Skip to content

no_human 0.1.2

Choose a tag to compare

View all tags
@eyalgolan eyalgolan released this 20 Aug 15:14
v0.1.2
c7ee9e0

Security and release-infrastructure release. Same product as 0.1.1, patched runtime, and — unlike 0.1.1, which shipped macOS only — an artifact for every platform, all built from one commit (d1d0adc).

Dependency security. Electron moves to 38.8.6 (the last 38.x), clearing every advisory patched within the current major; js-yaml 4.3.1, fast-uri 3.1.5, undici 6.28.0, postcss 8.5.26, mcp 1.29.0 and cryptography 50.0.0 likewise. 21 of the repository's 40 open Dependabot alerts closed by measurement, not estimate; 19 remain, stated plainly rather than left implicit: 5 are high severity (4 in the bundled Electron 38.8.6 runtime this release ships inside the desktop apps, 1 in extract-zip, which has no patched version in existence), 18 of the 19 are fixed only by the Electron 39 major — a bump deliberately deferred to its own release rather than taken hours before this one. Known, tracked, and a deliberate call.

Release infrastructure. The Windows job gains the same on-demand release lane the Linux job has (workflow_dispatch + windows_release): build, verify against the tree that built it, checksum, bounded-retention artifact. Windows bundles now carry the same BUILD_STAMP provenance (commit=/dirty=/board_sha256=) POSIX builds have had since the stale-DMG incident — an absent stamp fails verification rather than passing quietly.

Downloads

  • macOS (Apple silicon) — no_human-0.1.2.dmg. Signed and notarized; drag to Applications. (no_human-0.1.2-arm64-mac.zip + latest-mac.yml also attach — they are the in-app update-notification feed, not the download.) SHA256SUMS-macos.txt covers both.
  • Windows (x64) — no_human-0.1.2-UNSIGNED.exe (or the .zip). Not code-signed yet: SmartScreen warns; choose More info → Run anyway. SHA256SUMS-windows.txt covers both.
  • Linux (x64) — no_human-0.1.2-linux-amd64.deb (recommended) or the .AppImage. SHA256SUMS-linux.txt covers both.
  • Python wheel — no_human-0.1.2-py3-none-any.whl (board embedded as package data; pip install <wheel-url> gives a working nh with the web UI, no Node needed).

Every artifact's SHA-256 ships alongside it. Built by the repository's public CI (Linux/Windows, run 32370112386) and the documented signing pipeline (macOS); each bundle's BUILD_STAMP names commit d1d0adc862c6, dirty=no.

Assets 13
Loading