• v0.0.1-rc.18 0dffb2661e

    Carol v0.0.1-rc.18
    Some checks failed
    Secrets / gitleaks (push) Successful in 13s
    Release / Build, sign, and publish (push) Successful in 2m52s
    Release (Flatpak) / Build and attach .flatpak (push) Failing after 5m17s
    Release (Android) / Build, sign, attach (push) Successful in 20m10s
    Pre-release

    james released this 2026-06-26 23:04:49 +00:00 | 104 commits to main since this release

    Signed by james
    SSH key fingerprint: SHA256:vAv/s1UqS+brNCXATCv/JPKIc/j94WCgmQAszXM+m8s

    0.0.1-rc.18 — 2026-06-26

    Bug fixes

    • tmpfs Postgres service data dir (#277) (e726a9a)
    • WHATWG URL polyfill + native-intent for Android OAuth return (6a271aa)

    Other

    • Merge pull request 'fix(ci): stop Postgres state-bleed across CI runs (#277)' (#299) from 277-postgres-ci-state-bleed into main (0dffb26)
    • Merge pull request 'fix(client): WHATWG URL polyfill + native-intent for Android OAuth return' (#298) from 297-android-oauth-url-polyfill into main (76a9d44)

    Tests

    • derive Postgres teardown drop-list at runtime (#277) (0c24923)

    Verifying the image

    cosign verify \
      --key https://forge.wynning.tech/james/carol/raw/branch/main/cosign.pub \
      forge.wynning.tech/james/carol@sha256:1e658e9401425bb468c316aa827bdc08d743eb933eef423a381b1c0befbc5afc
    
    cosign verify-attestation \
      --type slsaprovenance1 \
      --key https://forge.wynning.tech/james/carol/raw/branch/main/cosign.pub \
      forge.wynning.tech/james/carol@sha256:1e658e9401425bb468c316aa827bdc08d743eb933eef423a381b1c0befbc5afc
    
    Downloads