v0.15.0

Changes

• chore(release): 0.15.0 (#299)
• Let vault:store write as a configured provisioning actor (#298)
• Update actions/attest-build-provenance action to v4.2.2 (#297)
• Update step-security/harden-runner action to v2.20.1 (#296)

Installation

composer require netresearch/nr-vault

Publication status

• TER: extensions.typo3.org/extension/nr_vault — 0.15.0 verified
• Packagist: packagist.org/packages/netresearch/nr-vault — 0.15.0 verified
• Documentation: docs.typo3.org/p/netresearch/nr-vault/0.15/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-vault-0.15.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-vault-0.15.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.