simplemotion/release

Release channel binary-distribution surface for SimpleMotion products.

• Audience: All consumers — stable production builds.
• Stability: Stable. Promoted from preview after validation. Owns releases/latest of this repo.

What's here

GitHub Release assets — one release per product version, three files per platform:

<package>-<host-triple>                  ← binary
<package>-<host-triple>.sha256           ← SHA256 sidecar
<package>-<host-triple>.sigstore.jsonl   ← sigstore build-provenance bundle

where <host-triple> is aarch64-apple-darwin, x86_64-apple-darwin, aarch64-unknown-linux-gnu, x86_64-unknown-linux-gnu, aarch64-pc-windows-msvc, or x86_64-pc-windows-msvc.

How to install

Use the SimpleMotion installer at install.simplemotion.com and pass --channel release:

bash -c "$(curl -fsSL https://install.simplemotion.com/sm-welcome.sh)" sm-welcome --channel release

The installer (in simplemotion/install) handles platform detection, SHA verification, sigstore attestation verification, and install. Don't fetch binaries directly from this repo unless you're verifying them out-of-band.

Verification

See simplemotion/install/SECURE.md for the consumer verification recipe (gh attestation verify --bundle …).

How releases get here

Releases arrive automatically via repository_dispatch from per-product source repos under 3400-0000-SM-Software. The source-repo release.yml tag-routes by suffix:

Tag pattern	Target repo
vX.Y.Z	simplemotion/release
vX.Y.Z-preview-NNN	simplemotion/preview
vX.Y.Z-private-NNN	simplemotion/private
vX.Y.Z-testing-NNN	simplemotion/testing

The receiver workflow here (publish-release.yml) downloads the source-run artifacts and creates a GitHub Release.

Reporting issues

• Distribution / install bugs: open an issue on simplemotion/install.
• Product bugs: per-product source repo under 3400-0000-SM-Software (internal).
• Security: email security@simplemotion.com.