0.3.0
Release Notes
Added
vallum doctor— install/health self-check that validates the config file,
flags unknown[optimizer] disablednames, reports whether the Claude Code
hook is installed, checks that avallumbinary is onPATH, and probes the
log directory for writability. Exits non-zero only on a hard failure.kubectl getoptimizer — collapses runs of healthy (Running/Completed)
resource rows while keeping the header and any pod in a problem state
(CrashLoopBackOff,Pending,Evicted, …).terraform plan|applyoptimizer — collapses state-refresh chatter and
attribute-diff bodies while keeping per-resource action headers, the
Plan:/Apply complete!summary, and errors.- Expanded secret-format coverage: GitLab (
glpat-), SendGrid (SG.),
Twilio (SK…), npm (npm_), PyPI (pypi-), Hugging Face (hf_), OpenAI
project keys (sk-proj-), and bare (non-Bearer) JWTs.
Changed
- Documented a minimum supported Rust version (
rust-version = "1.85", raised
from 1.82 to track theclap4.6 edition-2024 floor) and enforce it with a
dedicated,--lockedCI job.
Security
- New scheduled
cargo auditGitHub Actions workflow that fails on known
advisories in the dependency tree. Granted itchecks: writeso it can post
results instead of erroring on the check-run API. - Bumped the
anyhowdev-dependency to 1.0.103, clearing RUSTSEC-2026-0190
(unsoundness inError::downcast_mut).
Distribution
- Prebuilt binaries for macOS (Intel + ARM) and Linux (x86_64 + aarch64, musl
static) published on tagged releases viadist, with shell, Homebrew,
cargo install, and npm installers, SHA-256 checksums, and GitHub build
provenance attestations.
Install vallum 0.3.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/kahramanemir/Vallum/releases/download/v0.3.0/vallum-installer.sh | shInstall prebuilt binaries via Homebrew
brew install kahramanemir/tap/vallumInstall prebuilt binaries into your npm project
npm install vallum@0.3.0Download vallum 0.3.0
| File | Platform | Checksum |
|---|---|---|
| vallum-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| vallum-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| vallum-aarch64-unknown-linux-musl.tar.xz | ARM64 MUSL Linux | checksum |
| vallum-x86_64-unknown-linux-musl.tar.xz | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo kahramanemir/VallumYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>