0.4.0
Changelog
Verification
Every release artefact is signed via cosign keyless OIDC. To verify:
cosign verify-blob \
--certificate-identity-regexp "https://github.com/frankenpress/fp/.github/workflows/release.yaml@.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--cert checksums.txt.pem \
--signature checksums.txt.sig \
checksums.txt