v0.45.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• conflicts: decided on what the box holds now, addressed by type and id by @udaychandra in #272
• sync: delete the protocol-3 fallback by @udaychandra in #273
• Sync content by hash with resumable binary chunks by @udaychandra in #274
• Blobs hardening: one chunk loop, streams that outlive a stopwatch, a lease that means what it says by @udaychandra in #275

Full Changelog: v0.44.3...v0.45.0