Termesh 0.1.2

Fixed

• termesh --version printed termesh 0.1.1 (unknown) for any binary not built by CI, including
  every cargo install. The parenthetical is the commit the build was stamped with, which only a
  release build has; "unknown" read like a fault rather than the ordinary case. A build with no
  commit now prints the version and stops. Release binaries are unchanged and still carry the
  short commit.

Changed

• The macOS binaries are now signed with a Developer ID certificate and notarized by Apple,
  with the hardened runtime and a secure timestamp. A browser download no longer needs
  xattr -d com.apple.quarantine — verified by quarantining a build exactly as Safari does and
  running it, against the 0.1.0 binary given the same treatment, which Gatekeeper kills. The
  release workflow signs whenever the credentials are present and now refuses a half-configured
  setup, because signing without notarizing produces a binary Gatekeeper still rejects from a run
  that otherwise looks successful. The Windows binaries remain unsigned.

This is the first release whose macOS artifacts are signed, so upgrading is worthwhile if you
installed from a downloaded archive: 0.1.0 and 0.1.1 shipped unsigned and cannot be re-signed. If
you cleared the quarantine attribute by hand on an earlier download, that is no longer necessary.

Install

Prebuilt binaries for Linux (x86-64, AArch64), macOS (Intel, Apple Silicon), and Windows (x86-64)
are attached to this release, with SHA256SUMS. From source:

cargo install termesh --locked

Requires Rust 1.88 or newer.