ArtifactFlow v0.3.2

Container image (pin by digest):

ghcr.io/gadsotek/artifactflow@sha256:33780a2f98216a38d2550bbd2de9a167344906b925b7645357b4648c67eb2663

Dedicated PDF processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:32af947cf28f23f9a4cb23eaa11ca495efc4a31fb26683819837f054b8375c59

Dedicated XLSX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:43e623ed30e0d1f282c3f0bf8075970c2b21f349cc223d529406be6e347dc8e7

Dedicated DOCX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-docx-processor@sha256:7dc6fe8afc28a5417d709b47f752a7505e31301875eddb36f8c641a16913c55a

Verify build provenance and SBOM before running any image (needs the GitHub CLI):

gh attestation verify oci://ghcr.io/gadsotek/artifactflow@sha256:33780a2f98216a38d2550bbd2de9a167344906b925b7645357b4648c67eb2663 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:32af947cf28f23f9a4cb23eaa11ca495efc4a31fb26683819837f054b8375c59 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:43e623ed30e0d1f282c3f0bf8075970c2b21f349cc223d529406be6e347dc8e7 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-docx-processor@sha256:7dc6fe8afc28a5417d709b47f752a7505e31301875eddb36f8c641a16913c55a --repo Gadsotek/artifactflow

SLSA build provenance and CycloneDX SBOMs are keyless-signed (Sigstore), attested to all four image digests, pushed alongside them in the registry, and attached to this release.
All four images were scanned with Trivy (vuln, secret, misconfig; HIGH/CRITICAL gate) before publishing.
Self-hosting docs: docs/OPERATIONS.md. AGPL Section 13 applies to network use; see COMMERCIAL.md for the commercial path.

What's Changed

• fix: bump mcp-remote from 0.13.5 to 0.14.2 in /scripts/mcp-remote-bridge by @dependabot[bot] in #147
• fix: bump the composer-minor-patch group with 2 updates by @dependabot[bot] in #146
• fix: bump the npm-minor-patch group with 2 updates by @dependabot[bot] in #149
• fix: bump prettier from 3.9.6 to 3.9.7 in the npm-minor-patch group by @dependabot[bot] in #150
• fix: bump laravel/mcp from 0.9.5 to 1.0.0 by @dependabot[bot] in #148
• Widen processor health-probe socket timeouts for slow cold engines by @Gadsotek in #151
• fix: bump the npm-minor-patch group with 2 updates by @dependabot[bot] in #152
• Prepare v0.3.2 release by @Gadsotek in #153

Full Changelog: v0.3.1...v0.3.2