Skip to content

zy v1.0.39

Choose a tag to compare

@iskandarputra iskandarputra released this 02 Jun 16:28

Official binary release for zy 1.0.39.

What's changed

Reliability & correctness

  • Resolved 23 defects found in a full source-code review (ZY-001–021): memory-safety overflows in the parser and stor create, a data race in the fff grep engine, git prompt modules not rendering with async = true, the two-argument slice <start> <end> form, a JSON out-of-bounds read, with-env exit-status propagation, a safer cp, valid YAML string escaping, and more.

Security

  • Hardened sys migrate import against shell-injection via crafted archive or path names.
  • Crash reports (~/.zy/crash.log, owner-only) now capture recent log context for faster diagnosis — no additional data is exposed.

Packaging

  • The Debian package now declares its complete runtime dependencies (derived from the binary with dpkg-shlibdeps), so a clean dpkg -i or apt install pulls every library zy needs.

Under the hood

  • Central structured logging with crash-context capture, a leaner documentation tree, and new maintainer release tooling.

Verify your download

curl -LO https://github.com/iskandarputra/zyshell/releases/download/v1.0.39/zy_1.0.39_amd64.deb
curl -LO https://github.com/iskandarputra/zyshell/releases/download/v1.0.39/SHA256SUMS
curl -LO https://github.com/iskandarputra/zyshell/releases/download/v1.0.39/SHA256SUMS.minisig
curl -LO https://github.com/iskandarputra/zyshell/releases/download/v1.0.39/zy-release.pub

minisign -Vm SHA256SUMS -p zy-release.pub      # confirms maintainer signature
sha256sum -c SHA256SUMS --ignore-missing       # confirms the .deb hash matches

Full signing policy: docs/ops/RELEASE_SIGNING.md

VirusTotal scan

This release was uploaded to VirusTotal at publish time. Click through to see the live verdict from 65+ AV engines:

https://www.virustotal.com/gui/file/7058f5f9e03db3f125fcb9f8465987682e2a15b93a3da58c16981cf6c5016fc8/detection

(Scans run within ~5 minutes of upload. If the page shows "Item not found", wait a moment and refresh.)

Try without installing

docker run --rm -it ghcr.io/iskandarputra/zyshell:1.0.39

Install (Debian / Ubuntu)

The recommended path is the zy APT repository which handles upgrades automatically:

curl -1sLf 'https://dl.cloudsmith.io/public/iskandarputra/zyshell/setup.deb.sh' | sudo -E bash
sudo apt install zy

Or direct .deb install:

sudo dpkg -i zy_1.0.39_amd64.deb
sudo apt-get install -f