Voltron (Voltron: Defender of the Universe, 1984, World Events Productions) — five lion ships that pilot independently until they combine into a single giant defender. This patch does the same to the installer: two drifting version knobs, a config ref and an image tag, unite into one
CURIA_VERSION.
v0.40.1 is a small, focused patch that cleans up how the self-host installer picks a version. Until now install.sh carried two separate version dials that could quietly disagree: one chose which config files to download, the other which container image to run. They could drift apart, and the download instructions in the README and the docs even pointed at different places.
Now there is a single knob. CURIA_VERSION (default latest) selects a release, and both the config files and the app image come from that same release. Pin a specific version with CURIA_VERSION=v0.40.1, or track the bleeding edge with CURIA_VERSION=edge. No more per-release edits to the installer.
As part of this, every release now ships a cosign-signed install bundle: the installer plus its compose and env files, covered by a single signed SHA256SUMS manifest. The config an operator downloads is now verifiable, not just the source tarball and SBOM.
Many dials, now one.
The config and the image
answer the same call.