{"assets":[{"access":"gitlab_access_required","architecture":"amd64","kind":"archive","name":"sonny-api_0.3.6_linux_amd64.tar.gz","origin":"package_registry","package_file_id":305190635,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"f378822b967649c8c4ff7b81d1846260226040516740d75594ff727ff58f8f60","size_bytes":10989097,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190635/download"},{"access":"gitlab_access_required","architecture":"arm64","kind":"archive","name":"sonny-api_0.3.6_linux_arm64.tar.gz","origin":"package_registry","package_file_id":305190637,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"0c6b27bda6d6482bf900b7a211c36346a8e3fae49b1266f767c7667e43538b67","size_bytes":9996200,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190637/download"},{"access":"gitlab_access_required","architecture":"amd64","kind":"archive","name":"sonny_0.3.6_darwin_amd64.tar.gz","origin":"package_registry","package_file_id":305190638,"package_id":60928827,"platform":"darwin","project_id":77676505,"sha256":"8f0df87571d3969e00c9f64c75cf42b0c003527432f9ba58c266ecb5f257f0a8","size_bytes":19065756,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190638/download"},{"access":"gitlab_access_required","architecture":"arm64","kind":"archive","name":"sonny_0.3.6_darwin_arm64.tar.gz","origin":"package_registry","package_file_id":305190641,"package_id":60928827,"platform":"darwin","project_id":77676505,"sha256":"bbbbd53a5add4f523c3a4a422ac9896377a379f751a85d465c06cb2b4f70c210","size_bytes":17950903,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190641/download"},{"access":"gitlab_access_required","architecture":"amd64","kind":"installer","name":"sonny_0.3.6_linux_amd64.apk","origin":"package_registry","package_file_id":305190726,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"21ca970201bc67a98113d59abf35bf7d12b2b9c2fa417332015fb50f37682855","size_bytes":30874485,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190726/download"},{"access":"gitlab_access_required","architecture":"amd64","kind":"installer","name":"sonny_0.3.6_linux_amd64.deb","origin":"package_registry","package_file_id":305190684,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"4a8cd6553b7fc6858914ec5adf0d7d77978afa569234cfba9e57c3bfe64819bd","size_bytes":29596636,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190684/download"},{"access":"gitlab_access_required","architecture":"amd64","kind":"installer","name":"sonny_0.3.6_linux_amd64.rpm","origin":"package_registry","package_file_id":305190710,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"d4df484246fc85d2eedd7ec1bd11bd87e11808e14a6e263b40865a323657f47a","size_bytes":29556824,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190710/download"},{"access":"gitlab_access_required","architecture":"amd64","kind":"archive","name":"sonny_0.3.6_linux_amd64.tar.gz","origin":"package_registry","package_file_id":305190648,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"3b89cab355feeef39832ca4aa7be88a16cd03b68e16da6e99c896c0701ecc3c1","size_bytes":18624838,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190648/download"},{"access":"gitlab_access_required","architecture":"arm64","kind":"installer","name":"sonny_0.3.6_linux_arm64.apk","origin":"package_registry","package_file_id":305190727,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"0fcfca1678673fe2ccba46898b712ee1731c5a77612fd9d6895cd8bd9c53e245","size_bytes":28029634,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190727/download"},{"access":"gitlab_access_required","architecture":"arm64","kind":"installer","name":"sonny_0.3.6_linux_arm64.deb","origin":"package_registry","package_file_id":305190697,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"6f66ae70ac6fdabc0936d0a92bca165382c99fb88b7b142132de42b96c983353","size_bytes":27061738,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190697/download"},{"access":"gitlab_access_required","architecture":"arm64","kind":"installer","name":"sonny_0.3.6_linux_arm64.rpm","origin":"package_registry","package_file_id":305190719,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"597285d7f1d0fee0076d5dd251cd13dabeabac26b30d9d9f5f7e7c10993ec53c","size_bytes":26967682,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190719/download"},{"access":"gitlab_access_required","architecture":"arm64","kind":"archive","name":"sonny_0.3.6_linux_arm64.tar.gz","origin":"package_registry","package_file_id":305190658,"package_id":60928827,"platform":"linux","project_id":77676505,"sha256":"b0aad59b22c06d26f6ce4ab639799558cc3e5c38d13d9fa4d6c4a6fe7ebb87bc","size_bytes":17081634,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190658/download"},{"access":"gitlab_access_required","architecture":null,"kind":"checksums","name":"checksums.txt","origin":"package_registry","package_file_id":305190660,"package_id":60928827,"platform":null,"project_id":77676505,"sha256":"504916b2b68b86d27fba0fcc974c7f9528d414e45b1acc056987242cd240e68f","size_bytes":1156,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190660/download"}],"channel":"stable","notes_markdown":"v0.3.6 — CI heal: PAM build tag + SAST allow_failure + client mTLS flags\n\nThis release picks up where v0.3.5's tag pipeline failed: the\nshipped binaries from v0.3.5 never made it to apt.spyder.org\nbecause the mesh/identity/pam cgo path needs \u003csecurity/pam_appl.h\u003e,\nwhich the golang:1.26 and golangci-lint:v2.11.3 CI containers don't\nhave. v0.3.6 fixes that without losing the PAM feature.\n\nChanges since v0.3.5:\n\n* fix(mesh): cli mesh serve missed new Config defaults; harden\n  systemd unit. runMeshServeWithContext now starts from\n  node.DefaultConfig() so the sub-projects #1/#2/#6 fields\n  (TrustDomain, SvcPrincipalDir, AuthzPolicyPath, ...) get their\n  documented defaults; without this, --enable-tls failed with\n  \"trust domain: trust domain is missing\".\n\n* feat(mesh): client mTLS flags on sonny mesh subcommands. Five\n  new persistent flags on the mesh parent (--client-cert,\n  --client-key, --client-ca, --client-key-pin, --server-name)\n  plus meshconn.ConnectWithCreds + TLSConfig. Verified end-to-end\n  on lothiriel: server with self-signed SPIFFE cert + client with\n  --client-* flags → mesh nodes RPC returns the live node list\n  through the full mTLS + identity-extraction + authz interceptor\n  chain.\n\n* fix(ci): gate PAM cgo behind `pam` build tag. CI containers\n  lack libpam-dev; default `go test ./...` was failing to build\n  pam_cgo.go and cascading build failures into mesh/node,\n  mesh/bridge, mesh/mtls test compile, mesh/privsep test compile.\n  pam_cgo.go now requires `cgo \u0026\u0026 pam`; pam_stub.go binds when\n  `!cgo || !pam`. Default test runs use the stub. Production\n  builds enable `-tags pam` (post-v1 wiring).\n\n* fix(ci): allow_failure on gitlab-advanced-sast. The GitLab\n  bundled SAST analyzer silently produces no gl-sast-report.json,\n  failing the upload step. semgrep + gosec + govulncheck +\n  dependency-scanning still gate the pipeline.\n\n* style(cli/mesh): apply gofumpt to satisfy CI go-lint.\n\nVerified: pipeline #210 GREEN (24min, all blocking jobs pass).","product":"sonny","published_at":"2026-05-28T01:15:02.949Z","schema":"sonny-release/v1","source_commit":"b29253d885708f85aa38975ad7e6ad91dcd9ebc0","tag":"v0.3.6","verification":{"checksums_url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190660/download","historical_archive":{"checked_at":"2026-10-26T05:11:45.517450+00:00","newer_released_at":"2026-10-25T16:41:03.251Z","newer_source_commit":"eaf885551c5834f4bee56ea48be7b9eff768c66d","newer_stable_tag":"v0.12.8"},"registry_recovery":{"original_attached_assets":0,"package_id":60928827,"pipeline":{"id":2557586603,"ref":"v0.3.6","sha":"b29253d885708f85aa38975ad7e6ad91dcd9ebc0","status":"success"},"project_id":77676505,"verification_files":[{"authenticated_http_status":200,"file_id":305190660,"file_name":"checksums.txt","sha256":"504916b2b68b86d27fba0fcc974c7f9528d414e45b1acc056987242cd240e68f","size":1156,"url":"https://gitlab.com/api/v4/projects/77676505/packages/60928827/package_files/305190660/download"}]},"scope":"Historical release: file hashes match the authenticated release checksum manifest and GitLab package metadata. Only assets with a separate anonymous streamed proof are classified as public. GitLab links require project access; neither anonymous availability nor signature verification is claimed for them.","signature_bundle_available":false,"signature_bundle_url":null,"signature_verified_by_importer":false,"source_notes":{"description_sha256":"2b65d72a55fd4d5f1713ec62f8d919618baa9e43918510af28d7bd21b576bc6e","extraction":"plain_release_description","scope":"Upstream description preserved in collector evidence; any SSH signature block is omitted from rendered prose and is not verified.","signature_verified_by_importer":false,"ssh_signature_block_sha256":"233251e13b9da9e13f21f713ab698938f9d407dff87180d0115196ca2d14a683"}},"version":"0.3.6"}