v1.0.1

This release primarily focuses on optimizing our CI/CD pipelines, significantly improving the organization of our GitHub Container Registry (GHCR), and updating our release cadence.

✨ Improvements & Fixes

🐳 GHCR Tag Cleanup

• Disabled Docker Provenance Attestations: Fixed an issue where Docker Buildx was creating and uploading separate provenance/SBOM artifacts, which cluttered the GHCR packages UI with unwanted sha256:... tags.
• Removed Cosign Image Signing: Prevented Cosign from uploading .sig artifacts that were also incorrectly displaying as tags inside the GHCR package listing. Your GHCR registry will now cleanly only show the correct PHP version tags (8.5, latest, etc.).

⚙️ Workflow Optimizations

• Release Cadence Updated to Weekly: Docker images are now configured to be automatically built and pushed weekly (every Sunday at midnight UTC) instead of daily, striking a better balance between up-to-date images and CI resource usage.
• Improved Workflow Concurrency: Added a global concurrency group to the GitHub Actions docker-publish.yml workflow. This ensures that pushing a branch, pushing a tag, or creating a release concurrently will immediately cancel any older runs, preventing race conditions and saving valuable build minutes.
• Trigger Refinements: The Docker build pipeline will now only trigger automatically on the weekly schedule or when a formal GitHub Release is published, removing noise from general push and pull_request events to the main branch.

📝 Documentation & Licensing

• Updated RELEASING.md and README.md to accurately reflect the new weekly schedule and manual release triggers.
• Updated the LICENSE file to correctly attribute copyright to Devanox Private Limited.

---

For inquiries or support, please contact info@devanox.com or open an issue on our GitHub repository.