v0.4.2

PledgePack v0.4.2

Installation

npm install -g pledgepack@latest

Or download the binary for your platform directly from the assets below.

Platforms

• x86_64-unknown-linux-gnu — Linux x64
• aarch64-unknown-linux-gnu — Linux ARM64
• x86_64-apple-darwin — macOS Intel
• aarch64-apple-darwin — macOS Apple Silicon
• x86_64-pc-windows-msvc — Windows x64
• aarch64-pc-windows-msvc — Windows ARM64

Verify

Each archive ships a .sha256 checksum and a Sigstore/cosign keyless
signature (.sig) with its signing certificate (.pem). The npm
installer checks the checksum (and the signature when cosign is
installed) automatically; to verify a downloaded archive by hand:

sha256sum -c pledge-<target>.tar.gz.sha256
cosign verify-blob \
  --signature pledge-<target>.tar.gz.sig \
  --certificate pledge-<target>.tar.gz.pem \
  --certificate-identity-regexp '^https://github\.com/pledgeandgrow/pledgepack/\.github/workflows/release\.yml@refs/(tags|heads)/.+$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  pledge-<target>.tar.gz

Then confirm the install (pledgepack when installed from npm,
pledge when you extracted a standalone binary):

pledgepack --version

Full Changelog: v0.4.1...v0.4.2