AIIR v1.5.1

Install

pip install aiir==1.5.1

GitHub Action — uses: invariant-systems-ai/aiir@v1
Docker — docker run ghcr.io/invariant-systems-ai/aiir:1.5.1
GitLab CI/CD — Catalog component

What's Changed

🧩 Other Changes

• fix: accept release-attest asset-dir sidecars by @InvariantSystems in #123
• fix: let release recovery use source-ref tooling by @InvariantSystems in #124
• fix(docker): refresh openssl packages in release image by @InvariantSystems in #125
• chore(deps): bump the actions-minor group with 3 updates by @dependabot[bot] in #126
• fix(quality): resolve actionable CodeQL alerts by @InvariantSystems in #128
• docs: add GitLens integration strategy guide by @InvariantSystems in #130
• chore(deps): bump actions/setup-node from 4.3.0 to 6.4.0 by @dependabot[bot] in #127
• Add GitLens companion context, operator docs, and harden VS Code receipt surfaces by @InvariantSystems in #131

Full Changelog: v1.4.0...v1.5.1

Provenance & Verification

Artifact	SHA-256	Rekor log index	Provenance
aiir-1.5.1-py3-none-any.whl	sha256:236ffdbb9643658b8f6d838e95de7ab360b1eb7bd0cdf3b49b58eee0c3e76948	1396703942	PyPI attestation · GitHub bundle
aiir-1.5.1.tar.gz	sha256:475eea39e0f113cfea701e954d211add5c4d9dd369a47a22d6d8bca8a6a7bd8a	1396703974	PyPI attestation · GitHub bundle
aiir-sbom.cdx.json	sha256:c564598980c3794b7cdede738336a1b1f60d4f49d7267a20d1bb1acb63db4b79	-	GitHub release asset

# Verify the published release evidence for aiir==1.5.1
python scripts/verify-release-evidence.py 1.5.1