Skip to content

v0.1.2

Latest
Latest

Choose a tag to compare

View all tags
@zircote zircote released this 23 Jun 03:55
v0.1.2
508aa7a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch release over v0.1.1 — catalog-updater engine fixes.

Changes

  • Re-pin targets the entry by its own top-level name (#24): brace-matched,
    JSON-confirmed _entry_span so a nested author.name equal to a plugin name
    can no longer mis-segment the re-pin.
  • Attestation evidence is captured (#25): verify with gh attestation verify --format json (the human summary is suppressed headless) and distil
    predicate/signer/issuer into the PR body; hardened against malformed JSON.
    Re-verify commands in the PR body now include --format json.

This release is itself attested (see the attested-delivery-0.1.2.tar.gz asset).

Assets 4
Loading