v1.1.3

1.1.3 (2026-10-27)

Bug fixes

• sales: refuse a sales order dated after the farm's today (#1344) (e85b33f)

Documentation

• add a pdd-kit Product Model (#1332) (b0a9585)
• auth: record the two-factor authentication design (#1334) (ea67740)
• design: two-factor authentication screen lab and picks (#1339) (f15f728)
• product-model: add a README and point AGENTS.md at the model (#1341) (de7d8cc)

Dependencies

• Bump the nuget-minor-patch group with 1 update (#1378) (7a5752c)
• Bump the nuget-minor-patch group with 4 updates (#1367) (ebe2c3f)
• docker: Bump node from 0b36e8c to 40cd011 in /src/Cluckwork.Api in the docker-base-images group (#1363) (0d2525d)
• docker: bump the docker-base-images group in /src/Cluckwork.Api with 2 updates (#1369) (41f438c)
• web: bump the production-minor-patch group across 1 directory with 2 updates (#1371) (eec4d13)
• web: Bump the production-minor-patch group in /web with 2 updates (#1365) (af1771b)
• web: bump the production-minor-patch group in /web with 2 updates (#1377) (484be3e)

Chores

• release 1.1.3 as a patch (782c0e6)

Container image

Deploy by digest — a tag can be moved, a digest cannot:

ghcr.io/mforce/cluckwork@sha256:fcf6f839d6f798c9d2b72e1e89d77db27a530c622360597545ac1ccf5a3659f0

Machine-readable: the image.json asset on this release.
Verify the bytes came from this repo's CI before deploying:

# requires a prior `docker login ghcr.io` — an oci:// subject
# needs registry credentials. Full recipe: README, "Deploying".
gh attestation verify oci://ghcr.io/mforce/cluckwork@sha256:fcf6f839d6f798c9d2b72e1e89d77db27a530c622360597545ac1ccf5a3659f0 \
  --repo mforce/cluckwork \
  --signer-workflow mforce/cluckwork/.github/workflows/ci.yml \
  --source-ref refs/heads/main \
  --bundle-from-oci