This is a patch release to pull in Wasmtime v36.0.2 which fixes an OOM panic.
Verifying the Release Signature
After downloading the v3.4.1 release of Spin, either via the artifact attached to this release corresponding to your OS/architecture combination or via the installation method of your choice, you are ready to verify the release signature.
First, install cosign. This is the tool we'll use to perform signature verification. Then run the following command:
cosign verify-blob \
--signature spin.sig --certificate crt.pem \
--certificate-identity https://github.com/spinframework/spin/.github/workflows/release.yml@refs/tags/v3.4.1 \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-github-workflow-sha 3ab5404bcb573ba1ea2e1c366e2ff63a90d307b2 \
--certificate-github-workflow-repository spinframework/spin \
spin
If the verification passed, you should see:
Verified OK
What's Changed
- [Backport v3.4] Update to Wasmtime 36.0.2 by @fibonacci1729 in #3253
- Bump version for patch release by @fibonacci1729 in #3254
Full Changelog: v3.4.0...v3.4.1