Skip to content

Releases: Dewiride-Open-Source/ERP-AI-Pro

ERP-AI-Pro v0.1.3

Choose a tag to compare

@github-actions github-actions released this 31 Oct 18:29
Immutable release. Only release title and notes can be modified.
826f1b8

ERP-AI-Pro v0.1.3, built and attested by .github/workflows/release.yml from commit 826f1b8d22d17cfa53a00c373435dadf3ac4e468.

Corresponding source

The corresponding source of this release is the tag v0.1.3, commit 826f1b8d22d17cfa53a00c373435dadf3ac4e468.

Images

  • ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.3@sha256:9e984d3c076bc0cb1d56d897bfd5d05510ea2ae0c51a293892b3b14451ae114e
  • ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.3@sha256:6e0f0406019d5d7d98bcb801e0c01129a462d7b5f85e175d7b66c41c486e70ea
  • ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.3@sha256:d4c77033cb3dbbfcddfd611e8f6def6eb7daf90d58bd1a1463adeccef2bca5b2

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.3.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.3 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

  • release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
  • <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
  • <image>.spdx.json: the SPDX 2.3 SBOM of each image.

ERP-AI-Pro v0.1.2

Choose a tag to compare

@github-actions github-actions released this 31 Oct 11:48
Immutable release. Only release title and notes can be modified.
c30ee24

ERP-AI-Pro v0.1.2, built and attested by .github/workflows/release.yml from commit c30ee24cef290345835f15a8b1107a6568c2103b.

Corresponding source

The corresponding source of this release is the tag v0.1.2, commit c30ee24cef290345835f15a8b1107a6568c2103b.

Images

  • ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.2@sha256:5d673f5389502283909c39d51ba889bcd21ebbec33ff829d058cab9c4fb5d9af
  • ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.2@sha256:94bccb4db7da1146963b05e19170237c6d24b3f4b1fcae9bb5a26862af32a556
  • ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.2@sha256:383935395c8cdaf61932714681a00f9471773a210f8c98f4edf1ab30344149b8

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.2.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.2 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

  • release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
  • <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
  • <image>.spdx.json: the SPDX 2.3 SBOM of each image.

ERP-AI-Pro v0.1.1

Choose a tag to compare

@github-actions github-actions released this 31 Oct 10:21
Immutable release. Only release title and notes can be modified.
cc57de8

ERP-AI-Pro v0.1.1, built and attested by .github/workflows/release.yml from commit cc57de8e5ed9f6f0864cf69bd94c20dabeae74eb.

Corresponding source

The corresponding source of this release is the tag v0.1.1, commit cc57de8e5ed9f6f0864cf69bd94c20dabeae74eb.

Images

  • ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.1@sha256:327e76cd754ab59a2e13e5d657879f108c3b023b20a0f723aa763cab090fac4a
  • ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.1@sha256:a2f94aeebb12ffc5221af8c9884627bb2a1a57c3e5855ec1cc51569ac812951d
  • ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.1@sha256:2aef3b4bba409ccc3af4ebb7d55661f7a09b307696999f6c422c273f49a9f359

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.1.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.1 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

  • release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
  • <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
  • <image>.spdx.json: the SPDX 2.3 SBOM of each image.

ERP-AI-Pro v0.1.0

Choose a tag to compare

@github-actions github-actions released this 31 Oct 04:46
Immutable release. Only release title and notes can be modified.
7c268cd

ERP-AI-Pro v0.1.0, built and attested by .github/workflows/release.yml from commit 7c268cda658abb7fe308c4b159ab67bef1a19fcc.

Corresponding source

The corresponding source of this release is the tag v0.1.0, commit 7c268cda658abb7fe308c4b159ab67bef1a19fcc.

Images

  • ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.0@sha256:afee23fd35837fc2d3ec2a2de463f19fda85c381883c0a6e56934f3ebf8411bc
  • ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.0@sha256:0c30cff584311ae8a2c6a49f1e34c8ae138ed0206278d8f2a651b378654987ef
  • ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.0@sha256:7ea822164a7b55eb89e586c9acf89295fc4e22c727c9b45bb2cd16c0ed275bc2

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.0.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.0 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

  • release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
  • <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
  • <image>.spdx.json: the SPDX 2.3 SBOM of each image.