chore(deps): update ghcr.io/charmbracelet/vhs docker tag to v0.10.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/charmbracelet/vhs	stage	minor	v0.9.0 -> v0.10.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

charmbracelet/vhs (ghcr.io/charmbracelet/vhs)

v0.10.0

Compare Source

Changelog

New Features

• d9fd05f: feat: support additional alt/ctrl/shift special characters (#​582) (@​raphamorim)

Bug fixes

• 5fd3e35: fix(ci): use meta lint workflow (@​aymanbagabas)
• b461e7b: fix(record): propagate env of vhs process to record terminal (#​572) (@​tr3mor)
• ed7c8a9: fix(record): set PAGEX to PAGE_X for proper capitalization (#​570) (@​bashbunni)
• ab03c35: fix: lint (@​caarlos0)
• 710bb76: fix: lint (#​637) (@​caarlos0)
• ce7286f: fix: lint issues (@​caarlos0)
• fd38bed: fix: source nested tapes (#​567) (@​rsteube)
• 25d888f: fix: source not respecting arguments of sourced commands (#​604) (@​caarlos0)
• 2c7733e: fix: sync golangci-lint config (#​573) (@​github-actions[bot])

Dependency updates

• aeecc2f: fix(deps): glamour (@​caarlos0)

Documentation updates

• e9647e8: docs: add "Enter" to cleanup example (#​598) (@​mdjohns)
• 9c6a385: docs: add contributing guidelines (#​636) (@​bashbunni)

Other work

• 90220f7: ci: add lint-sync job (@​caarlos0)
• b41d47f: ci: fix build (#​602) (@​caarlos0)
• 1d29712: ci: remove lint-soft.yml (@​caarlos0)
• 517bcda: ci: set goreleaser version (@​caarlos0)
• 02e73ee: ci: sync dependabot config (#​586) (@​charmcli)
• 9583c54: ci: sync dependabot config (#​587) (@​charmcli)
• 380e0de: ci: sync dependabot config (#​618) (@​charmcli)
• 4fb70ff: ci: sync golangci-lint config (@​caarlos0)
• ce18cfa: ci: sync golangci-lint config (#​597) (@​github-actions[bot])
• 987c1ab: ci: sync golangci-lint config (#​599) (@​github-actions[bot])
• 7929ef2: ci: sync golangci-lint config (#​607) (@​github-actions[bot])
• 24b40a4: ci: sync golangci-lint config (#​629) (@​github-actions[bot])
• 9901ed9: refactor: cleanup repeated code (#​628) (@​alaingilbert)

---

Verifying the artifacts

First, download the checksums.txt file, for example, with wget:

wget 'https://github.com/charmbracelet/vhs/releases/download/v0.10.0/checksums.txt'

Then, verify it using cosign:

cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/vhs/releases/download/v0.10.0/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/vhs/releases/download/v0.10.0/checksums.txt.sig' \
  ./checksums.txt

If the output is Verified OK, you can safely use it to verify the checksums of other artifacts you downloaded from the release using sha256sum:

sha256sum --ignore-missing -c checksums.txt

Done! You artifacts are now verified!

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.