v1.12.1

1.12.1 - 2026-10-23

Highlights: Security-patched Node runtimes and refreshed Go snapshot CI.

• Pin Node runtime defaults and verification jobs to security-patched releases and update snapshot CI to Go 1.27.3; thanks @joshavant.

v1.12.0

1.12.0 - 2026-10-20

Highlights: Verified generated source assets, more resilient artifact transfers, and keyless ClawSweeper dispatch.

• Support one caller-generated source release asset, optionally consuming a qualified same-run artifact, through the existing read-only build, immutable artifact transport and independent checksum verification. Preserve source-only defaults and leave package qualification and Homebrew activation with callers; thanks @vincentkoc.
• Update Node setup to v7.1.0, artifact upload/download to v7.0.2/v8.0.2, and the GoReleaser action to v7.3.0; retain immutable pins and gain artifact rate-limit retries and current transitive fixes.
• Remove target-side App credentials from ClawSweeper dispatch; use OIDC intake with independent webhook delivery and retryable transient failures.

v1.11.8

1.11.8 - 2026-10-18

• Trust only the exact Swift CLI Linux container checkout before dependency preparation so Git ownership checks do not block the release lockfile check.

v1.11.7

1.11.7 - 2026-10-18

• Move all macOS release builds, signing, CI, and independent verification to the GA xcode-27 runners; verify x86_64 with Rosetta, preserve caller deployment targets and legacy v1 runner inputs, and keep Sparkle's three attestations distinct by verifier identity.

v1.11.6

1.11.6 - 2026-10-16

• Add Swift CLI dry runs that sign, notarize, and independently verify current protected main without release writes, with optional helper dylib, Linux archive, and resource bundles; support macOS-only signed-tag callers and configurable macOS verification hosts.

v1.11.5

1.11.5 - 2026-10-16

• Preflight npm trusted-publisher exchange before publishing any package, with package-specific recovery instructions for expired trust records, and document the 2-day unused-record expiry.
• Retry Sparkle and Electron stapler validate only on transient Apple ticket-lookup network errors, with bounded backoff; other validation failures still fail immediately.
• Require fleet-signed tags for this repository's releases and verify them against the checked-in release-key allowlist.

v1.11.4

1.11.4 - 2026-10-12

• Preserve repeated historical Sparkle appcast build numbers while requiring every new release to exceed all published builds and use a new version.
• Accept zippered macOS/Mac Catalyst libraries in Sparkle deployment checks and Swift runtime audits while requiring a valid macOS minimum in every slice.

v1.11.3

1.11.3 - 2026-10-12

• Add the approval-gated sparkle-app release archetype with signed and notarized app/DMG/CLI assets, preserved and independently verified Downloader entitlements, early rejection of signed-feed requirements, Sparkle appcasts, three-runner verification, optional npm/Homebrew handoffs, dry runs, and appcast closeout PRs.

• Preserve existing unprefixed source-catalog tags and project-branded release titles with optional tag-prefix and release-name inputs; require v tags for Go proxy releases.

• Allow source-only releases to build and test on a selected GitHub-hosted runner, including macOS-only SwiftPM libraries.

v1.11.2

1.11.2 - 2026-10-12

• Preserve npm pack lifecycle scripts and their output without treating script logs as JSON; validate tarballs against the frozen package plan.

v1.11.1

1.11.1 - 2026-10-12

• Make npm and source dry-run dispatches prove the current protected branch commit when the requested version already has a release tag, without reading or changing that tag.
• Add tag-push entrypoints and full no-publish Go CLI rehearsals, retaining signed verification artifacts without tags, drafts, tap updates, or closeout PRs.