Skip to content

v0.3.31a

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Aug 19:21
v0.3.31a
8eb29cc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.3.31a

Registry-owned provenance now replaces entry stamping, and hot installs no longer strand consumers when entries update. Locked manifest providers also defer replaced modules instead of failing offline evidence checks.

Commit: 8eb29cc

Changes

  • 8eb29cc feat(registry): registry-owned provenance replaces entry stamping (#599)
  • 7f9de5c fix(store,supervisor): complete the instance handover on entry update so hot installs do not strand consumers (#593)
  • 969317e fix(boot): locked manifest provider defers replaced modules instead of refusing offline evidence (#592)
  • a34c9d2 build(deps): bump tailscale.com from 1.102.2 to 1.102.3 (#594)
  • c9956dd build(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.27.9 (#597)
  • b3fc80e build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.43 to 1.22.44 (#596)
  • c6253f1 build(deps): bump github.com/rabbitmq/amqp091-go from 1.13.0 to 1.14.0 (#595)
  • 3e6ef32 build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#588)
  • 0317df9 build(deps): bump github.com/kaptinlin/jsonschema from 0.9.6 to 0.9.8 (#589)
  • d48ff5a build(deps): bump github.com/mattn/go-sqlite3 from 1.14.49 to 1.14.50 (#591)
  • 8348e84 build(deps): bump go.temporal.io/api from 1.63.4 to 1.63.5 (#590)
  • b27aa90 build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 (#587)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub
Assets 14
Loading