v1.0.0-alpha.23

1.0.0-alpha.23 (2026-10-18)

• refactor!: remove distribute and the component push/remote subcommands (#128) (72aea39)

BREAKING CHANGES

• bomify distribute, bomify package distribute, and
  bomify distribution are removed, and component plugins no longer
  implement component push or component remote.

Co-authored-by: Claude Opus 5.5 noreply@anthropic.com

v1.0.0-alpha.22

1.0.0-alpha.22 (2026-10-14)

Features

• push: store each large file as one layer, never split (#122) (a489487), closes #121

v1.0.0-alpha.21

1.0.0-alpha.21 (2026-10-12)

Features

• plugins: add bomify-plugin-huggingface, in rust (#115) (34edcae), closes #79 #80 plugins/README.md#plugin-languages

v1.0.0-alpha.20

1.0.0-alpha.20 (2026-10-09)

Performance Improvements

• auth: reuse registry connections across concurrent transfers (#110) (1bf5d84)

v1.0.0-alpha.19

1.0.0-alpha.19 (2026-10-09)

Features

• oci: push large component files as their own layers (#107) (857c4ba), closes #105

v1.0.0-alpha.18

1.0.0-alpha.18 (2026-10-09)

Bug Fixes

• release: version data directories before filling them, and ship signed plugins in the image (#108) (27f1dcb)

v1.0.0-alpha.17

1.0.0-alpha.17 (2026-10-07)

Features

• rules: freeze the trust.json and scan.json schemas (#104) (2d090e8), closes #58

v1.0.0-alpha.16

1.0.0-alpha.16 (2026-10-07)

Features

• layout: version the data directory (#101) (427828c), closes #51

v1.0.0-alpha.15

1.0.0-alpha.15 (2026-10-06)

Bug Fixes

• logging: keep log lines when progress bars aren't drawn (#100) (3328974), closes #98

Features

• signature: sign already-published packages with bomify sign (#99) (7f980b5)

v1.0.0-alpha.14

1.0.0-alpha.14 (2026-10-06)

Features

• logging: print log lines above progress bars and trim them (#98) (6d0bb4e)