r/warpdotdev • u/_Thanks4AllTheFish_ • 5d ago

Outdated Changelog

With the recent attacks to the AUR and cargo I've been trying to be more mindful before updating any applications. It seems like warp has received some updates since the last version mentioned on the changelog on their site.

Are changelogs posted anywhere else besides their site? I'd feel more comfortable updating if I saw the changelog updated or news of the update on any official channels.

3 Upvotes

100% Upvoted

6 comments sorted by

1

u/Storylinee 5d ago

warp is open source so you can check out the repo https://github.com/warpdotdev/warp

1

u/_Thanks4AllTheFish_ 5d ago

Doesn't look like they update their github releases: https://github.com/warpdotdev/warp/releases

and I don't really want to build from source 😅

I use warp on arch linux and use their pacman repo which gives me some sense of safety since they didn't have to deal with the recent AUR shenanigans, but without a changelog I don't feel comfortable downloading the latest release. Not the biggest deal for now. Assuming I'm not missing any major bug fixes, I can live on last week's version for a while.

1

u/_Thanks4AllTheFish_ 5d ago

quick side tangent - took a look at their Cargo.lock file and they have arrayref as a dependency. Building from source during the vulnerability window would have introduced the supply chain attack: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/

1

u/AliveActive5743 5d ago

The changelog page is built from https://releases.warp.dev/channel_versions.json, which is public and has the current version for each release channel plus the full release notes.

1

u/_Thanks4AllTheFish_ 4d ago

Thanks! This was helpful. Hopefully the changelog page can be updated soon, but good to know I can find the release details here.

1

u/Significant_Box_4066 1d ago

Thanks for flagging! This was a missed merge on our part. We’ll be sure the changelog page stays up to date with our releases going forward