v0.1.0
Changes
Initial release
Installation
composer require netresearch/nr-llmSecurity
All release artifacts are signed with Sigstore keyless signing.
Verify signatures
# Install cosign
go install github.com/sigstore/cosign/v2/cmd/cosign@latest
# Verify artifact signature
cosign verify-blob \
--bundle nr_llm-0.1.0.zip.bundle \
--certificate-identity-regexp "https://github.com/netresearch/.*" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
nr_llm-0.1.0.zipVerify checksums
sha256sum -c checksums.txtSoftware Bill of Materials (SBOM)
SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.
What's Changed
- chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #1
- chore(deps): bump actions/stale from 9.1.0 to 10.1.1 by @dependabot[bot] in #6
- chore(deps): bump actions/labeler from 5.0.0 to 6.0.1 by @dependabot[bot] in #5
- chore(deps): bump actions/cache from 4.2.0 to 5.0.1 by @dependabot[bot] in #4
- chore(deps): bump softprops/action-gh-release from 2.2.1 to 2.5.0 by @dependabot[bot] in #3
- chore(deps): bump dessant/lock-threads from 5.0.1 to 6.0.0 by @dependabot[bot] in #2
- feat: upgrade to PHPStan level 10 and TYPO3 v14 Context API by @CybotTM in #7
- fix: correct greetings workflow parameters and apply Rector fixes by @CybotTM in #8
- feat(ci): add auto-merge workflow for dependency updates by @CybotTM in #12
- chore(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #9
- chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #11
- chore(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in #10
- feat: add security controls and PR quality gates for Scorecard by @CybotTM in #13
- fix(ci): skip gitleaks on merge_group events by @CybotTM in #14
- docs: add PHPStan level and Latest Release badges by @CybotTM in #15
- docs: add OpenSSF Best Practices badge by @CybotTM in #16
- test: add comprehensive unit tests by @CybotTM in #17
- feat: add type-safe enums and DTOs for domain layer by @CybotTM in #18
- fix(ci): add CODECOV_TOKEN for Codecov uploads by @CybotTM in #19
- fix: E2E test failures and remove skipped tests by @CybotTM in #20
- ci: add TER upload to release workflow by @CybotTM in #21
- fix(ci): update cosign to use bundle format by @CybotTM in #22
New Contributors
- @dependabot[bot] made their first contribution in #1
- @CybotTM made their first contribution in #7
Full Changelog: https://github.com/netresearch/t3x-nr-llm/commits/v0.1.0