Skip to content

v1.12.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 23:19
v1.12.0
This tag was signed with the committer’s verified signature.
steipete Peter Steinberger
SSH Key Fingerprint: WmI9lVtd7F2c5XyRHbZVO3yYYJzwsSNzcZQMPT147HI
Verified
Learn about vigilant mode.
50a56f8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

1.12.0 - 2026-10-20

Highlights: Verified generated source assets, more resilient artifact transfers, and keyless ClawSweeper dispatch.

  • Support one caller-generated source release asset, optionally consuming a qualified same-run artifact, through the existing read-only build, immutable artifact transport and independent checksum verification. Preserve source-only defaults and leave package qualification and Homebrew activation with callers; thanks @vincentkoc.
  • Update Node setup to v7.1.0, artifact upload/download to v7.0.2/v8.0.2, and the GoReleaser action to v7.3.0; retain immutable pins and gain artifact rate-limit retries and current transitive fixes.
  • Remove target-side App credentials from ClawSweeper dispatch; use OIDC intake with independent webhook delivery and retryable transient failures.

Contributors

vincentkoc
Assets 7
Loading