Repository navigation
Features
- network,compute: extended port bindings and request IDs of migrations (#76)
Build & tooling
- release: dry-run builds the tag's source but runs the helper scripts from its own ref (#75)
- release: gate releases on green mainline CI, pin the toolchain, anchor the signing identity (#74)
Full Changelog: v0.44.0...v0.45.0
Build inputs
| Input | Value |
|---|---|
| Tag | v0.45.0 |
| Commit | 5507fa766d819d761e5236bb07b0a61ea54fa646 |
| Commit time (UTC) | 2026-11-11T18:42:39Z |
| Go (pinned) | 1.27.4 |
| Go (ran) | go version go1.27.4 linux/amd64 |
| GoReleaser (pinned) | v2.20.1 |
| cosign (pinned) | v3.1.4 |
| cosign (ran) | GitVersion: v3.1.4 |
| syft (pinned) | v1.54.0 |
| syft (ran) | syft 1.54.0 |
| Runner image | ubuntu26 20261101.186.1 |
| Build flags | GOFLAGS=-mod=vendor GOPROXY=off CGO_ENABLED=0 |
| go.sum sha256 | 30205f04999cc77eb7a4e19ca9be41e1a46ad005003fee8bd808a1d49cd78988 |
| vendor/modules.txt sha256 | 58bab83b3a04eefa76424ed51196a30ce4fb0c0a289c1ff75a5231f97cfa45b0 |
Rebuild: check out the tag, install the pinned Go and GoReleaser, run
make completions, then HOMEBREW_TAP_TOKEN=unused goreleaser release --clean --skip=publish,sign.
Binaries, archives and packages are pinned to the commit time and are expected to match
checksums.txt; the signature never will (it is keyless), and the SBOM bundle also
depends on the syft version above.