Skip to content

0.3.0

Choose a tag to compare

@github-actions github-actions released this 30 Jun 22:19

Release Notes

Added

  • vallum doctor — install/health self-check that validates the config file,
    flags unknown [optimizer] disabled names, reports whether the Claude Code
    hook is installed, checks that a vallum binary is on PATH, and probes the
    log directory for writability. Exits non-zero only on a hard failure.
  • kubectl get optimizer — collapses runs of healthy (Running/Completed)
    resource rows while keeping the header and any pod in a problem state
    (CrashLoopBackOff, Pending, Evicted, …).
  • terraform plan|apply optimizer — collapses state-refresh chatter and
    attribute-diff bodies while keeping per-resource action headers, the
    Plan:/Apply complete! summary, and errors.
  • Expanded secret-format coverage: GitLab (glpat-), SendGrid (SG.),
    Twilio (SK…), npm (npm_), PyPI (pypi-), Hugging Face (hf_), OpenAI
    project keys (sk-proj-), and bare (non-Bearer) JWTs.

Changed

  • Documented a minimum supported Rust version (rust-version = "1.85", raised
    from 1.82 to track the clap 4.6 edition-2024 floor) and enforce it with a
    dedicated, --locked CI job.

Security

  • New scheduled cargo audit GitHub Actions workflow that fails on known
    advisories in the dependency tree. Granted it checks: write so it can post
    results instead of erroring on the check-run API.
  • Bumped the anyhow dev-dependency to 1.0.103, clearing RUSTSEC-2026-0190
    (unsoundness in Error::downcast_mut).

Distribution

  • Prebuilt binaries for macOS (Intel + ARM) and Linux (x86_64 + aarch64, musl
    static) published on tagged releases via dist, with shell, Homebrew,
    cargo install, and npm installers, SHA-256 checksums, and GitHub build
    provenance attestations.

Install vallum 0.3.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/kahramanemir/Vallum/releases/download/v0.3.0/vallum-installer.sh | sh

Install prebuilt binaries via Homebrew

brew install kahramanemir/tap/vallum

Install prebuilt binaries into your npm project

npm install vallum@0.3.0

Download vallum 0.3.0

File Platform Checksum
vallum-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
vallum-x86_64-apple-darwin.tar.xz Intel macOS checksum
vallum-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
vallum-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo kahramanemir/Vallum

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>