Skip to content

0.14.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Sep 14:12
· 36 commits to main since this release
v0.14.0
3cf9e7a

Added

  • A one-line installer for macOS and Linux, install.sh, published in the
    repo and now the first thing the README offers:
    curl -fsSL .../install.sh | sh. The Gatekeeper quarantine that makes an
    unsigned build open as "damaged" is attached by the browser, not by the
    format — curl never sets it — so an install that never goes through a
    browser opens on the first double click with no xattr -cr. It puts
    Cerberus.app in /Applications on macOS and the AppImage plus a desktop
    entry under ~/.local/share on Linux, re-runs as an update, refuses to swap a
    bundle out from under a running app, and verifies every download against the
    release checksums.

  • SHA256SUMS-<os>.txt on every release, uploaded by the build workflow
    after the installers land. The installer verifies against them, and a manual
    download can now be checked by hand.

  • A zip artifact for macOS alongside the .dmg, which is what the
    installer extracts — a disk image has to be mounted, an archive doesn't.

    Two things the script deliberately doesn't cover. Windows has no
    equivalent: SmartScreen isn't attached by the download the way the macOS
    quarantine is, so nothing short of a signing certificate removes that prompt —
    keep using the .exe. And Intel Macs still aren't built, so the script
    says so and stops rather than installing an Apple Silicon build that can't
    run. Both are unchanged from before, not new limits.

Changed

  • CI actions bumped off the Node 20 runtime — actions/checkout@v7,
    pnpm/action-setup@v6, actions/setup-node@v7, actions/upload-artifact@v7.
    Every run since 0.13.0 warned that these were being forced onto Node 24; that
    substitution is a grace period, not a contract, and the release build is what
    breaks when it ends. Behaviour is unchanged: the caching changes in
    setup-node v5/v6 only affect the automatic path, and this repo names
    cache: pnpm explicitly.
  • The README's install section leads with the script and demotes the direct
    downloads, and the quarantine note now says why it happens and that macOS 15
    moved "Open Anyway" into System Settings. The old right-click → Open it used
    to imply stopped working there.

Full changelog: v0.13.0...v0.14.0

Assets 16
Loading