ArtifactFlow v0.3.4

Container image (pin by digest):

ghcr.io/gadsotek/artifactflow@sha256:de4f3f7a3de27d60a63ebc6ab62119be32909e774432f0f83ef91e1f2755524c

Dedicated PDF processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:aaab319a198107bd37ce3a6433d67aa7a8e727eedca7a683384195bef37a54d4

Dedicated XLSX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:a4cc8ec3330d5e5b68939ce91f33886f2321647b376dff47886b95bc87da8482

Dedicated DOCX processor image (pin by digest):

ghcr.io/gadsotek/artifactflow-docx-processor@sha256:aaabe61541a9ef38e2b568e4376426dd37be80e52b2dcf6271143a2ebc3596db

Verify build provenance and SBOM before running any image (needs the GitHub CLI):

gh attestation verify oci://ghcr.io/gadsotek/artifactflow@sha256:de4f3f7a3de27d60a63ebc6ab62119be32909e774432f0f83ef91e1f2755524c --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-pdf-processor@sha256:aaab319a198107bd37ce3a6433d67aa7a8e727eedca7a683384195bef37a54d4 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-xlsx-processor@sha256:a4cc8ec3330d5e5b68939ce91f33886f2321647b376dff47886b95bc87da8482 --repo Gadsotek/artifactflow
gh attestation verify oci://ghcr.io/gadsotek/artifactflow-docx-processor@sha256:aaabe61541a9ef38e2b568e4376426dd37be80e52b2dcf6271143a2ebc3596db --repo Gadsotek/artifactflow

SLSA build provenance and CycloneDX SBOMs are keyless-signed (Sigstore), attested to all four image digests, pushed alongside them in the registry, and attached to this release.
All four images were scanned with Trivy (vuln, secret, misconfig; HIGH/CRITICAL gate) before publishing.
Self-hosting docs: docs/OPERATIONS.md. AGPL Section 13 applies to network use; see COMMERCIAL.md for the commercial path.

What's Changed

• fix: bump larastan/larastan from 3.12.1 to 3.12.2 in the composer-minor-patch group by @dependabot[bot] in #157
• fix: bump @codemirror/state from 6.7.5 to 6.7.6 in the npm-minor-patch group by @dependabot[bot] in #160
• fix: bump laravel/reverb from 1.11.1 to 1.12.0 in the composer-minor-patch group by @dependabot[bot] in #159
• fix: bump prettier from 3.9.8 to 3.9.9 in the npm-minor-patch group by @dependabot[bot] in #161
• fix: bump the npm-minor-patch group with 2 updates by @dependabot[bot] in #163
• fix: bump undici from 7.29.0 to 7.30.0 in /scripts/mcp-remote-bridge by @dependabot[bot] in #165
• fix: bump the composer-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #164
• fix: bump mcp-remote from 0.14.2 to 0.14.3 in /scripts/mcp-remote-bridge by @dependabot[bot] in #158
• chore: prepare v0.3.4 release by @Gadsotek in #166

Full Changelog: v0.3.3...v0.3.4