Tiny patch
This is a tiny release, but we thought it would be worth it.
- Updated Bubble Tea with a couple fixes for some terminal emulators.
- Updated Fantasy with fixes for AWS SSO and better cache hitting.
- Fixed wrong background color on permissions dialog. This was a regression from adding Bash syntax highlighting on v0.89.0.
- Updated our
.gitattributesto make development easier on Windows. We're normalizing LF (instead of CRLF) as line breaks to fix some tests on Windows.
Changelog
Fixed
- ed15da4c46e0bdc3afae4842db54e7def7b9f15e: fix(ui): use dialog background for bash syntax highlighting in permissions (#3575) (@andreynering)
Other stuff
- 0f14334fb03703a5557f875d182e347e6375e0e7: chore: normalize line endings to
lfvia.gitattributes(#3555) (@Lin-BoYuan)
Verifying the artifacts
First, download the checksums.txt file and the checksums.txt.sigstore.json file files, for example, with wget:
wget 'https://github.com/charmbracelet/crush/releases/download/v0.90.0/checksums.txt'
wget 'https://github.com/charmbracelet/crush/releases/download/v0.90.0/checksums.txt.sigstore.json'Then, verify it using cosign:
cosign verify-blob \
--certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
--bundle 'checksums.txt.sigstore.json' \
./checksums.txtIf the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:
sha256sum --ignore-missing -c checksums.txtDone! You artifacts are now verified!
Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.