Skip to content

v1.7.28

Choose a tag to compare

View all tags
@marmutapp marmutapp released this 02 Jun 17:27
· 16 commits to main since this release
v1.7.28
28c981c

Release headline. VS Code extension Marketplace listing polish.
The v1.7.27 listing rendered with broken wordmark images (relative
paths don't get rewritten for subfolder READMEs on Marketplace) and
led with descriptive copy rather than an actionable quick start.
v1.7.28 fixes both — no Go changes, no breaking changes, just a
better first impression for users hitting the Marketplace page.

Fixed (v1.7.28)

  • VS Code extension Marketplace listing showed broken logo images.
    Relative <picture> URLs in vscode/README.md don't get
    path-rewritten by Marketplace's markdown renderer when the README
    lives in a subfolder (vscode/, not the repo root). Fixed by
    switching to absolute raw.githubusercontent.com URLs pointing at
    the public repo's main branch.

Changed (v1.7.28)

  • VS Code extension README rewritten as an onboarding-first
    Marketplace landing page. Leads with a 5-minute quick start
    (numbered steps from install through "your AI session shows up
    with accurate token counts"), followed by a surface-by-surface
    table that names the exact command or click to reach each surface.
    Earlier ordering led with descriptive "what this extension does"
    copy that buried the actionable parts.

  • scripts/release.sh public-repo carve-out now includes
    docs/vscode-extension.md + docs/vscode-extension-user-guide.md.
    These were referenced from the rewritten README's "Going deeper"
    section but were previously private-only (the
    default docs/* exclusion stripped them from the public repo).
    Added to all three sites the script enforces: the
    git add --force re-staging list, the .gitignore allowlist, and
    the docs-leak sanity-check regex.

Compatibility (v1.7.28)

  • No code changes. Same observer binary as v1.7.27 (same SHA256,
    same behaviour). Pure docs + manifest release.
  • VS Code extension auto-updates on next launch for users on v1.7.27.

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform Asset
Linux x86_64 observer-v1.7.28-linux-x64.tar.gz
Linux arm64 observer-v1.7.28-linux-arm64.tar.gz
macOS x86_64 (Intel) observer-v1.7.28-darwin-x64.tar.gz
macOS arm64 (Apple Silicon) observer-v1.7.28-darwin-arm64.tar.gz
Windows x86_64 observer-v1.7.28-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.7.28

Org server (Docker)

The self-hosted org server ships as a Docker image and as per-platform observer-org-v1.7.28-* archives (attached below).

docker pull ghcr.io/marmutapp/observer-org:v1.7.28

The image is keyless-signed with cosign. Verify it:

cosign verify ghcr.io/marmutapp/observer-org:v1.7.28 \
  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Supply chain

CycloneDX SBOMs are attached: observer.cdx.json and observer-org.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private
Assets 16
Loading