release: v0.0.13

[tonychang04]

Gzipped binaries (~20MB) + install progress bar. 🤖 https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P

---

Summary by cubic

Release v0.0.13 of insta ships gzipped binaries (~20 MB) for smaller downloads and adds an install progress bar for clearer feedback.

• New Features
  • Gzipped release binaries to reduce download size (~20 MB).
  • Install process now shows a progress bar during download/extraction.

^{Written for commit 1be61a0. Summary will update on new commits.}

[jwfing]

LGTM - approved.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[jwfing]

Summary

Release PR that bumps insta from 0.0.12 → 0.0.13 in package.json (single line) to cut the release whose features — gzipped binaries and an install progress bar — already landed via #37 and #38.

Requirements context

No /docs/superpowers/ (or any docs/) directory exists in this repo, so no spec/plan matched — assessing against the PR description, the release-process conventions, and the actual branch state. Verified the release notes against the merged history: c9abc40 fix(install): show download progress (#37) and 689ce59 perf(install): gzip binaries (#38) are both already on main ahead of this bump, so this PR correctly only carries the version increment.

Findings

Critical

(none)

Suggestion

• Software engineering — package-lock.json root is stale: name: "insta-cli", version: "0.0.0" (package-lock.json:2-3, :8-9), while package.json is name: "insta", version: "0.0.13". This is pre-existing (the lock was already 0.0.0 before this PR; #39 only touches package.json) and npm ci passes cleanly (exit 0), so it is not blocking here. Worth a small hygiene follow-up to run npm version/npm install so the lock tracks the package name and version.

Information

• Functionality — Verified the release notes match shipped code: progress bar via curl --progress-bar gated on a TTY (install.sh:85-87) and gzip download with graceful fallback to the raw binary for older releases (install.sh:88-92); the release workflow gzips the unix binaries and install.sh gunzips them (.github/workflows/release.yml:70-72). Version increment is a correct monotonic patch bump and no stale 0.0.12 references remain in src/, install.sh, scripts/, or .github/.
• Security — No security-relevant changes in this PR (version string only). Separately, npm audit reports 5 pre-existing dependency vulnerabilities (1 critical, 1 high, 3 moderate) — not introduced or touched here; recommend a dedicated dependency-bump PR to address them out of band.
• Performance — No runtime performance changes in this diff; the download-size win (gzip) landed in #38.

Verdict

approved (informational) — zero Critical findings. A pure release version bump that is in scope, consistent with the repo's release: vX.Y.Z convention, and matches the features already merged. One non-blocking lockfile-hygiene suggestion. (Green-checkmark approval remains a separate human action.)