Verify a download: sha256sum --ignore-missing -c checksums.txt, and check the signature with
cosign verify-blob --bundle checksums.txt.sigstore.json --certificate-identity-regexp 'https://github.com/TMHSDigital/subenum/' --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt.

Full Changelog: v0.7.0...v0.8.0

What's Changed

• fix: finalize structured output only on success; docs facelift + em-dash normalize by @TMHSDigital in #17
• chore(deps): bump actions/configure-pages from 5 to 6 by @dependabot[bot] in #7
• chore(deps): bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #8
• chore(deps): bump actions/upload-pages-artifact from 4 to 5 by @dependabot[bot] in #10
• chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #9
• Revert action-gh-release v3 bump (PR #9): v3 breaks parallel release matrix by @TMHSDigital in #18
• ci: serialize release creation so the upload matrix never races by @TMHSDigital in #19
• ci: adopt softprops/action-gh-release@v3 (safe with serialized release creation) by @TMHSDigital in #20
• ci: draft-then-publish releases to close the empty public window by @TMHSDigital in #21
• ci: clean up draft release on failed release runs by @TMHSDigital in #22

Full Changelog: v0.6.0...v0.7.0

What's new in v0.5.0

Added

• Interactive Terminal UI (-tui flag) — form-based config screen and live-scrolling results view built with Bubble Tea. No CLI arguments required to launch.
• \make tui\ Makefile target for one-command TUI launch.
• \internal/scan\ package — extracted scan engine (\scan.Run) with a typed \Event\ channel, reusable by both the CLI and TUI.
• Session persistence — last-used form values saved to ~/.config/subenum/last.json\ and restored on next launch or after pressing
  \ (new scan).

Changed

• CLI scan loop in \main.go\ now delegates to \scan.Run()\ instead of containing the worker pool inline.
• External dependencies added: \github.com/charmbracelet/bubbletea\ and \github.com/charmbracelet/bubbles\ (TUI only; the CLI path retains zero external dependencies).
• TUI form field order: Simulate toggle promoted to field 3 (was field 8); Hit Rate row is hidden when Simulate is OFF.
• TUI now shows a blinking cursor inside the active text input.
• Pressing
  \ on the scan results screen returns to the form with last-used values pre-filled.

TUI keyboard reference

What's Changed

Added

• Wildcard DNS detection with double-probe confirmation; exits by default, continue with -force
• Wordlist deduplication (duplicates removed before scanning, count reported in verbose mode)
• -attempts flag replacing -retries (deprecated, still accepted with warning)
• -force flag to override wildcard detection and scan anyway

Changed

• Refactored into internal/dns, internal/output, internal/wordlist packages
• Progress, verbose, and diagnostic output moved to stderr (stdout is now pipe-clean)
• Module path updated to github.com/TMHSDigital/subenum
• Docker build updated to include internal/ packages
• golangci-lint config migrated to v2 format

Fixed

• Progress ticker no longer corrupts piped stdout output
• -retries semantics clarified via rename to -attempts
• CRLF line endings normalized; .gitattributes enforces LF for Go source going forward

Full changelog: https://github.com/TMHSDigital/subenum/blob/main/CHANGELOG.md