Skip to content

v1.4.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Aug 16:54
· 12 commits to master since this release
v1.4.0
This tag was signed with the committer’s verified signature.
lexfrei Aleksei Sviridkin
GPG key ID: 7988329FDF395282
Verified
Learn about vigilant mode.
4cee20c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 🐛 tools: stop reporting an unverifiable count from tg_messages_delete (#159)
  • ✨ tools: let tg_messages_delete reach the scheduled queue (#156)
  • ✨ config: replace MCP roots with the TELEGRAM_FILE_ROOTS allowlist (#133)
  • 🔄 install: lead with two-command setup and add agent setup page (#135)

Container Image

docker pull ghcr.io/lexfrei/mcp-tg:v1.4.0

Verify the Container

cosign verify \
  ghcr.io/lexfrei/mcp-tg:v1.4.0 \
  --certificate-identity-regexp='^https://github.com/lexfrei/mcp-tg/\.github/workflows/release\.yml@refs/tags/v' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify the Binaries

The checksums file is signed; the archives are covered by it. Needs cosign v3+ (the bundle format).

cosign verify-blob checksums.txt \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp='^https://github.com/lexfrei/mcp-tg/\.github/workflows/release\.yml@refs/tags/v' \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

shasum --algorithm 256 --check --ignore-missing checksums.txt  # sha256sum on Linux
Assets 10
Loading