Repository navigation
v1.4.5
ChannelWatch v1.4.5 - Reliable release transport
Important
- Signed in-app update for the v1.4.0 image. You can install it from Settings > Updates without recreating the container.
Fixed
- Keep the exact Apply or Retry job through temporary restart disconnects, resume it after Settings reopens, and refresh only when that job and the new runtime are ready.
- Show a compatible signed future image-required release as an announcement without treating its runtime bundle as an installable app update.
- Write the candidate transport context as exact canonical JSON bytes so the isolated signer can seal and hand off the verified release candidate.
- Verify that the failed v1.4.4, v1.4.3, and v1.4.2 tags have no GitHub releases before retaining v1.4.1 as the signed catalog predecessor.
- Check the exact versioned OpenVEX security document before publishing update assets.
Docs
ChannelWatch Official Docs Site
Images
Docker Hub:
coderluii/channelwatch:1.4.5
coderluii/channelwatch:latest
GHCR:
ghcr.io/coderluii/channelwatch:1.4.5
ghcr.io/coderluii/channelwatch:latest
License and verification
ChannelWatch is MIT-licensed. The container and app-update bundle include the project notices, applicable complete copyleft license texts, and an exact corresponding-source map.
- Third-party license inventory
- Corresponding-source and rebuild map
- Complete copyleft license texts
- Release asset checksums
- Exact amd64 and arm64 SPDX and CycloneDX SBOMs are attached below; every other attached asset is covered by the checksum manifest.