Skip to content

v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Aug 21:00
· 40 commits to main since this release
v1.0.0
d5fa8b6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.0.0
Digest: sha256:cb96bccc8dcd50fc4422324d8f7175d4a8bcede383c5f905127dbca92f3afc38
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.0.0

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:cb96bccc8dcd50fc4422324d8f7175d4a8bcede383c5f905127dbca92f3afc38 --owner GoogleCloudPlatform

What's Changed

  • Bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14 in /terraform/test by @dependabot[bot] in #1
  • Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /terraform/test by @dependabot[bot] in #2
  • Remediate audit p1 by @glenmessenger in #6
  • docs: update README with local Helm bootstrap, Cloud Build, and decod… by @glenmessenger in #7
  • Add CODEOWNERS, issue templates, and PR template by @glenmessenger in #10
  • build(deps): bump golang.org/x/net from 0.52.0 to 0.55.0 by @dependabot[bot] in #3
  • build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #5
  • build(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0 in /terraform/test by @dependabot[bot] in #4
  • build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 by @dependabot[bot] in #9
  • build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 in /terraform/test by @dependabot[bot] in #11
  • Fix chart: manage AIBOMControllerConfig as release resource, add image digest support by @glenmessenger in #12
  • Dedupe ClusterRole rules and narrow writes to controller-owned resources by @glenmessenger in #13
  • Stamp controller version at build time via ldflags by @glenmessenger in #14
  • Add versioning policy, changelog, compatibility matrix, release checklist by @glenmessenger in #15
  • Release pipeline: signed multi-arch image, OCI chart, and SBOM to ghcr.io by @glenmessenger in #16
  • Release prep: 1.0.0 changelog, chart attestation, prerelease handling by @glenmessenger in #18

New Contributors

Full Changelog: https://github.com/GoogleCloudPlatform/k8s-aibom/commits/v1.0.0

Contributors

dependabot and glenmessenger
Assets 6
Loading