Skip to content

v0.9.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Oct 22:54
· 72 commits to main since this release
v0.9.2
This tag was signed with the committer’s verified signature.
balcsida Dávid Balatoni
SSH Key Fingerprint: WjfLjYSGqwAvhKk36hJZdaFyPAyKJcSxfoien1VavOU
Verified
Learn about vigilant mode.
35a0c04
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

GraphNest v0.9.2

Compatibility: pre-1.0 pilot; Kubernetes 1.25 or newer. Patch release with
no migrations and no configuration changes. Publishing an inventory snapshot
now assesses every component from stored license evidence, and retried
registry lookups no longer drop a reviewer's license conclusion.
Security: images include SBOMs, provenance, and GitHub attestations.

Immutable artifacts

  • ghcr.io/balcsida/graphnest/application@sha256:b07e975aa83e41cc25b796a2ee44e437f924fbe2381cfa864d21bb8bcb407694
  • ghcr.io/balcsida/graphnest/node@sha256:2fbe6c8235d8bdcae3f81e2c742cd8a69f3e6052b4fd2f6b3a7a30376a7a876b
  • oci://ghcr.io/balcsida/graphnest/charts/graphnest:0.9.2@sha256:dbf1afa5b33e595b4425c947e838844c32e658c625c42fa19bef9ba1010cb023

Verification

gh attestation verify "oci://ghcr.io/balcsida/graphnest/application@sha256:b07e975aa83e41cc25b796a2ee44e437f924fbe2381cfa864d21bb8bcb407694" --repo "balcsida/graphnest"
gh attestation verify "oci://ghcr.io/balcsida/graphnest/node@sha256:2fbe6c8235d8bdcae3f81e2c742cd8a69f3e6052b4fd2f6b3a7a30376a7a876b" --repo "balcsida/graphnest"
gh attestation verify "graphnest-0.9.2.tgz" --repo "balcsida/graphnest"

What's Changed

  • fix(supply-chain): assess published snapshots, keep human conclusions by @balcsida in #138
  • chore(release): prepare v0.9.2 by @balcsida in #139

Full Changelog: v0.9.1...v0.9.2

Contributors

balcsida
Assets 3
Loading