Security
- Bump Go from 1.25.5 to 1.25.7
- Fixes GO-2026-4337: Unexpected session resumption in
crypto/tls - Includes Go 1.25.6 security patches
- Fixes GO-2026-4337: Unexpected session resumption in
Other
- CI/docs-only changes (no functional code changes)
Full Changelog: v0.18.0...v0.18.1
Verification
All binaries include SLSA Level 3 provenance attestations.
Verify binary provenance
slsa-verifier verify-artifact ofelia-linux-amd64 \
--provenance-path ofelia-linux-amd64.intoto.jsonl \
--source-uri github.com/netresearch/ofeliaVerify checksums signature
cosign verify-blob \
--certificate checksums.txt.pem \
--signature checksums.txt.sig \
--certificate-identity "https://github.com/netresearch/ofelia/.github/workflows/release-slsa.yml@refs/tags/v0.18.1" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
checksums.txt