v1.1.0

1.1.0 (2026-01-25)

Features

• cache: implement comprehensive caching support (#27) (ed360f2)
• ci: add publish-src workflow for test image (#23) (b96d513)

Bug Fixes

• deps: update blob to v1.1.1 (#28) (ccec3ee)
• policy: use branch name without refs/heads prefix (#25) (78d6aac)

Verification

Verify the checksums signature:

cosign verify-blob \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp="https://github.com/meigma/blob-cli" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  checksums.txt

Verify an SBOM signature:

cosign verify-blob \
  --bundle blob_1.1.0_linux_amd64.tar.gz.sbom.spdx.json.bundle \
  --certificate-identity-regexp="https://github.com/meigma/blob-cli" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  blob_1.1.0_linux_amd64.tar.gz.sbom.spdx.json

Verify artifact integrity:

sha256sum -c checksums.txt --ignore-missing

v1.0.0

1.0.0 (2026-01-24)

Features

• add CLI boilerplate with Cobra/Viper (#1) (1e2b11f)
• add configuration foundation with typed config and context propagation (#5) (f1b0167)
• alias: implement alias list, set, and remove commands (#7) (efa1865)
• cat,cp: implement cat and cp commands (#13) (3e60c94)
• deps: upgrade blob library to v1.1.0 (#14) (e5c5e8b)
• inspect: implement inspect command (#15) (2b51a30)
• ls,tree: implement ls and tree commands (#9) (4c40d6e)
• open: implement interactive TUI file browser (#19) (734e835)
• pull: implement pull command with policy verification (#11) (0d98c25)
• push: implement push command with signing support (#8) (8d269cf)
• release: add release automation with goreleaser and release-please (#20) (c370975)
• sign,verify: implement sign and verify commands (#16) (61a4519)
• tag: implement tag command (#17) (79a5800)
• test: add comprehensive integration tests (#18) (856b936)

Code Refactoring

• tests: use testify assert/require for config tests (#6) (9222a5e)

Verification

Verify the checksums signature:

cosign verify-blob \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp="https://github.com/meigma/blob-cli" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  checksums.txt

Verify an SBOM signature:

cosign verify-blob \
  --bundle blob_1.0.0_linux_amd64.tar.gz.sbom.spdx.json.bundle \
  --certificate-identity-regexp="https://github.com/meigma/blob-cli" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  blob_1.0.0_linux_amd64.tar.gz.sbom.spdx.json

Verify artifact integrity:

sha256sum -c checksums.txt --ignore-missing