chore(release): 0.4.2

[WomB0ComB0]

Ships the security audit — #46, #47, #50 and #51. All four are on main and reaching nobody: the endpoint serves what PINS says, and PINS still points at v0.4.1, which predates every one of them.

install.sh on main   f38612c071bcd6d4...   has every fix
served (v0.4.1)      639b4167471082c6...   has none of them

What this actually releases

PR	what users get that they do not have now
#46	install-hooks.{sh,ps1} no longer fetch six executables from a mutable branch unverified, chmod +x them, and point core.hooksPath at them — which happened on every fresh onboard, since resq is installed after hooks run
#47	TLS pinned across scripts/lib; nix.sh no longer pipes 4xx bodies into sh; bun.sh no longer fetches schemelessly; apt-key gone, so the Docker key no longer has authority over every repo on the system
#50	Nix installer pinned + verified; Docker from its GPG-signed apt repo instead of get.docker.com; installer failures no longer report success; Debian and Ubuntu suites resolved correctly
#51	Bun's installer pinned to a tagged copy and verified

Diff

Three lines: VERSION, and the two SCRIPT_VERSION values bin/stamp.sh propagates. Every digest constant was already correct on main, so nothing else moves.

Sequence

Merging this is the release — release.yml fires on paths: VERSION, tags v0.4.2, publishes the Release and SHA256SUMS, and opens the pin-bump PR. Merging that second PR is what changes the served bytes.

Verified locally: stamp --check in sync at 0.4.2, shellcheck clean, 48/48 worker tests.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated the application version to 0.4.2.
  • Updated the reported version in the PowerShell and shell installation scripts.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	get-resq-software	e1694f2	Aug 11 2026, 10:55 AM

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b8b869b9-8c0f-41ed-87aa-28b15a05da18

📥 Commits

Reviewing files that changed from the base of the PR and between 2ea9c44 and e1694f2.

📒 Files selected for processing (3)

• VERSION
• install.ps1
• install.sh

---

📝 Walkthrough

Walkthrough

The project version and both installer script versions were incremented from 0.4.1 to 0.4.2.

Changes

Release version alignment

Layer / File(s)	Summary
Update project and installer versions VERSION, install.ps1, install.sh	The project and installer version values now use 0.4.2.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• resq-software/dev#48: Updates the same project and installer version files for a successive release.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the release version update to 0.4.2, which matches the primary change in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v0.4.2

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}