0.1.19
Central Vault Sync 0.1.19
Release-provenance compatibility correction for the Obsidian Community scanner.
- Emits one dedicated SLSA provenance statement per distributed asset instead of one multi-subject statement.
- Gives
main.jsandstyles.cssrelease-specific digests, preventing provenance lookup from mixing identical bytes attested by older tags. - Attests
main.js,manifest.json, andstyles.cssindependently in the same GitHub-hosted build/release job. - Adds policy checks that the bundle and stylesheet release markers match
manifest.json. - Retains the 0.1.17 stale-parent bootstrap fix and all 0.1.16 performance/progress behavior unchanged.
Verification: lint, typecheck, 31 tests, production build, policy checks, unique asset digests, release asset/source byte comparison, and strict per-asset GitHub SLSA verification.