0.1.1-beta.1 - 2026-10-28

Release Notes

Added

• The registry URL may carry the token in its userinfo, Composer style:
  https://<login>:<password>@packages.example.com/ (both parts percent-decoded). The
  credentials need a login and a password, are refused over plain http except for
  localhost/127.0.0.1, and are stripped from the URL before it is used or printed.
  --oidc still wins; an explicit --token/REGISTRY_TOKEN that differs from the URL's
  credentials is an error. sreg auth writes the URL's credentials, and the GitHub
  Action skips OIDC when registry carries them.
• sreg generic get <name> <constraint>: a version that is not an exact semver version
  (^1.2, ">=1 <2", 1.x) is a constraint resolved by the registry
  (GET /generic/<name>/latest?version=<constraint>, with --prerelease and the label
  filters); the resolved version is printed on stderr and --json prints the feed
  document.
• sreg generic get --sole: fail unless the label filter selects exactly one file. The
  registry's GET /generic/<name>/<version|latest>/-/download redirects to that file and
  names it in X-Resolved-Version and X-Resolved-File; the file is still verified
  against the size and SHA-256 of its feed entry. 409 ambiguous lists the candidate
  files and exits with 1; --out may name a file path instead of a directory.
• Bump and release workflow (.github/workflows/bump-and-release.yml, started by hand
  on main): computes the next version (prerelease, patch, minor, release,
  custom, …) with the dependency-free scripts/bump-version.mjs, sets it in
  Cargo.toml and Cargo.lock, rolls CHANGELOG.md, commits and tags v<version> and
  starts the cargo-dist Release workflow for the tag.
• cargo-dist post-announce job (.github/workflows/release-action.yml): after a stable
  release it starts the Release workflow of
  kduma-OSS/serverless-registry-publish-action with the new version as the action's
  default sreg-version, authenticated as a GitHub App (repository secrets
  SERVERLESS_REGISTRY_RELEASE_APP_ID and SERVERLESS_REGISTRY_RELEASE_APP_PRIVATE_KEY).
  Without them it only prints a notice; the action repository's hourly sync then picks
  the release up.

Changed

• The GitHub Action moved to
  kduma-OSS/serverless-registry-publish-action
  (uses: kduma-OSS/serverless-registry-publish-action@v1), with its history; it is
  versioned and released there, and the action/ directory and action/VERSION are gone.

Install sreg-cli 0.1.1-beta.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/kduma-OSS/serverless-registry-cli/releases/download/v0.1.1-beta.1/sreg-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/kduma-OSS/serverless-registry-cli/releases/download/v0.1.1-beta.1/sreg-cli-installer.ps1 | iex"

Download sreg-cli 0.1.1-beta.1

File	Platform	Checksum
sreg-cli-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
sreg-cli-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
sreg-cli-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
sreg-cli-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
sreg-cli-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
sreg-cli-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum