v1.2.47

Verifying artifacts

Checksums: sha256sum -c SHA256SUMS.txt

Signatures (sigstore keyless): every artifact ships a <name>.sig + <name>.bundle pair. Verify with:

cosign verify-blob \
  --bundle <artifact>.bundle \
  --certificate-identity-regexp "https://github\.com/intel-agency/inference-engine-lib/" \
  --certificate-oidc-issuer "https://token\.actions\.githubusercontent\.com" \
  <artifact>

Build provenance (SLSA): gh attestation verify <artifact> -R intel-agency/inference-engine-lib

What's Changed

• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.5.0 in the actions-updates group across 1 directory by @dependabot[bot] in #93
• build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.1 by @dependabot[bot] in #94
• adopt InferenceEngine.ROCm.Runtime.linux-x64 1.24.1.62 and refresh lock files by @nam20485 in #100
• build(deps): bump actions/download-artifact from 4.3.0 to 8.0.2 by @dependabot[bot] in #96
• docs: specify example-app suite implementation by @nam20485 in #101
• build(deps): bump actions/setup-dotnet from 4.3.1 to 6.0.0 by @dependabot[bot] in #104
• build(deps): bump actions/checkout from 4.2.2 to 7.0.1 by @dependabot[bot] in #103
• sync main into development; adopt ROCm runtime 1.24.1.66 (locked graph refreshed) by @nam20485 in #105
• Promote development to main (ROCm runtime 1.24.1.66, locked graph, CI flake fix) by @nam20485 in #106
• Promote main to release (ROCm runtime 1.24.1.66, locked graph, CI flake fix) by @nam20485 in #107

Full Changelog: v1.2.40...v1.2.47

v1.2.40

Verifying artifacts

Checksums: sha256sum -c SHA256SUMS.txt

Signatures (sigstore keyless): every artifact ships a <name>.sig + <name>.bundle pair. Verify with:

cosign verify-blob \
  --bundle <artifact>.bundle \
  --certificate-identity-regexp "https://github\.com/intel-agency/inference-engine-lib/" \
  --certificate-oidc-issuer "https://token\.actions\.githubusercontent\.com" \
  <artifact>

Build provenance (SLSA): gh attestation verify <artifact> -R intel-agency/inference-engine-lib

What's Changed

• ci(publish): OIDC-only push — drop classic-key fallback (MEDIUM-3) by @nam20485 in #68
• ci: wire Codecov — public badge + coverage-API data by @nam20485 in #69
• ci: add least-privilege workflow permissions by @nam20485 in #70
• ci: replace weekly Default Setup with push/PR CodeQL workflow by @nam20485 in #71
• Sync main into development by @nam20485 in #73
• Create scorecard.yml by @nam20485 in #72
• Add OpenSSF Scorecard badge to README by @nam20485 in #74
• Plan: OpenSSF scorecard improvements (6.9 → ~8.7) by @nam20485 in #75
• ci: scorecard batch 1 — CODEOWNERS, SECURITY.md links, CodeQL perms/coverage, signed releases by @nam20485 in #80
• build: Central Package Management (Pinned-Dependencies 6→10) by @nam20485 in #81
• Bump coverlet.collector from 6.0.4 to 10.1.0 by @dependabot[bot] in #61
• build(deps): bump actions/attest-build-provenance from 2.4.0 to 4.2.2 by @dependabot[bot] in #55
• build(deps): bump actions/cache from 4.3.0 to 6.1.0 by @dependabot[bot] in #57
• build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.2 by @dependabot[bot] in #56
• ci: env-map publish version computation; reconcile the remediation log by @nam20485 in #82
• ci: shorten artifact retention (nuget-package, rocm-gpu-test-results: 30d -> 7d) by @nam20485 in #84
• Sync main into development by @nam20485 in #85
• ci: remove NuGet actions/cache steps (org storage quota) by @nam20485 in #86
• security: add secret-scan stack (gitleaks gate + pre-commit + trufflehog weekly sweep) by @nam20485 in #87
• Promote development to main (env-map publish version, OIDC-only, Codecov) by @nam20485 in #83
• build(security): pin NuGet transitive graph via per-rid lock files + locked-mode restore by @nam20485 in #89
• Promote main to release (attested publish path, hardening wave) by @nam20485 in #88
• build(deps): bump peter-evans/find-comment from 3.1.0 to 4.0.0 by @dependabot[bot] in #59
• build(deps): bump peter-evans/create-or-update-comment from 4.0.0 to 5.0.0 by @dependabot[bot] in #58
• ci: install cosign before the release signing step by @nam20485 in #90
• Bump the nuget-minor-patch group with 10 updates by @dependabot[bot] in #60
• ci: scope dependabot to the github-actions ecosystem by @nam20485 in #98
• Promote main to release (cosign install, dependabot scope, locks) by @nam20485 in #99

Full Changelog: v1.2.25...v1.2.40

v1.2.25

What's Changed

• ci: pin runner images to fixed OS versions (drop -latest) by @nam20485 in #44
• fix(security): harden model downloads (MEDIUM-1) by @nam20485 in #45
• test(worker): fault-injecting coverage for out-of-process IPC paths by @nam20485 in #46
• test(platform): coverage W4 — platform-detection seam, CI un-exclusion, examples tests by @nam20485 in #47
• test(text): hermetic coverage for text engines, tokenizer assets, streaming options by @nam20485 in #48
• test(core): cover engine lifecycle, streaming KV-cache, registry and download error paths (W3) by @nam20485 in #49
• docs: remediation log — program completion record by @nam20485 in #50
• feat(registry): populate sha256 integrity hashes for shipped model catalog by @nam20485 in #51
• chore: remove archive/*.seda (I7) by @nam20485 in #52
• Promote development → main: 1.2.18 — attestation, signature gate, coverage wave, registry hashes by @nam20485 in #53
• Promote main → release: 1.2.18 by @nam20485 in #54
• test(text): make corrupt-cached-vocab test hermetic across OSes by @nam20485 in #65
• Promote development → main: 1.2.19 (test-hermeticity fix) by @nam20485 in #66
• Promote main → release: 1.2.19 by @nam20485 in #67

Full Changelog: v1.2.17...v1.2.25

v1.2.17

What's Changed

• ci: quota-resilient publish pipeline, best-effort docs preview by @nam20485 in #37
• Promote main → release: trusted publishing debut by @nam20485 in #42

Full Changelog: v1.2.12...v1.2.17

v1.2.12

What's Changed

• Upgrade Inference Engine with modular architecture and comprehensive documentation by @nam20485 in #1
• Development by @nam20485 in #2
• merge to release by @nam20485 in #3
• ci: auto NuGet versioning with VERSION_PREFIX by @nam20485 in #4
• chore: merge development into main by @nam20485 in #5
• chore: merge main into release for publish by @nam20485 in #6
• IEL1: Move FaceDetectionEngine into its own project by @nam20485 in #7
• merge to main by @intelagentone in #8
• Add ROCm integration and project setup enhancements by @intelagent1ne in #9
• Remove vendored ROCm native assets — consume via NuGet package by @intelagentone in #10
• feat(core): auto-detect ROCm runtime with CPU fallback + cross-platform dev configs by @nam20485 in #11
• Add symbol package publishing, ROCm verify script, and native-lib review docs by @nam20485 in #12
• Development by @nam20485 in #13
• Enhance ROCm support, restructure CI, and improve documentation by @nam20485 in #14
• Add diagnostics API for engine information and provider checks by @nam20485 in #15
• Add out-of-process inference engine with IPC support by @nam20485 in #18
• feat: add tokenizer-aware TextEmbeddingEngine and TextGenerationEngine by @nam20485 in #19
• Add diagnostics API and MIGraphX integration for engine checks by @nam20485 in #17
• Add diagnostics API and MIGraphX integration for engine checks by @nam20485 in #20
• fix: post-review Phase 1 (concurrency, timeouts, decode-delta, disposal) by @nam20485 in #21
• Development by @nam20485 in #22
• Enhance workflows and implement Phase 1 of review fix plan by @nam20485 in #23
• Optimize allocation-free sampling and improve null handling by @nam20485 in #24
• Public readiness Phase 0 (§0.1–§0.6): hygiene, MIT license, packaging, docs, governance by @nam20485 in #25
• Promote Phase 0 public-readiness to main by @nam20485 in #26
• ci: inline upload-pages-artifact to satisfy action-pinning policy by @nam20485 in #27
• Promote Pages deploy fix to main by @nam20485 in #28
• docs(plan): record Phase 0 completion, add Phase 1 owner commands by @nam20485 in #29
• Promote plan-doc Phase 0 status + Phase 1 owner commands to main by @nam20485 in #30
• docs(plan): NUGET_API_KEY secret confirmed present by @nam20485 in #31
• Promote main to release: publish 1.2.x by @nam20485 in #32
• feat: pin ROCm runtime to first public nuget.org version; tokenless restore (Phase 2a) by @nam20485 in #33
• Promote public ROCm dependency + tokenless restore to main by @nam20485 in #34
• feat: pin ROCm runtime to public stable 1.24.1.44 (Phase 2b) by @nam20485 in #35
• Promote ROCm stable pin to main by @nam20485 in #36
• Promote main → release: first public NuGet.org release (1.2.x) by @nam20485 in #38

New Contributors

• @intelagentone made their first contribution in #8
• @intelagent1ne made their first contribution in #9

Full Changelog: https://github.com/intel-agency/inference-engine-lib/commits/v1.2.12