Heimdall v0.1.3

Changes

Highlights

• Publish the official heimdall CLI as the heimdall-egress source crate,
  with no install-time downloader, lifecycle script, or daemon.
• Preserve local release authority by attaching checksum-verified Cargo
  packages to GitHub Releases and reproducing them before any OIDC upload.
• Add one-time crates.io Trusted Publisher setup so routine releases use a
  short-lived GitHub OIDC credential instead of a stored registry token.

Added

• Add publishable heimdall-common, heimdall-config, and heimdall-egress
  crates with complete registry metadata and a project-owned crates.io landing
  page.
• Add Cargo package acceptance for archive inventory, metadata, landing-page
  content, and byte equality between the packaged eBPF ELF and its pinned Nix
  build.

Changed

• Embed the locally verified eBPF object from a versioned crate resource so
  cargo install heimdall-egress --locked needs only stable Rust 1.95 and does
  not require an eBPF compiler at installation time.
• Extend the GitHub Release transaction with three .crate assets and their
  SHA-256 files. The thin Cargo workflow reproduces those packages from the
  immutable tag before publishing the dependency crates and CLI in order.
• Document Cargo installation, source-package architecture, first-publication
  bootstrap, subsequent OIDC publication, and independent fresh-install
  acceptance.

Known limitations

• Native macOS support is not available yet.
• Cargo installation compiles the userspace CLI locally and therefore takes
  longer than installing the prebuilt npm, PyPI, or GitHub Release packages.

Install

Download the archive and matching SHA-256 file for your Linux architecture.
Follow the versioned installation guide
for checksum verification, setup authorization, upgrade, and rollback.

Release artifacts

• heimdall-egress-0.1.3-x86_64-linux-musl.tar.gz
• heimdall-egress-0.1.3-aarch64-linux-musl.tar.gz
• heimdall-egress-0.1.3.tgz for npm trusted publishing
• x86_64 and aarch64 heimdall_egress-0.1.3-*.whl files for PyPI
  trusted publishing
• heimdall-common-0.1.3.crate, heimdall-config-0.1.3.crate, and
  heimdall-egress-0.1.3.crate for crates.io publication
• One SHA-256 file beside each archive

Verification

The release host completed the authoritative local source checks, current and
Linux 6.6 LTS real-eBPF VM suites sequentially, and native, npm, PyPI, and Cargo
package gates before the tag or assets were published.

Full changelog

Compare the complete Git history.