Release 26.07_4

Zentinel 26.07_4

Cargo version: 0.6.23

What's Changed

Changed

• Bump the wasmtime group (wasmtime, wasmtime-wasi) 46.0 → 47.0. (#319)
• Bump quinn-proto 0.11.14 → 0.11.16. (#321)
• Bump maxminddb 0.29 → 0.30. (#317)
• Bump the rust-minor group (17 updates), including tokio 1.53.1, hyper 1.11.0,
  serde 1.0.229, libc 0.2.189, and clap 4.6.4. (#322)
• CI: bump actions/setup-go 6 → 7. (#315)
• CI: bump google.golang.org/grpc in /conformance. (#318)

Installation

From crates.io

cargo install zentinel-proxy

From binary

Download the appropriate archive for your platform and extract:

tar -xzf zentinel-26.07_4-linux-amd64.tar.gz
sudo mv zentinel /usr/local/bin/

Docker

docker pull ghcr.io/zentinelproxy/zentinel:26.07_4

Supply Chain Security

All release archives are signed with Sigstore cosign using keyless signing tied to GitHub Actions OIDC identity. SLSA v1.0 provenance is attached to this release.

Verify a binary

cosign verify-blob --bundle zentinel-26.07_4-linux-amd64.tar.gz.bundle \
  --certificate-identity-regexp "github.com/zentinelproxy/zentinel" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  zentinel-26.07_4-linux-amd64.tar.gz

Verify the container image

cosign verify ghcr.io/zentinelproxy/zentinel:26.07_4 \
  --certificate-identity-regexp "github.com/zentinelproxy/zentinel" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Checksums

Verify downloads with the .sha256 files.

Software Bill of Materials

CycloneDX 1.5 and SPDX 2.3 SBOMs are attached as release assets.