5 releases 5 tags

RSS feed

• v0.1.2 9bcd54d7a3

  Compare

  v0.1.2 Stable

  stephen released this 2026-05-14 21:31:13 +00:00 | 123 commits to main since this release

  Signed by stephen

  GPG key ID: 67F885778E01BF16

  What's new

  Signed macOS binaries. Both darwin-aarch64 and darwin-x86_64 tarballs ship binaries signed with the Raster & State Developer ID (62Y3FRM8PD, hardened runtime enabled).

  The visible win: macOS keychain ACLs are scoped to code identity, not binary path. Now that releases share a stable signing identity, you click "Always Allow" on the keychain prompt once and don't get re-prompted on every fj upgrade.

  Notarization is a follow-up. Signing alone solves the prompt-storm; notarization is what makes Gatekeeper not warn on first run for binaries downloaded fresh.

  Also

  • scripts/sign.sh ships in-tree so contributors who build from source can sign their local binary and stop getting prompted. Reads FJ_APPLE_DEVELOPER_ID from .env / .env.local.
  • scripts/preflight.sh audits .env* files for secrets and grep-scans the working tree for PEM markers / Apple-password format / common token shapes. Wired into the pre-push hook.
  • .env.example documents the release/signing variable names. Real values stay out of the repo.
  • support@rasterstate.com is now the canonical contact email; personal-email references removed from tracked files.

  Install

  brew tap rasterandstate/tap
  brew upgrade fj
  

  Or download a tarball below. Verify with shasum -a 256 -c SHA256SUMS.

  Full changelog: CHANGELOG.md.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • SHA256SUMS
    2 downloads · 2026-05-14 17:04:04 +00:00 · 195 B
  • fj-v0.1.2-darwin-aarch64.tar.gz
    5 downloads · 2026-05-14 17:04:03 +00:00 · 2.1 MiB
  • fj-v0.1.2-darwin-x86_64.tar.gz
    0 downloads · 2026-05-14 17:04:04 +00:00 · 2.3 MiB