Skip to content

v0.1.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 09:38
v0.1.5
c7ea7f5

Security

  • Updated TLS and crypto dependencies for seven recent advisories: rustls 0.23.46 (RUSTSEC-2026-0346, -0347, -0348, -0349), rustls-webpki 0.103.16 (RUSTSEC-2026-0382), webpki-root-certs 1.0.11 (RUSTSEC-2026-0383) and ctutils 0.4.5 (RUSTSEC-2026-0385). None of them looks exploitable in faro as it's used (faro doesn't use the affected TLS features, and Signal's connections only trust Signal's own certificate), but updating is recommended.

Build and release

  • Every push is now checked for known vulnerabilities, licences and dependency sources (cargo deny), and dependency updates arrive as weekly pull requests.
  • Release archives now come with signed build provenance. Check that an archive was built by this repository's CI from this tag with: 
    gh attestation verify faro-x86_64-unknown-linux-gnu.tar.xz -R harababurel/faro

Install faro 0.1.5

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.5

File Platform Checksum
faro-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
faro-x86_64-apple-darwin.tar.xz Intel macOS checksum
faro-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
faro-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo harababurel/faro

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo harababurel/faro
Assets 17
Loading