chore: release main (#23)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "1.3.3"
+  ".": "1.4.0"
 }

CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## [1.4.0](https://github.com/ChipWolf/dotfiles/compare/v1.3.3...v1.4.0) (2026-03-24)
+
+
+### Features
+
+* **tests:** add bats test suite for source and container validation ([d5db99e](https://github.com/ChipWolf/dotfiles/commit/d5db99e78191aad0dd19a4cf9b3f473d7288a3e9))
+
+
+### Bug Fixes
+
+* **bootstrap:** preserve --require-sha during brew bundle ([a29f777](https://github.com/ChipWolf/dotfiles/commit/a29f77713a2739ca643b894990079df3f4edf81b))
+* **bootstrap:** quote eval $(brew shellenv) to prevent word splitting ([21209bb](https://github.com/ChipWolf/dotfiles/commit/21209bb97df53f789097508d60dc2416f52e3279))
+* **brewfile:** gate tmux formula to macOS only ([028801c](https://github.com/ChipWolf/dotfiles/commit/028801c87a3a446d07628552f21e9f45011c8719))
+* gate tmux and ghostty configs to macOS only ([f7281cf](https://github.com/ChipWolf/dotfiles/commit/f7281cfb3bb35c97eacab8c301ea1c4d6d08b2dc))
+* **git:** set core.editor to nvim instead of vim ([3918e25](https://github.com/ChipWolf/dotfiles/commit/3918e25e9491781414b15a4205b84a88cb6b7c66))
+* **install:** use random temp filename to prevent TOCTOU in install.ps1 ([1388010](https://github.com/ChipWolf/dotfiles/commit/138801091601b85ac8225d9351a5b487cece7a3a))
+* **install:** verify crane tarball checksum before extraction ([b91841e](https://github.com/ChipWolf/dotfiles/commit/b91841e653e342cfa61d44f449df1083b509ccda))
+* **readme:** correct git config path in Forking section ([98a2aab](https://github.com/ChipWolf/dotfiles/commit/98a2aabbd8c9ffdeec521935baa34f18ce6468e0))
+
+
+### Miscellaneous
+
+* **renovate:** track crane version in install.sh via regex manager ([14a986e](https://github.com/ChipWolf/dotfiles/commit/14a986ea67ec1d0aba844cd573106f55319693b6))
+
 ## [1.3.3](https://github.com/ChipWolf/dotfiles/compare/v1.3.2...v1.3.3) (2026-03-24)
 
 

README.md

@@ -41,21 +41,21 @@ Opinionated dotfiles managed with [chezmoi](https://chezmoi.io). One repo config
 > [!WARNING]
 > These scripts fetch and execute code from this repo in a single command. Review them first if that matters to you, or use the [inspect-first path](#inspect-first) below.
 >
-> The install scripts are published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.3.3) assets with [SLSA Build L3](https://slsa.dev/spec/v1.0/levels#build-l3) provenance, verified with: `gh attestation verify install.sh --repo chipwolf/dotfiles` <!-- x-release-please-version -->
+> The install scripts are published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.4.0) assets with [SLSA Build L3](https://slsa.dev/spec/v1.0/levels#build-l3) provenance, verified with: `gh attestation verify install.sh --repo chipwolf/dotfiles` <!-- x-release-please-version -->
 
 **macOS / Linux**
 
 <!-- x-release-please-start-version -->
 ```sh
-sh -c "$(curl -fsSL https://github.com/chipwolf/dotfiles/releases/download/v1.3.3/install.sh)"
+sh -c "$(curl -fsSL https://github.com/chipwolf/dotfiles/releases/download/v1.4.0/install.sh)"
 ```
 <!-- x-release-please-end -->
 
 **Windows** (PowerShell, the script self-elevates)
 
 <!-- x-release-please-start-version -->
 ```powershell
-irm https://github.com/chipwolf/dotfiles/releases/download/v1.3.3/install.ps1 | iex
+irm https://github.com/chipwolf/dotfiles/releases/download/v1.4.0/install.ps1 | iex
 ```
 <!-- x-release-please-end -->
 
@@ -170,7 +170,7 @@ All release artifacts are built with [SLSA Build L3](https://slsa.dev/spec/v1.0/
 
 This covers:
 
-- **Install scripts** (`install.sh`, `install.ps1`): published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.3.3) assets. <!-- x-release-please-version -->
+- **Install scripts** (`install.sh`, `install.ps1`): published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.4.0) assets. <!-- x-release-please-version -->
 - **Codespaces overlay image** ([ghcr.io/chipwolf/dotfiles](https://ghcr.io/chipwolf/dotfiles)): published to GHCR.
 
 > [!NOTE]
@@ -184,7 +184,7 @@ Verify:
 gh attestation verify install.sh --repo chipwolf/dotfiles
 
 # Container image
-gh attestation verify oci://ghcr.io/chipwolf/dotfiles:v1.3.3 --repo chipwolf/dotfiles
+gh attestation verify oci://ghcr.io/chipwolf/dotfiles:v1.4.0 --repo chipwolf/dotfiles
 ```
 <!-- x-release-please-end -->
 

install.ps1

@@ -1,12 +1,12 @@
 # install.ps1 — Bootstrap chezmoi dotfiles on Windows.
 # Forks: update $repoUrl below to point at your fork.
 # Usage (elevated PowerShell not required — script self-elevates):
-#   irm https://github.com/chipwolf/dotfiles/releases/download/v1.3.3/install.ps1 | iex # x-release-please-version
+#   irm https://github.com/chipwolf/dotfiles/releases/download/v1.4.0/install.ps1 | iex # x-release-please-version
 # Or clone the repo and run:
 #   .\install.ps1
 
 $repoUrl = "https://github.com/chipwolf/dotfiles"
-$rawBase = "https://github.com/chipwolf/dotfiles/releases/download/v1.3.3" # x-release-please-version
+$rawBase = "https://github.com/chipwolf/dotfiles/releases/download/v1.4.0" # x-release-please-version
 
 $ErrorActionPreference = "Stop"
 

install.sh

@@ -23,7 +23,7 @@ if [ -n "${CODESPACES:-}" ] && [ -z "${DOTFILES_NO_OVERLAY:-}" ]; then
     tar -xzf "/tmp/_crane/${CRANE_TAR}" -C /tmp/_crane crane
     CRANE=/tmp/_crane/crane
 
-    OUR_IMAGE="ghcr.io/chipwolf/dotfiles:v1.3.3" # x-release-please-version
+    OUR_IMAGE="ghcr.io/chipwolf/dotfiles:v1.4.0" # x-release-please-version
 
     OUR_MANIFEST=$("$CRANE" manifest "$OUR_IMAGE")
     OUR_DIGEST=$("$CRANE" digest "$OUR_IMAGE")