Downloads¶
Releases are published on GitHub Releases only. Each release
contains the wheel, the source archive, a SHA256SUMS file and a detached GPG signature (.asc) for every file.
ElasticMigrate 2.0.0¶
Tag v2.0.0, published 2026-10-30. Release notes.
File |
Size |
|---|---|
200 B |
|
228 B |
|
29.8 KiB |
|
228 B |
|
58.9 KiB |
|
228 B |
Verifying a download¶
Release files are signed with the maintainer’s OpenPGP key. Its primary key is kept offline; releases are signed with a dedicated signing subkey.
Key |
Fingerprint |
|---|---|
Primary (Zobayer Hasan) |
|
Signing subkey |
|
Import the public key from this site (zobayer1.asc) or from GitHub, and check the fingerprint:
curl -fsSL https://github.com/zobayer1.gpg | gpg --import
gpg --fingerprint 7B6577AF8F94762E
Verify the signature and the checksum of each file you downloaded, for example the wheel:
gpg --verify elastic_migrate-2.0.0-py3-none-any.whl.asc elastic_migrate-2.0.0-py3-none-any.whl
sha256sum --check --ignore-missing SHA256SUMS
Every release file also carries a GitHub build provenance attestation, which records the workflow and commit that built it:
gh attestation verify elastic_migrate-2.0.0-py3-none-any.whl --repo zobayer1/elastic-migrate