Skip to content

v1.3.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Aug 03:27
· 163 commits to main since this release
v1.3.3
0dbd2f3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

nSelf CLI v1.3.3

Channel: stable

Changelog

[1.3.3] — 2026-08-26

Plugin lifecycle fixes, all found by installing and removing plugins end to end
rather than by reading code.

Fixed

  • nself remove left the command working. The function that unpublishes a
    plugin's command binary had existed since the install side was written and was
    never called from anywhere, so nself remove foo followed by nself foo
    still ran the removed plugin.
  • Removing a command-line plugin required Docker and Postgres. The schema
    drop ran unconditionally, so a plugin that installs fine on a machine with no
    stack could never be removed from it.
  • An installed plugin's manifest was never being read. Release tarballs
    carry a leading directory and extraction keeps it, so the manifest sits
    nested; the lookup only checked the root and returned nothing for every plugin
    installed from a release. Each caller then silently used its fallback — which
    is why removal demanded a database it did not need. This is the cause under
    the two fixes above.
  • A third-party CLI plugin installed and its command did not exist, and
    installing a third-party plugin with no tables required Docker. Two fixes
    previously made to the registry install path had never been made to the
    third-party one.

Changed

  • The install, third-party install and remove paths are now covered by a parity
    test that asserts none of them forgets a step its siblings perform. Every bug
    in this release is one path having drifted from another, which is not
    something a per-path test can see.

Commits since previous release

  • Bump to 1.3.3 (#255) (0dbd2f3)
  • Make nself remove actually remove the command (#254) (87dab7f)
  • Fix the third-party install path, which had missed two fixes (#253) (dc8b24c)

Install

brew install nself-org/nself/nself
# or download a tarball below for your platform

Verify (Sigstore keyless)

cosign verify-blob \
  --bundle <tarball>.tar.gz.sig \
  --certificate-identity-regexp '^https://github.com/nself-org/cli/\.github/workflows/release\.yml@refs/tags/v1.3.3$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  <tarball>.tar.gz

Full signing + verification details: release-signing.md

Artifacts

  • Platform tarballs (linux/darwin × amd64/arm64) + Windows zips (amd64/arm64)
  • checksums.txt — SHA-256 of all tarballs
  • sbom.spdx.json + per-tarball SBOMs — SPDX software bill of materials
  • provenance.intoto.jsonl — SLSA v1.0 provenance attestation
  • *.sig — Sigstore cosign signature bundles for every artifact above
Assets 23
Loading