Joinery releases
Joinery releases
Every Joinery release is built from a public commit and recorded in Sigstore's public log before any site installs it. A site installs only a release whose record is in that log, so a release cannot reach a site without becoming public here first.
Releases
| Version | Published | Core commit | Agent commit | Log entry | Seen in the log |
|---|---|---|---|---|---|
| 0.8.468 | 2026-10-08 | 7635432a7986 |
cd12d70ea9ba |
log2025-1.rekor.sigstore.dev #142964695 |
2026-10-08 14:02 UTC |
Installs release key 7516f0137b1384e2;
log key log2025-1.rekor.sigstore.dev b54813cb63d88598 (Sigstore lists it) |
|||||
| 0.8.467 | 2026-10-08 | c2cfbfaf19b6 |
cd12d70ea9ba |
log2025-1.rekor.sigstore.dev #142820611 |
2026-10-08 14:02 UTC |
Installs release key 7516f0137b1384e2;
log key log2025-1.rekor.sigstore.dev b54813cb63d88598 (Sigstore lists it) |
|||||
| 0.8.466 | 2026-10-07 | 42c422d7e325 |
cd12d70ea9ba |
log2025-1.rekor.sigstore.dev #142718338 |
2026-10-08 14:02 UTC |
Installs release key 7516f0137b1384e2;
log key log2025-1.rekor.sigstore.dev b54813cb63d88598 (Sigstore lists it) |
|||||
A release logged and not shipped is a publish that stopped after its record was written. The log keeps every record for good, so each one is listed here. Keys are shown by the first 16 hex digits of the SHA-256 of their public key. Each log key is checked once a day against Sigstore's trusted root, last at 2026-10-08 14:50 UTC.
Watching the log
Every hour this site reads each new entry of the logs sites trust, looking for records signed with our release key. Each one must be a release listed above; any other would be a release that sites would install and that we did not publish, and would be shown at the top of this page.
| Log | Read from entry | Read to entry | Last caught up |
|---|---|---|---|
log2025-1.rekor.sigstore.dev |
142718338 | 143480150 | 2026-10-08 15:03 UTC |
Check a release yourself
This page is served by us, so it can point but not prove. To check a release from your own computer, clone the public repository and run:
php utils/verify_release.php 0.8.468 --source=https://dev.getjoinery.comIt rebuilds the release from the public commits, compares it with what was published, and checks its entry in the public log.