Release Notes
This release contains several bugfixes and an update to the npm installer to reduce its dependencies. It also updates the default versions of all GitHub actions.
npm installer
The npm installer now relies on builtin node modules in place of the external axios and rimraf libraries. In order to support this, we've raised the minimum supported node version to 14.14.
• impl @rafaeelaudibert chore(npm)：replace axios with native node:http/node:https
cargo-zigbuild and cargo-auditable
It's now possible to use cargo-auditable together with cross-compilation via cargo-zigbuild. In previous versions of dist, these two features were mutually exclusive.
• impl @mistydemeo feat(auditable)：remove zigbuild limitation
Fixes
• impl @eegli fix：double escape windows path in receipt
• impl @woodruffw ps1：peek the inner exception on download failure
• impl @mistydemeo feat(ci)：migrate from attest-build-provenance@v3 to attest@v4
• impl @OpenSauce chore(deps)：bump github actions
Install cargo-dist 0.32.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.32.0/cargo-dist-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/axodotdev/cargo-dist/releases/download/v0.32.0/cargo-dist-installer.ps1 | iex"
Install prebuilt binaries via Homebrew
brew install axodotdev/tap/cargo-dist
Install prebuilt binaries into your npm project
npm install @axodotdev/[email protected]
Download cargo-dist 0.32.0
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo axodotdev/cargo-dist
You can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
