Changelog
New Features
- d9fd05f: feat: support additional alt/ctrl/shift special characters (#582) (@raphamorim)
Bug fixes
- 5fd3e35: fix(ci): use meta lint workflow (@aymanbagabas)
- b461e7b: fix(record): propagate env of vhs process to record terminal (#572) (@tr3mor)
- ed7c8a9: fix(record): set PAGEX to PAGE_X for proper capitalization (#570) (@bashbunni)
- ab03c35: fix: lint (@caarlos0)
- 710bb76: fix: lint (#637) (@caarlos0)
- ce7286f: fix: lint issues (@caarlos0)
- fd38bed: fix: source nested tapes (#567) (@rsteube)
- 25d888f: fix: source not respecting arguments of sourced commands (#604) (@caarlos0)
- 2c7733e: fix: sync golangci-lint config (#573) (@github-actions[bot])
Dependency updates
Documentation updates
- e9647e8: docs: add "Enter" to cleanup example (#598) (@mdjohns)
- 9c6a385: docs: add contributing guidelines (#636) (@bashbunni)
Other work
- 90220f7: ci: add lint-sync job (@caarlos0)
- b41d47f: ci: fix build (#602) (@caarlos0)
- 1d29712: ci: remove lint-soft.yml (@caarlos0)
- 517bcda: ci: set goreleaser version (@caarlos0)
- 02e73ee: ci: sync dependabot config (#586) (@charmcli)
- 9583c54: ci: sync dependabot config (#587) (@charmcli)
- 380e0de: ci: sync dependabot config (#618) (@charmcli)
- 4fb70ff: ci: sync golangci-lint config (@caarlos0)
- ce18cfa: ci: sync golangci-lint config (#597) (@github-actions[bot])
- 987c1ab: ci: sync golangci-lint config (#599) (@github-actions[bot])
- 7929ef2: ci: sync golangci-lint config (#607) (@github-actions[bot])
- 24b40a4: ci: sync golangci-lint config (#629) (@github-actions[bot])
- 9901ed9: refactor: cleanup repeated code (#628) (@alaingilbert)
Verifying the artifacts
First, download the checksums.txt
file, for example, with wget
:
wget 'https://github.com/charmbracelet/vhs/releases/download/v0.10.0/checksums.txt'
Then, verify it using cosign
:
cosign verify-blob \
--certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
--cert 'https://github.com/charmbracelet/vhs/releases/download/v0.10.0/checksums.txt.pem' \
--signature 'https://github.com/charmbracelet/vhs/releases/download/v0.10.0/checksums.txt.sig' \
./checksums.txt
If the output is Verified OK
, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum
:
sha256sum --ignore-missing -c checksums.txt
Done! You artifacts are now verified!
Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.