Skip to content

v0.9.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 21:07
· 16 commits to main since this release
v0.9.0
7d5c4e0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • -Doctor reports DNS-over-HTTPS state from the selected target: DNS over HTTPS: <mode> (<resolver>), or not managed when DnsOverHttpsMode and DnsOverHttpsTemplates are absent.
  • Releases now include BraveDebloater-vX.Y.Z.sigstore.json, a signed SLSA build provenance for both archives. The README's manual install section shows the gh attestation verify command that ties an archive to its tag and the release workflow.
  • Added OpenSSF Scorecard, CodeQL scanning of the GitHub Actions workflows, and weekly Dependabot updates for pinned actions. The weekly policy template workflow now grants write access only to the job that opens its pull request.
  • SECURITY.md names the private reporting channels: GitHub private vulnerability reporting or email.

Validation

Run against this tag before publishing, on Windows, Ubuntu, and macOS:

  • ./scripts/Test-PolicyManifest.ps1
  • ./scripts/Test-Behavior.ps1
  • Invoke-Pester -Path ./tests
  • ./Invoke-BraveDebloat.ps1 -Preset Extreme -LockShields
  • Windows PowerShell 5.1 compatibility checks

Install

One line, any platform with PowerShell (downloads this release, checks SHA256SUMS.txt, extracts, prints the preview command):

& ([scriptblock]::Create((irm https://raw.githubusercontent.com/osfv/BraveDebloater/main/install.ps1))) -Version 0.9.0

Or download BraveDebloater-v0.9.0.zip below. BraveDebloater-v0.9.0-windows.zip is the same tree flattened with the BraveDebloat.exe launcher; winget uses it.

Verify the download

Compare the archive hash with SHA256SUMS.txt:

Get-FileHash .\BraveDebloater-v0.9.0.zip -Algorithm SHA256

Confirm that this repository's release workflow built the archive from this tag (needs the GitHub CLI):

gh attestation verify .\BraveDebloater-v0.9.0.zip --repo osfv/BraveDebloater --source-ref refs/tags/v0.9.0 --signer-workflow osfv/BraveDebloater/.github/workflows/release.yml

Full Changelog: v0.8.0...v0.9.0

Assets 6
Loading