v3.5.5

🔄 Changes

• Silence default-path log output (154) by @knauth
• Add rustup installation for Debian 13 (trixie) and Ubuntu 24.04 (noble) (152) by @ctxbot
• Release-pipeline supply-chain hardening: pinning, attestation, reproducibility (155) by @knauth
• Install rustup from distro repos on Debian 13 (trixie) and Ubuntu 24.04 (noble) (4ca43d8) by @ctxbot
• Pin Actions by SHA, argbash by digest; least-privilege CI token (c4af2c5) by @knauth
• Attest release assets and publish SHA256SUMS (11551d6) by @knauth
• Bind release assets to the signed tag: checkout fix + reproducibility (3856b52) by @knauth
• Silence default-path log output (aeed343) by @knauth
• Merge pull request #154 from tenstorrent/silence-default-path-output (03a5ada) by @knauth
• Pin uv by version + installer hash; add make bump-uv (f34a7d1) by @knauth
• Bump pinned actions to node24 majors (71ba3b9) by @knauth
• Merge pull request #152 from ctxbot/rustup-noble-trixie (787dd0c) by @knauth
• Potential fix for pull request finding (6ffc311) by @knauth
• Merge pull request #155 from tenstorrent/release-hardening (80d9c2f) by @knauth

Contributors

@ctxbot, @knauth

Installation

Install this version with:

/bin/bash -c "$(curl -fsSL https://github.com/tenstorrent/tt-installer/releases/download/v3.5.5/install.sh)"

Latest version can always be installed using:

/bin/bash -c "$(curl -fsSL https://github.com/tenstorrent/tt-installer/releases/latest/download/install.sh)"

Verifying assets

Every asset carries a signed build provenance attestation binding it to this repository, the release workflow, and the tagged commit. To verify a downloaded asset:

gh attestation verify install.sh --repo tenstorrent/tt-installer
sha256sum --check --ignore-missing SHA256SUMS