v3.11.0

Install the gone CLI

Download the archive for your platform, verify it, and put gone on your PATH:

TAG=v3.11.0
ARCHIVE=gone_${TAG}_linux_amd64.tar.gz   # or darwin_arm64, windows_amd64.zip, ...
curl -fsSLO "https://github.com/haukened/gone/releases/download/${TAG}/${ARCHIVE}"
curl -fsSLO "https://github.com/haukened/gone/releases/download/${TAG}/SHA256SUMS"
gh attestation verify "$ARCHIVE" --repo haukened/gone
sha256sum --ignore-missing -c SHA256SUMS   # macOS: shasum -a 256 --ignore-missing -c SHA256SUMS
tar -xzf "$ARCHIVE" && install -m 0755 "${ARCHIVE%.tar.gz}/gone" ~/.local/bin/gone

The signed build provenance is also attached as gone_v3.11.0.sigstore.json, for offline checks with gh attestation verify "$ARCHIVE" --repo haukened/gone --bundle gone_v3.11.0.sigstore.json. The same signed provenance statement is in gone_v3.11.0.intoto.jsonl (an in-toto DSSE envelope).

See docs/cli.md for usage. The server image is published to ghcr.io/haukened/gone:v3.11.0.

What's Changed

• docs: split the README into topic pages, bring every doc up to date by @haukened in #82
• test: browser end-to-end tests in CI, and fix raw message keys they found by @haukened in #81
• docs: reject Slack/Teams sending and emailing the link by @haukened in #85
• fix(store): keep Reconcile from deleting blobs of pending saves by @haukened in #86
• fix(web): keep preview modes out of production builds by @haukened in #87
• test(protocol): Go/JS differential harness, fuzz targets, strict v3 keys by @haukened in #88
• ci: gate image releases, scope the Codacy token, verify downloaded tools by @haukened in #89
• fix(cli): trust only the configured server's links; harden names and output by @haukened in #91
• build(deps): bump golang from 58f9e29 to 14f0d1c in the base-images group across 1 directory by @dependabot[bot] in #83
• build(deps-dev): bump @playwright/test from 1.63.0 to 1.64.0 in /test/e2e in the e2e group across 1 directory by @dependabot[bot] in #84
• fix(httpx): harden the HTTP surface and scope secret routes to secrets by @haukened in #92
• test(e2e): run the browser suite over TLS with rate limits on; drop the fragment once read by @haukened in #93

Full Changelog: v3.10.3...v3.11.0