From f946c04fb96432cabb05926a470650a5ac5181bf Mon Sep 17 00:00:00 2001 From: Arnon Rotem-Gal-Oz Date: Tue, 8 Sep 2026 20:01:47 +0300 Subject: [PATCH] chore: add MIT LICENSE and make release checksums verifiable MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The README has always declared MIT, but no LICENSE file backed it. The repo is now public and shipping binaries, so without one nobody has explicit rights to use them and package managers (Homebrew among them) will reject the project. The checksums file was also unusable as published: it was generated as `sha256sum dist/mcli-*`, so every line carried a `dist/` prefix that does not exist where users download the assets side by side. Worse, sha256sum exits 0 when it cannot find any of the listed files, so an install script that believed it was verifying checksums verified nothing at all. Generating it from inside dist/ records flat names, which verify where the files actually land — and fail, with a non-zero exit, when a binary does not match. Co-Authored-By: Claude Opus 5 --- .github/workflows/release.yml | 8 +++++++- LICENSE | 21 +++++++++++++++++++++ 2 files changed, 28 insertions(+), 1 deletion(-) create mode 100644 LICENSE diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5c3a797..294d186 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -72,8 +72,14 @@ jobs: path: dist/ merge-multiple: true + # Run inside dist/ so the recorded names are flat (mcli-linux-amd64, not + # dist/mcli-linux-amd64). Users download the assets side by side, where a + # dist/ prefix makes `sha256sum -c checksums.txt` fail to find every file — + # and it exits 0 when no file is found, so a scripted install that thinks it + # verifies checksums would silently verify nothing. - name: Checksums - run: sha256sum dist/mcli-* > dist/checksums.txt + working-directory: dist + run: sha256sum mcli-* > checksums.txt - name: Create release env: diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..c7540a2 --- /dev/null +++ b/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2026 monday.com Ltd. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE.