Skip to content

Release v1.13.1

GitHub Action edited this page Jun 30, 2024 · 1 revision

Published: 2024-06-30T13:19:08.544726552Z

Release Notes

https://github.com/jreleaser/jreleaser/releases/tag/v1.13.1

Binaries

🌟 Universal

These binaries require an external Java runtime.

☕️ Bundled Java Runtimes

These binaries provide their own Java runtime.

Platform Artifact
MacOS x86_64 jreleaser-standalone-1.13.1-osx-x86_64.zip (asc)
sha256:b10707c6a56c499a0cc99d66582380834de7e290318a036971b5e1b92e3f2dad
MacOS Arm64 jreleaser-standalone-1.13.1-osx-aarch64.zip (asc)
sha256:aa5930a7631592e00b7600b4656b8840ba37ed830e571ae5fc47d26ae7d59bc0
Linux x86_64 (musl) jreleaser-standalone-1.13.1-linux_musl-x86_64.zip (asc)
sha256:61fe6894c2484435fe85eea10b0c81beff1a82672fc205d08aaaca6e63765f1d
Linux Arm64 (musl) jreleaser-standalone-1.13.1-linux_musl-aarch64.zip (asc)
sha256:a5347b388a5cf6673ebb953341adbf05a09a7c5626477eff73f9939077f84fca
Linux x86_64 (glibc) jreleaser-standalone-1.13.1-linux-x86_64.zip (asc)
sha256:ccb34209c93f3ce2ad7c43d806271a6b9d558876e0ba82f333a74fa2d6e4f237
Linux Arm64 (glibc) jreleaser-standalone-1.13.1-linux-aarch64.zip (asc)
sha256:58705fa3019f909d9035300a3ea103e49645080ec03d28be897f98ff9b38ce2e
Windows x86_64 jreleaser-standalone-1.13.1-windows-x86_64.zip (asc)
sha256:3d442fba95c3ee4d2e55c8af12f7e74a5dfd0e4324fa8a10c21e68bf922a8366
Windows Arm64 jreleaser-standalone-1.13.1-windows-aarch64.zip (asc)
sha256:2029d42e1ea904733dd04d35ac5b087082180d9e0646abaf1190fecc0554d9bb

📦 Installers

These binaries provide their own Java runtime.

Platform Artifact
MacOS x86_64 jreleaser-installer-1.13.1-osx-x86_64.pkg (asc)
sha256:591b4339081886bc3902eadc6b7a588aa676defd44aecca9600dc02b7e7a1317
MacOS Arm64 jreleaser-installer-1.13.1-osx-aarch64.pkg (asc)
sha256:82ff7ad5c24c871a1bcacec4a05ab9e031c2adecf27c49347831681dd6d1b0e2
Linux x86_64 (glibc) jreleaser-installer_1.13.1-1_amd64.deb (asc)
sha256:b6561a019f80479a3112cc43f382b0be6874f48ed70f5d82b8131472f0ee8136
Linux x86_64 (glibc) jreleaser-installer-1.13.1-1.x86_64.rpm (asc)
sha256:dee28e40279ba06c1e45f75acae50560ea9489d47d1098e5b8bc6d52e2f2ab2c
Windows x86_64 jreleaser-installer-1.13.1-windows-x86_64.msi (asc)
sha256:618d34f5be646a7afac3e4a960179a6c02cd9be8f1cdc3f12ffc6e52025d5e70

💻 Native Executables

Platform Artifact
MacOS x86_64 jreleaser-native-1.13.1-osx-aarch64.zip (asc)
sha256:b757904cc8625d0fab4d205c933c7e8b5ec2ec264c7f95be667d19fbcf1d6d43
MacOS Arm64 jreleaser-native-1.13.1-osx-x86_64.zip (asc)
sha256:197f8ae34681e704b61b595aafc7e49237576616126cf269c809e8256ec2ff72
Linux x86_64 (glibc) jreleaser-native-1.13.1-linux-x86_64.zip (asc)
sha256:e1c264c74603f2b19cc0698faddd3bb05fb91c06f4863bc5c505f84aa3db2c87
Windows x86_64 jreleaser-native-1.13.1-windows-x86_64.zip (asc)
sha256:b108e1f2ac435f02af90f0ad965e907f8a8ca24c1a66934114d98e8b3c1c94b1

Verify Provenance

SBOMS

SLSA

  1. Install or build the slsa-verifier binary.
  2. Download jreleaser-all-1.13.1.intoto.jsonl
  3. Download the binary or binary files you'd like to verify.
  4. Run the verifier against the binary. For example
$ slsa-verifier verify-artifact jreleaser-1.13.1.zip \
   --provenance-path jreleaser-all-1.13.1.intoto.jsonl \
   --source-uri github.com/jreleaser/jreleaser
Verified signature against tlog entry index 8865454 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77acceaa92d35076867e961260048db8f9ee7726329e5a14ae3a6cfd678aeacad11
Verified build using builder https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@refs/tags/v1.4.0 at commit caa516c7c52ca72a352f97e4153334080f8b7f43
PASSED: Verified SLSA provenance

PGP

  1. Download the public key
  2. Verify the fingerprint matches the following:
$ gpg --show-keys aalmiray.asc
pub   rsa4096 2021-02-10 [SC] [expires: 2031-02-08]
      F1D5F6A91C86B0702CD0734BCCC55C5167419ADB
uid                      Andres Almiray <aalmiray@gmail.com>
sub   rsa4096 2021-02-10 [E] [expires: 2031-02-08]
  1. Import the key with gpg --import aalmiray.asc.
  2. Verify the chosen artifact with:
$ gpg --verify jreleaser-1.13.1.zip.asc jreleaser-1.13.1.zip
gpg: Signature made Tue Dec 13 06:51:49 2022 CET
gpg:                using RSA key CCC55C5167419ADB
gpg: Good signature from "Andres Almiray <aalmiray@gmail.com>" [ultimate]
Clone this wiki locally