v0.14.11: dash is public

dash is now public (#42). This is its first release published for everyone: a multi-arch image and the Helm chart on GHCR, with provenance and an SBOM attached and the image signed by cosign. It is a patch with no behaviour change; you can now install dash without building it.

New

• Images on GHCR: ghcr.io/techdufus/dash for linux/amd64 and linux/arm64, tagged 0.14.11 and 0.14. Releases are create-only: a published version is never overwritten.

  docker run -p 8080:8080 -e DASH_DEMO=true -e DASH_SERVER_LISTEN=0.0.0.0:8080 ghcr.io/techdufus/dash:0.14.11

• Helm chart on GHCR:

  helm install dash oci://ghcr.io/techdufus/charts/dash --version 0.14.11

• Supply chain:

  • the image is signed keyless with cosign;
  • BuildKit provenance and an SBOM are attached;
  • GitHub build-provenance and SBOM attestations are published (gh attestation verify).

  See docs/security.md.

• Site: a landing page at https://dash.techdufus.com.

• Docs: the install guides use the published image and chart.

Fixed

• A replaced credentials.yaml is always noticed. A credentials.yaml restored or replaced while dash runs was not always detected on filesystems that reuse inode numbers (ext4), so dash could write over a restored file. dash now keeps the file it last read or wrote open, so its identity can't be reused (#43).

Upgrade notes

• No change for existing installs. If you built the image yourself before, switch to the published one, pinned by digest.