2.3.2

Durable Workflow CLI 2.3.2 rebuilds all four standalone targets with pinned OpenSSL 3.5.9 LTS. PHP remains 8.4.27; Unix builds retain libcurl 8.23.0 and Windows retains its streams transport.

Each standalone binary includes a public .dependencies.json inventory covering loaded OpenSSL, headers and available library versions. Inventories join the normal SHA256SUMS and artifact-attestation set. Native builds verify the exact dependency policy after both cold compilation and trusted cache restoration, then exercise outbound HTTPS before publication.

Assets include the portable PHAR, Linux x86_64/arm64, macOS arm64 and Windows x86_64 standalone binaries, POSIX/PowerShell installers, Homebrew formula, checksums and verification helper. Verify downloads with verify-release.sh; use --attest with a current GitHub CLI for provenance verification.

• Pinned OpenSSL LTS and runtime inventories (#68)
• Native HTTPS release checks (#69)
• Successful release and public-download verification

Full changelog