Skip to content

v0.36.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Oct 06:13
v0.36.1
ff3a416
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The notes for this release line are in v0.36.0, including which packages are published.

0.36.1 (2026-10-18)

Bug Fixes

  • docs: name every compose profile in the getting-started teardown (#1286) (f2d64f4)

Images

docker pull ghcr.io/controlvar/controlvar:core-0.36.1      # API, core profile
docker pull ghcr.io/controlvar/controlvar:full-0.36.1      # API, full profile
docker pull ghcr.io/controlvar/controlvar-web:core-0.36.1  # dashboard, core profile
docker pull ghcr.io/controlvar/controlvar-web:full-0.36.1  # dashboard, full profile

API images are built for linux/amd64; dashboard images for
linux/amd64. A host on any other architecture runs them under
emulation.

Verifying

Every image is signed with cosign keyless and carries an SPDX SBOM
attestation:

cosign verify ghcr.io/controlvar/controlvar:core-0.36.1 \
  --certificate-identity-regexp '^https://github\.com/Controlvar/controlvar/\.github/workflows/release\.yml@refs/(heads/main|tags/v[0-9].*)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

cosign verify-attestation --type spdxjson ghcr.io/controlvar/controlvar:core-0.36.1 \
  --certificate-identity-regexp '^https://github\.com/Controlvar/controlvar/\.github/workflows/release\.yml@refs/(heads/main|tags/v[0-9].*)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

The same SBOMs are attached below.

Assets 7
Loading