v0.14.0

Changelog

New Features

• 62c30b9: feat(tailscale): update hostname to device name (#211) (@arunsathiya)

Bug fixes

• 62cd1da: fix: handle errors on local mode (#220) (@caarlos0)
• 5232ef0: fix: race condition in server mode (#209) (@caarlos0)
• b05a385: fix: sshconfig parse: lowercase keys (#208) (@caarlos0)

Dependency updates

• ac58dd8: feat(deps): bump github.com/charmbracelet/keygen from 0.4.3 to 0.5.0 (#229) (@dependabot[bot])
• dcdde31: feat(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0 (#230) (@dependabot[bot])
• 26ba39e: feat(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (#231) (@dependabot[bot])
• 0a02309: feat(deps): bump github.com/charmbracelet/log from 0.2.2 to 0.2.3 (#210) (@dependabot[bot])
• 18c0c23: feat(deps): bump github.com/charmbracelet/log from 0.2.3 to 0.2.4 (#219) (@dependabot[bot])
• 674d7e2: feat(deps): bump github.com/charmbracelet/log from 0.2.4 to 0.2.5 (#225) (@dependabot[bot])
• 89de88e: feat(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 (#215) (@dependabot[bot])
• 0e3c6a5: feat(deps): bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 (#213) (@dependabot[bot])
• f9dcfd3: feat(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 (#223) (@dependabot[bot])
• 801784c: feat(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 (#227) (@dependabot[bot])
• daae6f9: feat(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#221) (@dependabot[bot])
• 7bdf97b: feat(deps): bump golang.org/x/term from 0.12.0 to 0.13.0 (#226) (@dependabot[bot])
• ac06181: feat(deps): bump the gomod group with 1 update (#206) (@dependabot[bot])
• 495a7d1: feat(deps): update wish (@caarlos0)

Other work

• a3d2532: Fix hints link in README (#212) (@arunsathiya)

---

Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/wishlist/releases/download/v0.14.0/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/wishlist/releases/download/v0.14.0/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/wishlist/releases/download/v0.14.0/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.