Skip to content

v0.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Oct 18:57
· 22 commits to main since this release
v0.4.1
35a5f05
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Shell wrappers that survive your aliases, a clear message for pin files from a newer cloudpin, and cleaner GitHub
Releases.

Fixed

  • The bash and zsh wrappers no longer break on an existing alias of a guarded CLI (#69). Before, such an alias left
    that CLI unguarded without a word, and in zsh every CLI after it too. An alias that calls the CLI itself is now
    guarded; one that runs another program (kubectl=kubecolor) can't be, so each new shell warns about it, in
    PowerShell as well.
  • GitHub Releases carry only the tarball, its signed bundle and SHA256SUMS (#65): v0.4.0 also got the repo's
    logo and demo SVGs, since removed by hand. The verify commands in the release notes now line up.
  • A .cloudpin.yml section or key that this cloudpin doesn't know is still refused, but the message now says the
    file may need a newer cloudpin, with your version and the update command (#67). From 1.0 the format only adds
    names, so this is what a teammate on an older version will see.

Verify this release

cloudpin-0.4.1.tgz is the exact file npm serves (npm packs reproducibly), built and signed by this repository's
release workflow. To check a download:

gh attestation verify cloudpin-0.4.1.tgz --repo paureis/cloudpin   # signed build provenance
sha256sum -c SHA256SUMS                                            # checksum
npm view cloudpin@0.4.1 dist.integrity                             # npm's sha512 for the same file
Assets 5
Loading