To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.7/bolt-3.7.2.tar.gz
tar -xzf bolt-3.7.2.tar.gz --strip-components=1
php app/nut init

Bolt 3.7.2

Released: 2020-10-20. Notable changes:

• Security: Restrict filter options in Request in Twig context
• Security: Provide a stronger secret for UrlSigner
• Security: Allow only directories to be renamed with renameFolder #7867
• Fixes slashes in directory names #7871
• fixed typo 'an' to 'and' in README #7875
• Check if we have a current user, prevent "Trying to access array offset" extension #7869
• Fix ContextErrorException in PHP 7.4 #7868
• Update composer.json: Add "public-dir": "public" #7866

Special thanks go out to the following for responsibly disclosing a security issue to us:

• Charles Fol - https://www.ambionics.io/
• ERNW Research GmbH - https://ernw.de/