chore: release 0.3.3

Patch release for the full-repo audit of 0.3.2: ownership query
correctness (changes, alias search, graph, investor lookup), snapshot
sync safety, request and lock time limits, the CLI output contract and
terminal-safe output, fundamental rating logic, publisher and installer
robustness, and zip off a yanked release (#51).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3syn2fN2LNo5pvTSqc6eh
This commit is contained in:
hermes 2026-10-17 05:57:14 +00:00
commit ebdba13a41
8 changed files with 13 additions and 13 deletions

View file

@ -38,7 +38,7 @@ npx idx-cli --help
```
The package version and the release tag must match. For example, package
version `0.3.2` downloads assets from the `v0.3.2` GitHub Release.
version `0.3.3` downloads assets from the `v0.3.3` GitHub Release.
The postinstall script downloads `SHA256SUMS` from the same release and
refuses to install a binary whose checksum does not match.
@ -105,7 +105,7 @@ URLs must stay aligned with `scripts/install.js`.
To attach binaries to a tag that already exists, run the workflow manually:
```bash
gh workflow run release.yml -f tag=v0.3.2
gh workflow run release.yml -f tag=v0.3.3
```
Pull requests that touch the workflow or the installer run the build jobs