Skip to content

v1.8.4

Choose a tag to compare

View all tags
@marmutapp marmutapp released this 12 Jun 11:05
· 16 commits to main since this release
v1.8.4
d7a014f

Changed

  • Package homepage now points to https://superbased.app/. The npm
    and PyPI package metadata (and their READMEs) link to the product
    homepage instead of the GitHub repository. Source, issue-tracker, and
    changelog links continue to point at GitHub.

No functional or binary changes from 1.8.3 — the bundled observer
binary is byte-for-byte identical. This release exists to refresh the
published package metadata.

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform Asset
Linux x86_64 observer-v1.8.4-linux-x64.tar.gz
Linux arm64 observer-v1.8.4-linux-arm64.tar.gz
macOS x86_64 (Intel) observer-v1.8.4-darwin-x64.tar.gz
macOS arm64 (Apple Silicon) observer-v1.8.4-darwin-arm64.tar.gz
Windows x86_64 observer-v1.8.4-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.8.4

Org server (Docker)

The self-hosted org server ships as a Docker image and as per-platform observer-org-v1.8.4-* archives (attached below).

docker pull ghcr.io/marmutapp/observer-org:v1.8.4

The image is keyless-signed with cosign. Verify it:

cosign verify ghcr.io/marmutapp/observer-org:v1.8.4 \
  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Supply chain

CycloneDX SBOMs are attached: observer.cdx.json and observer-org.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private
Assets 16
Loading