github charmbracelet/crush v0.6.3

latest releases: v0.7.5, nightly, v0.7.4...
17 days ago

Performance, QoL improvements and lots of bug fixes!

This release enhances performance, fixes many bugs, improves security, add some Quality of Life™ features.

Highlights:

  • The security was enhanced in the matter of which commands the model is allowed to run.
  • Crush is now compiled using the brand new Go's GreenTea Garbage Collection. This means a lower memory footprint, smaller CPU usage, and fewer freezes.
  • The .crush directory created in your workspace will now by ignored by Git by default (no more manual .gitignore inclusions).
  • It's now possible to set custom environment variables to be passed by LSP servers.
  • Some possible panics and other small bugs were fixed!

Changelog

New Features

Security updates

Bug fixes and improvements

Other work


Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/crush/releases/download/v0.6.3/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/crush/releases/download/v0.6.3/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/crush/releases/download/v0.6.3/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, Discord, Slack, The Fediverse.

Don't miss a new crush release

NewReleases is sending notifications on new releases.