tf-version-bump v1.0.0-rc.15

Installation

To install tf-version-bump, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

Pre-built binaries are provided for Linux, macOS, and Windows (amd64 and arm64 architectures).

Quick Install (Linux amd64)

# Download the binary
curl -LO https://github.com/yesdevnull/tf-version-bump/releases/download/v1.0.0-rc.15/tf-version-bump_1.0.0-rc.15_linux_x86_64.tar.gz

# Extract
tar -xzf tf-version-bump_1.0.0-rc.15_linux_x86_64.tar.gz

# Move to PATH
sudo mv tf-version-bump /usr/local/bin/

# Make executable
sudo chmod +x /usr/local/bin/tf-version-bump

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file:

# Download checksums
curl -LO https://github.com/yesdevnull/tf-version-bump/releases/download/v1.0.0-rc.15/tf-version-bump-v1.0.0-rc.15.checksums.txt

# Verify the binary using the checksums file
sha256sum -c tf-version-bump-v1.0.0-rc.15.checksums.txt --ignore-missing

Verify artifact provenance

This release includes SLSA Level 3 provenance attestations for supply chain security. The SLSA provenance of the binaries and packages can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named tf-version-bump-v1.0.0-rc.15.intoto.jsonl.

To verify the provenance of an artifact, you can utilize the slsa-verifier tool:

# Install slsa-verifier (if not already installed)
go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@latest

# Download the metadata file
curl -LO https://github.com/yesdevnull/tf-version-bump/releases/download/v1.0.0-rc.15/tf-version-bump-v1.0.0-rc.15.intoto.jsonl

# Verify the provenance of the artifact
slsa-verifier verify-artifact tf-version-bump_1.0.0-rc.15_linux_x86_64.tar.gz \
  --provenance-path tf-version-bump-v1.0.0-rc.15.intoto.jsonl \
  --source-uri github.com/yesdevnull/tf-version-bump \
  --source-tag v1.0.0-rc.15

All Available Binaries

See the Assets section below for binaries for all supported platforms:

• Linux: tf-version-bump_1.0.0-rc.15_linux_x86_64.tar.gz, tf-version-bump_1.0.0-rc.15_linux_arm64.tar.gz
• macOS: tf-version-bump_1.0.0-rc.15_darwin_x86_64.tar.gz, tf-version-bump_1.0.0-rc.15_darwin_arm64.tar.gz
• Windows: tf-version-bump_1.0.0-rc.15_windows_x86_64.zip, tf-version-bump_1.0.0-rc.15_windows_arm64.zip
• Linux Packages: .deb and .rpm packages for Debian/Ubuntu and RHEL/Fedora

Alternative: Install via Go

go install github.com/yesdevnull/tf-version-bump@v1.0.0-rc.15

What's Changed

• build: pin the GitHub Actions example to v1.0.0-rc.14 by @yesdevnull in #149
• build(deps): bump the github-actions-backward-compatible group across 1 directory with 3 updates by @dependabot[bot] in #148
• Fix config entry chaining in audits and dry runs; bring docs up to date by @yesdevnull in #150

Full Changelog: v1.0.0-rc.14...v1.0.0-rc.15