v1.2.7

nSelf CLI v1.2.7

Channel: stable

Commits since previous release

• chore: bump version to v1.2.7 (#240) (901a5ed)
• fix(embedded): derive __heap_base from the module's dylink.0 section (#239) (4ff7b35)
• fix(ssl): install issued certs where nginx actually reads them (#237) (e795eff)
• security(deps): migrate from lib/pq to jackc/pgx v5 (#236) (b86a3e2)
• fix(ci): stop the DR drill reminder opening duplicate issues (#235) (f190b1c)
• fix(ci): treat an already-published @nself/sdk version as a no-op (#234) (6efb2d7)

Install

brew install nself-org/nself/nself
# or download a tarball below for your platform

Verify (Sigstore keyless)

cosign verify-blob \
  --bundle <tarball>.tar.gz.sig \
  --certificate-identity-regexp '^https://github.com/nself-org/cli/\.github/workflows/release\.yml@refs/tags/v1.2.7$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  <tarball>.tar.gz

Full signing + verification details: release-signing.md

Artifacts

• Platform tarballs (linux/darwin × amd64/arm64) + Windows zips (amd64/arm64)
• checksums.txt — SHA-256 of all tarballs
• sbom.spdx.json + per-tarball SBOMs — SPDX software bill of materials
• provenance.intoto.jsonl — SLSA v1.0 provenance attestation
• *.sig — Sigstore cosign signature bundles for every artifact above