Skip to content

v3.6.30

Choose a tag to compare

@marcusquinn marcusquinn released this 04 Apr 04:46
· 12386 commits to main since this release
v3.6.30
082b3d7

What's New

  • Supply chain verification: aidevops update now verifies the HEAD commit is signed after pulling, using GitHub API (handles squash-merge GPG signatures) with local SSH verification fallback
  • aidevops signing command: New CLI subcommand for SSH commit signing setup, status check, tag verification, and update verification — works on any repo
  • Signing status in aidevops status: Shows commit signing configuration state
  • Startup nudge: One-time reminder when signing is not configured (dismisses after setup)

Fixes

  • Strip SPDX headers from .json.txt config templates that were incorrectly added in v3.6.20 (JSON does not support comments)