v3.12.0

Install the gone CLI

Download the archive for your platform, verify it, and put gone on your PATH:

TAG=v3.12.0
ARCHIVE=gone_${TAG}_linux_amd64.tar.gz   # or darwin_arm64, windows_amd64.zip, ...
curl -fsSLO "https://github.com/haukened/gone/releases/download/${TAG}/${ARCHIVE}"
curl -fsSLO "https://github.com/haukened/gone/releases/download/${TAG}/SHA256SUMS"
gh attestation verify "$ARCHIVE" --repo haukened/gone
sha256sum --ignore-missing -c SHA256SUMS   # macOS: shasum -a 256 --ignore-missing -c SHA256SUMS
tar -xzf "$ARCHIVE" && install -m 0755 "${ARCHIVE%.tar.gz}/gone" ~/.local/bin/gone

The signed build provenance is also attached as gone_v3.12.0.sigstore.json, for offline checks with gh attestation verify "$ARCHIVE" --repo haukened/gone --bundle gone_v3.12.0.sigstore.json. The same signed provenance statement is in gone_v3.12.0.intoto.jsonl (an in-toto DSSE envelope).

See docs/cli.md for usage. The server image is published to ghcr.io/haukened/gone:v3.12.0.

What's Changed

• chore: move JavaScript linting to eslint 10 flat config by @haukened in #94
• docs: bring the docs up to date with v3.11.0 by @haukened in #95
• feat: operator policies to require a passphrase and limit files by @haukened in #96
• Create FUNDING.yml by @haukened in #97
• feat: operator branding and footer links by @haukened in #98
• feat: keep every page out of search engines by @haukened in #99
• feat: sign-in for private instances by @haukened in #100
• docs: bring the docs up to date with v3.12.0 by @haukened in #101
• fix: pre-release review findings, link fuzz failure and OSV-Scanner exit by @haukened in #102
• docs: mark sign-in providers that are built but untested by @haukened in #103

Full Changelog: v3.11.0...v3.12.0