v0.49.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• sync: a scoped FDE sees exactly its granted projects, on every box by @udaychandra in #309
• ci: the fleet upgrades from v0.48.0 by @udaychandra in #312

Full Changelog: v0.48.0...v0.49.0