v0.9.0
Note
Storage consolidation and new Cosign bundle format (v0.9.0+): All signatures, SBOM attestations, and SLSA provenance are now stored directly in the image repository (ghcr.io/natrontech/pbs-exporter) as OCI 1.1 referrers. The separate ghcr.io/natrontech/signatures and ghcr.io/natrontech/sbom repositories are retired. Verification commands no longer require COSIGN_REPOSITORY. See SECURITY.md for updated verification instructions and legacy commands for older releases.
Changelog
- 738c351: chore: update GitHub Actions versions and dependabot (@janfuhrer)
- c829d08: chore: update Go to 1.26.2, dependencies, and ko (@janfuhrer)
- a5c1dc5: docs: add CLAUDE.md with maintenance instructions (@janfuhrer)
- 4b78284: feat: migrate to cosign new bundle format (OCI 1.1 referrers) (@janfuhrer)
- 7963fc2: security: fix G706 (CWE-117) (@janfuhrer)
Full Changelog: v0.8.0...v0.9.0
Docker Images
ghcr.io/natrontech/pbs-exporter:v0.9.0ghcr.io/natrontech/pbs-exporter:latest
Contributors
janfuhrer