Skip to content

v2.0.1
Compare
Choose a tag to compare
@github-actions github-actions released this 10 Nov 18:50
· 709 commits to main since this release
v2.0.1
This tag was signed with the committer’s verified signature.
lann Lann
GPG key ID: A30EEE9905396642
Learn about vigilant mode.
1d72f1c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Spin 2.0.1

This is a patch release of Spin containing performance and bug fixes.

Changes

  • Wasmtime: several changes were backported to a temporary fork of Wasmtime 14.0.4
  • Rust SDK
    • #2083 fixes non-streaming outgoing POST requests
  • Go SDK
    • #2075 adds a missing function to the KV API

Verifying the Release Signature 🔏

After downloading the v2.0.1 release of Spin, either via the artifact attached to this release corresponding to your OS/architecture combination or via the installation method of your choice, you are ready to verify the release signature.

First, install cosign. This is the tool we'll use to perform signature verification. Then run the following command:

cosign verify-blob \
    --signature spin.sig --certificate crt.pem \
    --certificate-identity https://github.com/fermyon/spin/.github/workflows/release.yml@refs/tags/v2.0.1 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository fermyon/spin \
    spin

If the verification passed, you should see:

Verified OK
Assets 8