v1.2.3

See CHANGELOG.md for the curated entry for this version.

Supply chain verification (Phase 15):

• SBOM: sbom.cyclonedx.json (CycloneDX 1.6) attached to this release.
• Build provenance: gh attestation verify <file> --owner Guruprasath-Annadurai

What's Changed

• Document OSPS Baseline Level 1 branch-protection evidence by @Guruprasath-Annadurai in #1
• Add OpenSSF Silver gap analysis (audit only) by @Guruprasath-Annadurai in #2
• Close Silver quick-win gaps: DCO, doc drift, badges, roadmap, Gitleaks CI by @Guruprasath-Annadurai in #3
• Close OpenSSF Silver accessibility gap: WCAG2AA scan, real fixes, CI gate by @Guruprasath-Annadurai in #4
• Add internationalization (i18n) infrastructure to the dashboard by @Guruprasath-Annadurai in #5
• Add PROJECT_CONTINUITY_PLAN.md (OpenSSF Silver item 5) by @Guruprasath-Annadurai in #6
• Close Silver items 10, 17, 18: security docs, contrib quality, CI gates by @Guruprasath-Annadurai in #7
• perf: hoist MCP dispatch table + add first DB-backed benchmark by @Guruprasath-Annadurai in #8
• perf: measure audit-write throughput under concurrency (real data) by @Guruprasath-Annadurai in #9
• Add SAML 2.0 SSO support, independent of the existing OIDC integration by @Guruprasath-Annadurai in #10
• Enforce ruff format in CI (OpenSSF Silver coding-style gate) by @Guruprasath-Annadurai in #11
• OpenSSF Silver: assurance_case + signed-tag release gate by @Guruprasath-Annadurai in #12
• Cut v1.2.3 by @Guruprasath-Annadurai in #13
• Fix verify-signed-tag: force-fetch real tag object by @Guruprasath-Annadurai in #14

New Contributors

• @Guruprasath-Annadurai made their first contribution in #1

Full Changelog: v1.2.2...v1.2.3

v1.2.2

See CHANGELOG.md for the curated entry for this version.

Supply chain verification (Phase 15):

• SBOM: sbom.cyclonedx.json (CycloneDX 1.6) attached to this release.
• Build provenance: gh attestation verify <file> --owner Guruprasath-Annadurai

Full Changelog: v1.2.1...v1.2.2

v1.2.1

See CHANGELOG.md for the curated entry for this version.

Supply chain verification (Phase 15):

• SBOM: sbom.cyclonedx.json (CycloneDX 1.6) attached to this release.
• Build provenance: gh attestation verify <file> --owner Guruprasath-Annadurai

Full Changelog: v1.2.0...v1.2.1

v1.2.0

See CHANGELOG.md for the curated entry for this version.

Supply chain verification (Phase 15):

• SBOM: sbom.cyclonedx.json (CycloneDX 1.6) attached to this release.
• Build provenance: gh attestation verify <file> --owner Guruprasath-Annadurai

Full Changelog: https://github.com/Guruprasath-Annadurai/Whitepact/commits/v1.2.0