v2026.7.1

Installation

Homebrew (macOS)

brew install vouch-sh/tap/vouch

To start the agent automatically:

brew services start vouch

winget (Windows)

winget install SmokeTurner.Vouch

APT Repository (Debian/Ubuntu)

curl -fsSL https://packages.vouch.sh/gpg/vouch.asc \
  | gpg --dearmor \
  | sudo tee /usr/share/keyrings/vouch-archive-keyring.gpg > /dev/null

echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/vouch-archive-keyring.gpg] https://packages.vouch.sh/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/vouch.list > /dev/null

sudo apt-get update && sudo apt-get install -y vouch

YUM/DNF Repository (Fedora/RHEL)

sudo tee /etc/yum.repos.d/vouch.repo << 'EOF'
[vouch]
name=Vouch
baseurl=https://packages.vouch.sh/rpm/$basearch/
gpgcheck=1
gpgkey=https://packages.vouch.sh/gpg/vouch.asc
enabled=1
EOF

sudo dnf install -y vouch

DEB Package (Debian/Ubuntu)

# amd64
gh release download v2026.7.1 --repo vouch-sh/vouch --pattern "vouch_2026.7.1_amd64.deb"
sudo dpkg -i vouch_2026.7.1_amd64.deb

# arm64
gh release download v2026.7.1 --repo vouch-sh/vouch --pattern "vouch_2026.7.1_arm64.deb"
sudo dpkg -i vouch_2026.7.1_arm64.deb

RPM Package (Fedora/RHEL)

# x86_64
gh release download v2026.7.1 --repo vouch-sh/vouch --pattern "vouch-2026.7.1-1.x86_64.rpm"
sudo rpm -i vouch-2026.7.1-1.x86_64.rpm

# aarch64
gh release download v2026.7.1 --repo vouch-sh/vouch --pattern "vouch-2026.7.1-1.aarch64.rpm"
sudo rpm -i vouch-2026.7.1-1.aarch64.rpm

Binary Downloads

Download the appropriate binary for your platform from the release assets below.

Platform	Architecture	Archive
Linux	x86_64	vouch-v2026.7.1-x86_64-unknown-linux-musl.tar.gz
Linux	aarch64	vouch-v2026.7.1-aarch64-unknown-linux-musl.tar.gz
macOS	Apple Silicon	vouch-v2026.7.1-aarch64-apple-darwin.tar.gz
Windows	x86_64	vouch-v2026.7.1-x86_64-pc-windows-msvc.zip
Windows	ARM64	vouch-v2026.7.1-aarch64-pc-windows-msvc.zip

Verify integrity

sha256sum -c SHA256SUMS.txt

Verify provenance

gh attestation verify vouch-v2026.7.1-aarch64-apple-darwin.tar.gz --owner vouch-sh

Using Helm (OCI)

helm install vouch-server oci://ghcr.io/vouch-sh/charts/vouch-server \
  --version 2026.7.1 \
  --namespace vouch-server \
  --create-namespace

Using Helm (from release assets)

helm install vouch-server \
  https://github.com/vouch-sh/vouch/releases/download/v2026.7.1/vouch-server-2026.7.1.tgz \
  --namespace vouch-server \
  --create-namespace

Container Image

docker pull ghcr.io/vouch-sh/vouch:v2026.7.1

Verify Attestations

# Container image
gh attestation verify oci://ghcr.io/vouch-sh/vouch:v2026.7.1 \
  --owner vouch-sh

# Binary archives
gh attestation verify vouch-v2026.7.1-aarch64-apple-darwin.tar.gz --owner vouch-sh

What's Changed

• feat(cli): pre-fill device code by @jplock in #566
• claude updates by @jplock in #567
• docs: fix stale i18n path and commit convention references by @detail-app[bot] in #569
• fix: address Detail App bug reports (#570–#574) by @jplock in #575
• chore: remove unused verify_response_signature function by @detail-app[bot] in #576
• chore: remove unused Fromanyhow::Error impl on ClaimError by @detail-app[bot] in #578
• chore: remove unused DocumentStore::get_many and count_all methods by @detail-app[bot] in #585
• chore: remove unused ServiceError::Scim and ScimErrorResponse by @detail-app[bot] in #586
• chore: remove extract_email_domain test helper and its tests by @detail-app[bot] in #587
• chore: remove unused count_sessions_for_authenticator, TokenExchangeRecord, get_token_exchanges_for_user, and revoke_ssh_certificate by @detail-app[bot] in #580
• chore: remove unused delete_oidc_state function by @detail-app[bot] in #579
• chore: remove unused is_authorization_code_consumed and get_authorization_code_owner by @detail-app[bot] in #577
• chore: remove unused Pool::is_closed and Transaction::db_type methods by @detail-app[bot] in #582
• chore: remove unused delete_organization function by @detail-app[bot] in #581
• chore: remove count_active_policies unused convenience wrapper by @detail-app[bot] in #583
• chore: remove unused SCIM group DB helpers by @detail-app[bot] in #584
• feat(server): add cert-logout hook for RP-initiated logout testing by @jplock in #588
• ci: bump the actions group with 5 updates by @dependabot[bot] in #589
• feat(aws): unify credential/setup commands across STS and Identity Center by @jplock in #591
• docs: add AWS Identity Center RS256 usage to key management and env var docs by @detail-app[bot] in #596
• revert(cli): drop AWS Identity Center CLI paths (keep server RS256) by @jplock in #597
• bump version by @jplock in #598
• refactor(cli): remove aws login/accounts/roles subcommands by @jplock in #600
• feat(cli): redesign aws credential and setup flows around org anchors by @jplock in #601
• feat(cli): add interactive setup aws wizard by @jplock in #603
• fix(cli): AWS credential/setup follow-ups (#602, #605, #606, #607) by @jplock in #608
• build(deps): replace unmaintained serde_yaml with serde-saphyr (#595) by @jplock in #609
• refactor(cli): consolidate sigv4 senders into shared signing core by @jplock in #620
• chore: remove unused _DIGEST_SHA256 constant from saml/signature.rs by @detail-app[bot] in #612
• chore: remove unused AuthorizationDetail::type_name method by @detail-app[bot] in #613
• chore: remove unused validate_fapi_client_registration and dead FAPI constants by @detail-app[bot] in #614
• chore: remove unused FIDO2_ASSERTION_GRANT_TYPE constant by @detail-app[bot] in #615
• chore: remove unused _method variable in validate_pkce by @detail-app[bot] in #616
• chore: remove unused SystemClock struct from vouch-tests by @detail-app[bot] in #617
• chore: remove unused device() and public_key_cose() methods from IntegrationMockDevice by @detail-app[bot] in #618
• chore: remove unused VouchClient::with_http constructor by @detail-app[bot] in #619
• docs: add AWS Organizations/Identity Center setup pattern to README Quick Start by @detail-app[bot] in #610
• chore: remove unused HeaderName import and no-op guard in resource_metadata by @detail-app[bot] in #611
• refactor(oidc): make OAuthGrantType the single source for grant types by @jplock in #622

Full Changelog: v2026.6.3...v2026.7.1