Skip to content

v2.5.62

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Oct 17:58
v2.5.62
This tag was signed with the committer’s verified signature.
StevenACoffman Steve Coffman
GPG key ID: E0A4049327167A8F
Verified
Learn about vigilant mode.
ca12c04
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • 4354676 gqlerror: merge an error tree's slog attributes (#492)
  • ca12c04 validator: reject duplicate argument definitions (#491)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.62' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.62_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.62_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

Assets 6
Loading