-
released this
2026-07-21 19:41:25 -04:00 | 517 commits to master since this releaseSourceHut's go-away anti-LLM proxy returns 404 to anonymous scripted
clients hitting /refs/download//, breaking the signed
installer for end users. Try each configured base URL in turn until
one serves the file; signature verification still happens against the
same SSH-signed manifest, so the trust root is unchanged.Also widen JERBOA_RELEASE_SIGNER_IDENTITY validation to allow '/' and
'~' so SourceHut-style canonical names like '~lisp' work.Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)