Skip to content

v1.2.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Aug 19:50
· 179 commits to main since this release
v1.2.6
342dcc9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

nSelf CLI v1.2.6

Channel: stable

Commits since previous release

  • security(ci): route every govulncheck call site through one allowlist gate (#233) (342dcc9)
  • chore: bump version to v1.2.6 (#230) (dcfc488)
  • fix(embedded): initialise __stack_pointer to the top of memory, not 0 (#229) (c0def71)
  • fix(embedded): raise pglite boot bound to fit the job budget (#221) (8e12e72)
  • chore(deps)(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#228) (4943d67)
  • chore(deps)(deps): bump github.com/mark3labs/mcp-go (#227) (6e52aba)
  • ci(deps): bump docker/setup-qemu-action from 3 to 4 (#226) (80f5859)
  • ci(deps): bump actions/setup-go from 4 to 7 (#225) (708e4e1)
  • ci(deps): bump softprops/action-gh-release from 2 to 3 (#224) (ca586c9)
  • ci(deps): bump actions/setup-node from 4 to 7 (#223) (bf78f11)
  • ci(deps): bump docker/setup-buildx-action from 3 to 4 (#222) (0e68cd1)
  • chore(cli): docs.nself.org -> nself.org/docs (docs moved to /docs) (#220) (18e5565)
  • fix(ci): make doc-audit autofix strictly opt-in (#219) (1f6e217)
  • fix(ci): install nself audit tool to a user-writable path, not /usr/local/bin (#218) (d8bc3be)
  • fix(ci): use .git/info/attributes override instead of mutating git config (#217) (7847e1a)
  • fix(audit): stop --fix mangling prose by deleting adjectives (#216) (3141558)
  • fix(ci): drop permanently-unmatchable JSON-findings pathspec from add-paths (#215) (529f277)
  • fix(ci): quarterly-doc-audit hardening — defensive lfs filter disable + drop unmatched mdx pathspec (#214) (c8c1efe)
  • fix(ci): strip nested dir when extracting nself release tarball in quarterly-doc-audit (#213) (22d715d)
  • chore(deps)(deps): bump go.opentelemetry.io/otel/sdk (#206) (056b204)
  • ci: don't fail the auto-merge job when repo-level auto-merge is unavailable (#212) (93f0be8)
  • ci: auto-merge Dependabot patch-level security updates (#211) (59f1954)
  • ci(deps): bump actions/setup-python from 5 to 7 (#182) (0b4580a)
  • chore(deps)(deps): bump github.com/prometheus/client_golang (#204) (fd6c0c5)
  • ci(deps): bump actions/download-artifact from 4.1.3 to 8.0.1 (#181) (d28b2ec)
  • ci(deps): bump docker/build-push-action from 6 to 7 (#183) (1554fea)
  • ci(deps): bump peter-evans/create-pull-request from 6 to 8 (#184) (ccb56aa)
  • ci(deps): bump actions/checkout from 4 to 7 (#185) (a5cd119)
  • chore(deps)(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 (#195) (011c9e2)
  • chore(deps)(deps): bump github.com/mark3labs/mcp-go (#203) (af4a533)
  • fix(ci): move cli off self-hosted runners onto GitHub-hosted (#209) (cd15e98)
  • fix(deps): bump golang.org/x/net to v0.56.0, clear GO-2026-5942 (#208) (2e91bf2)
  • fix(ci): pin go 1.26.6 in go.mod directive; widen embedded-PG boot budget (#210) (14693d6)
  • fix(deps): bump Go toolchain to 1.26.6, clear govulncheck findings (#207) (528efd0)
  • fix(ci): run E2E Golden Path on self-hosted (real docker, not DinD) (#197) (201dfb2)
  • fix(ci): SDK Python Publish uses token as primary (drop unconfigured OIDC) (#194) (2ff4802)
  • fix(e2e): golden-path skips AI auto-install (ollama) in CI (#193) (5106802)
  • fix(nginx): add HSTS to the security-headers block generator (#192) (89070de)
  • fix(e2e): golden-path uses 'testproject' (no hyphen) — project name becomes the DB name, and hyphens are invalid SQL identifiers (step 5: 'invalid database name ... test-project') (#191) (e3ea2e6)
  • fix(e2e): golden-path uses 'nself start' (no --detach flag) (#190) (8e7a178)

Install

brew install nself-org/nself/nself
# or download a tarball below for your platform

Verify (Sigstore keyless)

cosign verify-blob \
  --bundle <tarball>.tar.gz.sig \
  --certificate-identity-regexp '^https://github.com/nself-org/cli/\.github/workflows/release\.yml@refs/tags/v1.2.6$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  <tarball>.tar.gz

Full signing + verification details: release-signing.md

Artifacts

  • Platform tarballs (linux/darwin × amd64/arm64) + Windows zips (amd64/arm64)
  • checksums.txt — SHA-256 of all tarballs
  • sbom.spdx.json + per-tarball SBOMs — SPDX software bill of materials
  • provenance.intoto.jsonl — SLSA v1.0 provenance attestation
  • *.sig — Sigstore cosign signature bundles for every artifact above
Assets 24
Loading