Skip to content

v2026.11.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Nov 20:19
· 33 commits to beta since this release
v2026.11.2
84f7cba

Changed

  • The preamble of security.txt says NCSC-NL is the central reporting point, no longer that it remains so.
  • The server reads its settings from TOON_<NAME> variables.
  • The PLAK_<NAME> names keep working for now, and at startup the app logs a
    warning that names every PLAK_ variable still in use.
  • A second warning names a PLAK_ audit secret whose value the TOON_ names
    neither hold nor list as previous, so a wrong value shows before the old one
    is removed.
  • New audit chain heads say toon-audit-chain-checkpoint/3 as their format, and
    lines in the older plak-audit-chain-checkpoint/3 format still verify.
  • The image build argument is TOON_VERSION instead of PLAK_VERSION.

CLI unchanged (2026.11.1)

Plugin unchanged (2026.11.1)

API 1.3.1

Container image

  • plak: ghcr.io/digigilde/plak:2026.11.2, digest sha256:4d823e03b7d2e4bd22b72f29db3c70d08e2c94fef5bddf2c2560c0d32dad6a41

Verify where it was built: gh attestation verify oci://ghcr.io/digigilde/plak@sha256:4d823e03b7d2e4bd22b72f29db3c70d08e2c94fef5bddf2c2560c0d32dad6a41 -R DigiGilde/plak
Its SBOM (CycloneDX): the same command with --predicate-type https://cyclonedx.org/bom

Assets 2
Loading