v0.6.1

Changelog

Bug fixes

• 301cdb6: fix: lint issues (@caarlos0)

Dependency updates

• cd1000b: feat(deps): bump github.com/charmbracelet/lipgloss from 0.9.1 to 0.10.0 (#105) (@dependabot[bot])
• 4812398: feat(deps): bump golang.org/x/crypto from 0.16.0 to 0.18.0 (#97) (@dependabot[bot])
• 5f3f790: feat(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 (#99) (@dependabot[bot])
• 44c53e8: feat(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 (#102) (@dependabot[bot])
• a48039e: feat(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 (#103) (@dependabot[bot])
• 54ce95b: feat(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 (#96) (@dependabot[bot])
• 921ba99: feat(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 (#98) (@dependabot[bot])
• 79f40c6: feat(deps): bump the gomod group with 1 update (#88) (@dependabot[bot])
• 3a7cb56: feat(deps): bump the gomod group with 1 update (#89) (@dependabot[bot])
• 77ccea1: feat(deps): bump the gomod group with 1 update (#92) (@dependabot[bot])
• 3fc1a09: feat(deps): bump the gomod group with 1 update (#93) (@dependabot[bot])
• 8573e7b: feat(deps): bump the gomod group with 2 updates (#91) (@dependabot[bot])

Documentation updates

• d3f9ba4: docs: add instructions for regenerating memo (#101) (@luandy64)
• db281a3: docs: fix scoop install instructions (@caarlos0)

Other work

• 7126ba9: Create CODEOWNERS (@maaslalani)

---

Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/melt/releases/download/v0.6.1/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/melt/releases/download/v0.6.1/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/melt/releases/download/v0.6.1/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.