Version 0.32.0 (2026-05-21)

Release Notes

This release contains several bugfixes and an update to the npm installer to reduce its dependencies. It also updates the default versions of all GitHub actions.

npm installer

The npm installer now relies on builtin node modules in place of the external axios and rimraf libraries. In order to support this, we've raised the minimum supported node version to 14.14.

• impl @rafaeelaudibert chore(npm): replace axios with native node:http/node:https

cargo-zigbuild and cargo-auditable

It's now possible to use cargo-auditable together with cross-compilation via cargo-zigbuild. In previous versions of dist, these two features were mutually exclusive.

• impl @mistydemeo feat(auditable): remove zigbuild limitation

Fixes

• impl @eegli fix: double escape windows path in receipt
• impl @woodruffw ps1: peek the inner exception on download failure
• impl @mistydemeo feat(ci): migrate from attest-build-provenance@v3 to attest@v4
• impl @OpenSauce chore(deps): bump github actions

Install cargo-dist 0.32.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.32.0/cargo-dist-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/axodotdev/cargo-dist/releases/download/v0.32.0/cargo-dist-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install axodotdev/tap/cargo-dist

Install prebuilt binaries into your npm project

npm install @axodotdev/dist@0.32.0

Download cargo-dist 0.32.0

File	Platform	Checksum
cargo-dist-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
cargo-dist-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
cargo-dist-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
cargo-dist-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
cargo-dist-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
cargo-dist-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
cargo-dist-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo axodotdev/cargo-dist

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>