Repository navigation
Changed
- The admin runs on design system 0.21.1, and the new texts of the file field, validation list, menu and split button are translated.
Security
- ID tokens are checked by joserfc 1.8, which also refuses unprotected critical headers and boolean or non-finite time claims.
- The image ships patched apt (CVE-2026-109518) and zlib (CVE-2026-76844, CVE-2026-85091).
CLI unchanged (2026.11.4)
Plugin unchanged (2026.11.2.1)
API 1.4.1
Container image
- toon:
ghcr.io/digigilde/toon:2026.11.11, digestsha256:6a3cf4ab2b4b3a36a34093fa9021d92c2ac811c0045a9afdb76a6f7b301c933b
Verify where it was built: gh attestation verify oci://ghcr.io/digigilde/toon@sha256:6a3cf4ab2b4b3a36a34093fa9021d92c2ac811c0045a9afdb76a6f7b301c933b -R DigiGilde/toon
Its SBOM (CycloneDX): the same command with --predicate-type https://cyclonedx.org/bom