Releases and artifact status
This page is the release surface for TrustPlane Auth: what the current release contains, what each earlier release added, and the publication status of every artifact type. For download URLs, checksums, and pinning rules, see Install and artifacts.
Current artifact set: CLI v0.2.5; adapter v0.2.5; chart 0.2.2; SDKs 0.2.3
Section titled “Current artifact set: CLI v0.2.5; adapter v0.2.5; chart 0.2.2; SDKs 0.2.3”| Artifact | Status |
|---|---|
| CLI archives | Published: trustplane_v0.2.5_<os>_<arch>.tar.gz for darwin/linux × amd64/arm64, with SHA256SUMS and a machine-readable release-manifest.json. GitHub artifact attestations are unavailable for this release. No Windows archive in this set. |
| Adapter image | Published: ghcr.io/trustplane-dev/trustplane-auth-adapter:v0.2.5 (public). Pin the digest from the package page. |
| Helm chart | Published: oci://ghcr.io/trustplane-dev/charts/trustplane-auth, version 0.2.2. |
| Broker image | Not published. The broker runs from source builds and the local demo. |
| Go SDK | v0.2.3 — listed on the Go module proxy. |
| TypeScript SDK | 0.2.3 — npm latest points to 0.2.3. Node.js-only. |
| Python SDK | 0.2.3 — listed on PyPI. |
| Local first-request fixture | Docs utility v0.1.3 with a versioned download, checksum, and manifest and source tag. This version does not version the CLI. |
Checksum verification is mandatory before running any downloaded CLI binary.
Release history
Section titled “Release history”| Release | What it added |
|---|---|
v0.2.5 |
Current CLI archives from the existing GPG-signed source tag. The source release restores signed offline lease renewal. The four archive checksums and macOS arm64 local fixture smoke were verified; release notes document the unavailable GitHub artifact attestations. |
v0.2.4 |
Inspected CLI release. Workload-profile resolve parses signing_kid/kid; the CLI signs passports under the resolve-issued signing kid (ta-g1-*), fixing missing_issuer_key. This CLI version does not set adapter/chart/SDK versions. |
v0.2.2 |
Enrollment fixes: projected proof-file handling (Kubernetes Atomic Writer symlink chains) and enrollment status polling backoff. |
v0.2.1 |
trustplane enroll — Control Trust Anchor enrollment (OIDC JWKS and the other provider profiles), plus enrollment retry/Azure proof-mode safety. |
v0.2.0 |
First v0.2 line release. |
v0.1.0-rc.x |
Historical: established the v0.1 local boundary — passport issuance/verification, transcript-v1 signing, bundles, local broker demo, adapter. |
The SDKs (0.2.3 across Go, TypeScript, and Python) are versioned independently of the
CLI/runtime releases.
Release scope
Section titled “Release scope”- A release tag identifies the artifact set that release published — nothing more. Per-profile enrollment availability lives in Trust Anchor source availability.
- The v0.1 acceptance gate (
make v01-acceptance) validates the frozen v0.1 compatibility contract, not the full current release. - Missing fields in older audit events are version skew, not corruption — see the Audit guide.
Support and operating context
Section titled “Support and operating context”- Availability and product boundaries — current limitations and the safe operator posture for each.
- FAQ — short answers on scope and boundaries.
- Install and artifacts — canonical artifact reference.