# The git-attest release the actions run, and the sha256 of each archive
# (decisions ADR-0037). fetch.sh downloads
# git-attest-<version>-<target>.tar.gz from that release, refuses it unless
# its digest is the one written here, and the actions fall back to verify.sh
# and sign.sh when it cannot. A commit therefore names the bytes its actions
# run: a swapped release asset is refused, not run.
#
# Written by the prepare-release workflow, committed in the release PR; never
# by hand. Between releases it names the last release, whose binary main's
# actions then run.
version 1.9.0
aarch64-apple-darwin e8feb73f05be112659357b2fa05fc99f2e825bf44d19ec78b042735b8b7fa147
aarch64-unknown-linux-gnu f3458dada28aef70783b671c79bfe662cea74f92c4959e474286ea894dc61358
x86_64-apple-darwin 3d4875a6e3a5a67a938752f2026218af6b0a4b93616402f15073b9f887688bc3
x86_64-pc-windows-msvc 68421976589e9a9f751f529998bcb3ba2f2ed488966586d08376f4be84265b3c
x86_64-unknown-linux-gnu 78986326a1c1359b5f0d2753cc0cd3d17836fdfd926201a532d340ba328debf4
x86_64-unknown-linux-musl 500f1298365b283066435435cf66513ac07b809fbe486bf44d4ce02f2d826a9e