Skip to content

v1.15.0

Choose a tag to compare

@whykusanagi whykusanagi released this 11 Aug 06:51
6146ca0

Warning

Security: upgrade to v1.15.1

The binaries on this release were built with Go 1.26.5, which carries seven
standard-library vulnerabilities that govulncheck reports as called by
this code, not merely present:

ID Package ID Package
GO-2026-6090 crypto/tls GO-2026-6089 net/http
GO-2026-5026 net/http GO-2026-6218 net/url
GO-2026-6091 html/template GO-2026-6088 encoding/xml
GO-2026-5972 encoding/asn1

All seven are fixed in Go 1.26.6. v1.15.1 is the first release built on it
and is otherwise functionally identical apart from the fixes in its changelog.

Every release before v1.15.1 is affected. Confirm what any binary was built
with:

go version ./celeste          # v1.15.1 and later report go1.26.6

There is no workaround short of upgrading, because the vulnerable code is
compiled into the binary.


Celeste CLI 1.15.0

Installation

Download the appropriate binary for your platform:

Linux (amd64):

wget https://github.com/whykusanagi/celeste-cli/releases/download/v1.15.0/celeste-linux-amd64.tar.gz
tar xzf celeste-linux-amd64.tar.gz
sudo mv celeste-linux-amd64 /usr/local/bin/celeste

macOS (Apple Silicon):

wget https://github.com/whykusanagi/celeste-cli/releases/download/v1.15.0/celeste-darwin-arm64.tar.gz
tar xzf celeste-darwin-arm64.tar.gz
sudo mv celeste-darwin-arm64 /usr/local/bin/celeste

Windows:
Download celeste-windows-amd64.zip and extract to a directory in your PATH.

Verify Installation

celeste --version

Changes

See CHANGELOG.md for details.