v1.0.0

1.0.0 (2026-10-08)

CI

• hotfix release lines and minor-per-release versioning (#1130) (ea52751)

Container image

Deploy by digest — a tag can be moved, a digest cannot:

ghcr.io/mforce/cluckwork@sha256:2ced08656ace92bc11a55161c0be8636502f9ac77324ec2f01d1d42ff20ada37

Machine-readable: the image.json asset on this release.
Verify the bytes came from this repo's CI before deploying:

# requires a prior `docker login ghcr.io` — an oci:// subject
# needs registry credentials. Full recipe: README, "Deploying".
gh attestation verify oci://ghcr.io/mforce/cluckwork@sha256:2ced08656ace92bc11a55161c0be8636502f9ac77324ec2f01d1d42ff20ada37 \
  --repo mforce/cluckwork \
  --signer-workflow mforce/cluckwork/.github/workflows/ci.yml \
  --source-ref refs/heads/main \
  --bundle-from-oci