charmbracelet/crush v0.90.0 on GitHub

Tiny patch

This is a tiny release, but we thought it would be worth it.

Updated Bubble Tea with a couple fixes for some terminal emulators.
Updated Fantasy with fixes for AWS SSO and better cache hitting.
Fixed wrong background color on permissions dialog. This was a regression from adding Bash syntax highlighting on v0.89.0.
Updated our .gitattributes to make development easier on Windows. We're normalizing LF (instead of CRLF) as line breaks to fix some tests on Windows.

Changelog

Fixed

ed15da4: fix(ui): use dialog background for bash syntax highlighting in permissions (#3575) (@andreynering)

Other stuff

0f14334: chore: normalize line endings to lf via .gitattributes (#3555) (@Lin-BoYuan)

Verifying the artifacts

First, download the checksums.txt file and the checksums.txt.sigstore.json file files, for example, with wget:

wget 'https://github.com/charmbracelet/crush/releases/download/v0.90.0/checksums.txt'
wget 'https://github.com/charmbracelet/crush/releases/download/v0.90.0/checksums.txt.sigstore.json'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle 'checksums.txt.sigstore.json' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.