v4.0.3

4.0.3 (2026-05-21)

Bug Fixes

• dependabot: generate parseable dependency commits (#540) (a9c6e01)
• release: guard release body size (#547) (0db91cd)

Miscellaneous Chores

• deps: bump the pip group across 2 directories with 3 updates (#530) (7814530)

Verification

Verify the signed tag:

git fetch --tags
gitsign verify-tag \
  --certificate-identity 'https://github.com/microsoft/edge-ai/.github/workflows/release-please.yml@refs/heads/main' \n  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \n  v4.0.3

Verify a downloaded artifact attestation:

gh attestation verify <artifact> --owner microsoft --bundle <artifact>.intoto.jsonl

SBOM diff (vs previous release)

Full SBOM diff evidence is attached to this release as sbom-diff.txt.