Skip to content

v0.4.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jun 23:00
· 52 commits to main since this release
v0.4.2
This tag was signed with the committer’s verified signature.
indigo423 Ronny Trommer
GPG key ID: F4605AE49F373A6A
Verified
Learn about vigilant mode.
12e0192
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Maintenance and supply-chain hardening release. No CLI, config, or schema changes — a drop-in upgrade from v0.4.1.

Security

  • Bump anyhow → 1.0.103, clearing a freshly-disclosed RUSTSEC advisory (dtolnay/anyhow#451). Also bumps zeroize → 1.9.0.

Build & CI

  • Pinned runner images — all GitHub Actions jobs now run on explicit versions (ubuntu-24.04, macos-26) instead of floating -latest labels, so the release environment can't shift between tags (#62).
  • Refreshed pinned CI action SHAs (checkout, docker buildx/qemu/metadata/login/build-push) via Dependabot.

Docs

  • Corrected container image tag references (no leading v) and synced README version strings.

Artifacts

Four signed static binaries (Linux/macOS × x86_64/aarch64), per-binary SHA256 checksums plus an aggregate SHA256SUMS, a CycloneDX SBOM, and Sigstore cosign signatures (.sig/.pem). Verification recipe in RELEASING.md.

Assets 24
Loading