Matthew Meszaros 4e94d2b47b feat: install the CLI in one command from warmbly.com/cli.sh or cli.ps1, with checksum-verified archives, a Homebrew formula and Scoop manifest generated alongside them, a ghcr cli image, and a make cli-check that installs from a local mirror and proves a tampered checksum stops the install

2026-09-04 20:14:38 -07:00

..

build-push.yml

feat: address the review on the installer branch by keeping the database password out of pg_dump's argv, excluding backup bundles from the blob root they are written into, tolerating blobs that change or vanish mid-archive, making the instance-settings bootstrap a single atomic insert, and validating the release tag before it is written into .env

2026-09-04 06:24:05 -07:00

ci.yml

feat: install the CLI in one command from warmbly.com/cli.sh or cli.ps1, with checksum-verified archives, a Homebrew formula and Scoop manifest generated alongside them, a ghcr cli image, and a make cli-check that installs from a local mirror and proves a tampered checksum stops the install

2026-09-04 20:14:38 -07:00

release.yml

feat: install the CLI in one command from warmbly.com/cli.sh or cli.ps1, with checksum-verified archives, a Homebrew formula and Scoop manifest generated alongside them, a ghcr cli image, and a make cli-check that installs from a local mirror and proves a tampered checksum stops the install

2026-09-04 20:14:38 -07:00

security.yml

feat: fix the security workflow's unresolvable action pin by changing aquasecurity/trivy-action@0.36.0 to @v0.36.0, since the repository tags its releases with a v prefix and the first main run of security.yml died in job setup with 'unable to find version 0.36.0' before Trivy ever ran

2026-08-20 06:25:47 +02:00