v0.10.3 - 2026-08-07

Release Notes

trellis

Fixed

• Git dependencies with a path subdirectory (Gleam 1.18+) are treated as external. Gleam 1.18.0 added an optional path key on git dependencies that selects a subdirectory of the remote repository. Trellis classified any dependency carrying a path key as a workspace path dependency, so a git dependency into an external monorepo made every command fail with workspace is invalid — or, when the dependency shared a member's name, invented a phantom graph edge that could report a false dependency cycle. The git key now wins: such dependencies stay out of the workspace graph, and trellis publish leaves them untouched instead of rewriting them to Hex requirements.

Install trellis-gleam 0.10.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tylerbutler/trellis/releases/download/v0.10.3/trellis-gleam-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tylerbutler/trellis/releases/download/v0.10.3/trellis-gleam-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install tylerbutler/tap/trellis-gleam

Download trellis-gleam 0.10.3

File	Platform	Checksum
trellis-gleam-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
trellis-gleam-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
trellis-gleam-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
trellis-gleam-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
trellis-gleam-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tylerbutler/trellis

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>