spinframework/spin v3.3.0

on GitHub

Verifying the Release Signature

After downloading the v3.3.0 release of Spin, either via the artifact attached to this release corresponding to your OS/architecture combination or via the installation method of your choice, you are ready to verify the release signature.

First, install cosign. This is the tool we'll use to perform signature verification. Then run the following command:

cosign verify-blob \
    --signature spin.sig --certificate crt.pem \
    --certificate-identity https://github.com/spinframework/spin/.github/workflows/release.yml@refs/tags/v3.3.0 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-sha 9dadd8c4bf347e5703f9488a7ec7eb4239cd083c \
    --certificate-github-workflow-repository spinframework/spin \
    spin

If the verification passed, you should see:

Verified OK

What's Changed

• Bump version for next release by @fibonacci1729 in #3057
• Update wasm-tools dependencies to 0.227.* by @alexcrichton in #3058
• Clippies for Rust 1.85 by @itowlson in #3059
• app: Use an Arc for App::id by @lann in #3064
• Update otel dependencies by @rylev in #3062
• Optimize per-request work dispatching to wasm by @alexcrichton in #3063
• Allow external configuration of "keep resident" options by @alexcrichton in #3065
• Fixes a 1.85 clippy in examples by @itowlson in #3066
• docs(README): slack channel updates by @vdice in #3071
• Update release notes template to reflect new docs site by @fibonacci1729 in #3069
• Update contributing link to point to spinframework.dev by @kate-goldenring in #3076
• ci(.github): bump ubuntu runners to 22.04 by @vdice in #3074
• docs(release-process): org, slack and other updates by @vdice in #3072
• Update readme after move to spinframework org by @fibonacci1729 in #3070
• chore(*): spinframework.dev docs URL updates by @vdice in #3080
• chore(docs): remove triage-guide.md by @vdice in #3081
• Add OpenSSF best practices badge by @kate-goldenring in #3079
• chore(*): more spinframework org/url updates by @vdice in #3078
• chore: add SECURITY.md file by @kate-goldenring in #3084
• Generate CLI reference by @itowlson in #3083
• chore: update SECURITY.md with supported versions section by @kate-goldenring in #3085
• Fix cache warning in GH actions by @itowlson in #3089
• Update dependencies that are broken on rustc v1.86 by @rylev in #3096
• Fix spin new list offset error in the presence of add-only templates by @itowlson in #3101
• Do less allocation when building routes. by @rylev in #3100
• Run cargo update on timer example by @rylev in #3103
• Fix the failing integration tests by @itowlson in #3114
• Less allocations in router by @rylev in #3107
• Update wasmtime/wasm-tools dependencies by @alexcrichton in #3119
• Update dependencies by @rylev in #3097
• chore(governance): propose adding spin-deps-plugin by @vdice in #3121
• chore(governance): propose adding spin-redirect by @vdice in #3120
• Support Liquid partials in templates by @itowlson in #3111
• SQLite affected row count and last_insert_rowid by @itowlson in #3095
• Generate schema for v2 manifest by @itowlson in #2997
• When looking for upgradeable installed plugins, check only on name by @itowlson in #3125
• Chore(governance): Propose adding js-wasi-ext by @karthik2804 in #3122
• Add support for limiting instance memory usage in spin up by @fibonacci1729 in #3135
• Refactor how InitContext works with factors by @alexcrichton in #3134
• Update to Wasmtime 33.0.0 by @alexcrichton in #3141
• Warn or error on dubious-looking file mount by @itowlson in #3143
• outbound-networking: Add error.type to tracing::error! by @lann in #3146
• Fix subsets inheriting service chaining requirement from whole app by @itowlson in #3136
• Add runtime config for blocking outbound connections by CIDR by @lann in #3150
• Provide more guidance on invalid allowed_outbound_hosts by @itowlson in #3152
• Warn when max memory is exceeded by @fibonacci1729 in #3147
• Bump version for v3.3 by @fibonacci1729 in #3156

Full Changelog: v3.2.0...v3.3.0