Skip to content

treeport v0.1.3

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Oct 03:54
· 1 commit to main since this release
v0.1.3
d7209a4

Treeport 0.1.3 fixes missing third-party distribution materials. Scanning behavior, profile revisions, and report schema are unchanged.

All six archives now include upstream Go 1.27.1 and golang.org/x/text v0.28.0 LICENSE/PATENTS, additional Go source attributions, and Unicode notices. The inventory and manifest record exact sources and hashes. No upstream x/text NOTICE file was invented.

Packaging rejects missing or changed disclosures, module replacements/version drift, a different toolchain, or executable build metadata that disagrees with the clean commit and target.

Verified commit: d7209a4f71d8f7c812b29eab4ce534c2700182d2.

  • CI: Windows/Linux/macOS × Go 1.25.0/1.27.1 — 6/6 passed.
  • Release validation and packaging — native OS tests, race, vet, then six-target packaging.
  • Downloaded all six archives and checked SHA256SUMS, every disclosure byte, manifest digest, and executable commit/version/dependency/target metadata. Ran native macOS archive and public go install version/compatible/incompatible smoke checks. See license-evidence.json.
  • Original v0.1.0–v0.1.2 binaries and tags are preserved. Their release pages now provide an additional license supplement and checksum.

Use SHA256SUMS for the binary archives; supplementary evidence files are separate assets. Filesystem semantics remain model-scoped as documented in the README.

Assets 11
Loading