v4.0.1

4.0.1 (2026-05-19)

Bug Fixes

• ci: sign release tags and pin repo context (#526) (3182d3e)

Verification

Verify the signed tag:

git fetch --tags
gitsign verify-tag \
  --certificate-identity 'https://github.com/microsoft/edge-ai/.github/workflows/release-please.yml@refs/heads/main' \n  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \n  v4.0.1

Verify a downloaded artifact attestation:

gh attestation verify <artifact> --owner microsoft --bundle <artifact>.intoto.jsonl

SBOM diff (vs previous release)

No previous SBOM available; this is the baseline release.