ArtifactFlow v0.0.2

Container image (pin by digest):

ghcr.io/gadsotek/artifactflow@sha256:5f09cfc2041c22a1f1201c0409937304ecbd10be54453d97cc51242f470fa25a

Verify build provenance and SBOM before running (needs the GitHub CLI):

gh attestation verify oci://ghcr.io/gadsotek/artifactflow@sha256:5f09cfc2041c22a1f1201c0409937304ecbd10be54453d97cc51242f470fa25a --repo Gadsotek/artifactflow

SLSA build provenance and a CycloneDX SBOM are keyless-signed (Sigstore) and attested to the image digest, and pushed alongside it in the registry; the SBOM is also attached to this release as sbom.cdx.json.
The image was scanned with Trivy (vuln, secret, misconfig; HIGH/CRITICAL gate) before publishing.
Self-hosting docs: docs/OPERATIONS.md. AGPL Section 13 applies to network use; see COMMERCIAL.md for the commercial path.

What's Changed

• Bump nunomaduro/collision from 8.9.4 to 8.9.5 in the composer-minor-patch group by @dependabot[bot] in #1
• Bump dunglas/frankenphp from bb85482 to 070d9a3 by @dependabot[bot] in #2
• Bump vite from 8.1.4 to 8.1.5 in the npm-minor-patch group by @dependabot[bot] in #3
• feat(security): authenticate and content-bind the pre-save draft preview by @Gadsotek in #5
• chore(ai-hooks): broaden coverage of the best-effort guard hooks by @Gadsotek in #7
• fix(realtime): keep content saves succeeding when the after-commit broadcast fails by @Gadsotek in #8
• fix(security): prevent nested browsing contexts and WebRTC egress in artifact preview by @Gadsotek in #6
• fix(security): harden artifact-preview nested-context neutralization against parser differentials by @Gadsotek in #10
• fix(security): require artifact storage root outside the public web root by @Gadsotek in #12
• fix(security): close comment and declaration parser differentials in artifact preview by @Gadsotek in #11
• security: persistent rate-limiter cache gate + hashed invitation tokens by @Gadsotek in #13
• security: alpha hardening + 2FA enrollment freshness + installation gating by @Gadsotek in #14

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: https://github.com/Gadsotek/artifactflow/commits/v0.0.2