Skip to content

v1.1.0

Compare
Choose a tag to compare
@github-actions github-actions released this 17 Nov 14:28
· 178 commits to main since this release
v1.1.0
927dfd5

Changelog

New Features

Bug fixes

Dependency updates

Documentation updates

Other work


Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/mods/releases/download/v1.1.0/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/mods/releases/download/v1.1.0/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/mods/releases/download/v1.1.0/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.