• v0.2.5 a8c73bbc1f

    install: fall back to GitHub Releases mirror when SourceHut /refs/download/ is blocked
    Some checks failed
    Build macOS Rust Libraries / build (arm64, macos-14) (push) Has been cancelled
    Build macOS Rust Libraries / build (x86_64, macos-13) (push) Has been cancelled

    Ghost released this 2026-07-21 19:41:25 -04:00 | 517 commits to master since this release

    SourceHut's go-away anti-LLM proxy returns 404 to anonymous scripted
    clients hitting /refs/download//, breaking the signed
    installer for end users. Try each configured base URL in turn until
    one serves the file; signature verification still happens against the
    same SSH-signed manifest, so the trust root is unchanged.

    Also widen JERBOA_RELEASE_SIGNER_IDENTITY validation to allow '/' and
    '~' so SourceHut-style canonical names like '~lisp' work.

    Downloads