Skip to content

v1.2.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jul 22:07
· 233 commits to main since this release
v1.2.4
e5225fe
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

nSelf CLI v1.2.4

Channel: stable

Changelog

[1.2.4] — 2026-07-03

Fixed

  • License signature verification enabled in released binaries (CRITICAL) — the release workflow read the NSELF_LICENSE_PUBKEY_HEX secret to embed the Ed25519 license-verification key at build time, but the secret was never set in the repository, so every published binary shipped as a "dev build" with license signature verification disabled and printed a dev-build warning from nself version. The secret is now configured; binaries from this release on verify license signatures.
  • bundle info sentry alias miss — the sentry → nsentry alias added in 1.2.3 resolved for bundle install and bundle remove but not bundle info, which used a separate command-layer lookup. bundle info sentry now resolves to ɳSentry; listings and error hints still show only the canonical nsentry slug.
  • gofmt drift — three files merged unformatted; formatted so the CI gofmt gate stays green.

Commits since previous release

  • fix(bundle): info alias + gofmt + v1.2.4 bump (license-verify enabled release) (#175) (e5225fe)

Install

brew install nself-org/nself/nself
# or download a tarball below for your platform

Verify (Sigstore keyless)

cosign verify-blob \
  --bundle <tarball>.tar.gz.sig \
  --certificate-identity-regexp '^https://github.com/nself-org/cli/\.github/workflows/release\.yml@refs/tags/v1.2.4$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  <tarball>.tar.gz

Full signing + verification details: release-signing.md

Artifacts

  • Platform tarballs (linux/darwin × amd64/arm64) + Windows zips (amd64/arm64)
  • checksums.txt — SHA-256 of all tarballs
  • sbom.spdx.json + per-tarball SBOMs — SPDX software bill of materials
  • provenance.intoto.jsonl — SLSA v1.0 provenance attestation
  • *.sig — Sigstore cosign signature bundles for every artifact above
Assets 23
Loading