Sysand 0.1.6

Sysand Changelogs
1

Released on July 14, 2026

This release adds index URL templates, which enables using a GitLab
repository as a package index directly, whereas previously this required using
GitLab pages. See URL templates
reference and example Sysand index
GitLab repository
for details.

New features added

  • feat: support URL templates for index locations ({path} / {path_raw}) #440

Enhancements made

  • bindings: small improvements to Python API #411
  • kpar: write pretty-printed .project.json and .meta.json to the kpar #434

The previous few releases did not have their own posts, so they’re included here:

v0.1.5 - 2026-07-02

The main change in this release is support for
trusted publishing,
for sysand publish. By default, supported CI environments, currently GitHub
Actions and GitLab CI including Enterprise or self-managed provider domains,
use trusted publishing automatically before falling back to
SYSAND_CRED_<x>_BEARER_TOKEN. In other environments, publishing works as
before. Trusted publishing can be configured via the --trusted-publishing
flag on sysand publish. See sysand publish --help for more information.

New features added

  • feat: add --trusted-publishing=auto flag to sysand publish #420

Enhancements made

  • feat: sign and attest provenance of published container images #423
  • feat: use consistent path canonicalization everywhere, most relevant on Windows #414

Maintenance and upkeep improvements

  • feat: validate paths consistently for lockfile and publishing #419

v0.1.4 - 2026-06-16

This release contains a fix for a bug that could truncate large metadata files
when building a KPAR.

sysand build for large projects and sysand include when many files are
provided are now much faster.

sysand publish now checks more requirements locally, instead of relying on
the server, which results in somewhat nicer and more actionable error messages.

Enhancements made

  • feat: improve performance of include, build and exclude #406
  • feat: perform most of KPAR pre-publish checks before publishing #400

v0.1.3 - 2026-06-12

This release includes a single fix for a bug that could incorrectly report
the offending file in case .project.json or .meta.json failed to parse.

Bugs fixed

  • fix: don’t hardcode file name in error #399

v0.1.2 - 2026-06-11

This release includes only packaging and installation script improvements.
Notably, we now provide a static Linux build with musl libc, and have
lowered glibc requirement for non-musl from 2.39 to 2.35.

The installation scripts are now configured via environment variables
instead of flags, so automation using them (e.g. CI) needs to be
updated. The scripts are hosted at:

See installation instructions to install sysand.

See the changelog for all changes.