the tag or assets were published.