New
v0.16.2
Changelog
Bug fixes
- 501402cbbaf9e5a1b88055e5495228f107c0ed46: fix(choose): fix typo in environment variable
GUM_CCHOOSE_TIMEOUT(#922) (@sadamczyk) - 0107dffd27d07caaebda4d2615b368db3bc295f7: fix(filter): text input width is too small (#919) (@caarlos0)
- 8081f74c4a5117f371954611366b4d4400ec8008: fix: logic to handle interrupt before timeout in error checking (#918) (@arithmeticmean)
Documentation updates
- 3c972b0873ee0e9f20cb8a6c90fc79380f2ca36b: docs: add contributing guidelines (#920) (@bashbunni)
Other work
- f1e274c05f1239d42bc4724a605adab3075fdf06: ci: sync golangci-lint config (#911) (@github-actions[bot])
Verifying the artifacts
First, download the checksums.txt file, for example, with wget:
wget 'https://github.com/charmbracelet/gum/releases/download/v0.16.2/checksums.txt'
Then, verify it using cosign:
cosign verify-blob \
--certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
--cert 'https://github.com/charmbracelet/gum/releases/download/v0.16.2/checksums.txt.pem' \
--signature 'https://github.com/charmbracelet/gum/releases/download/v0.16.2/checksums.txt.sig' \
./checksums.txt
If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:
sha256sum --ignore-missing -c checksums.txt
Done! You artifacts are now verified!
Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.