Skip to content

Pullbox v1.1.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Aug 20:49
v1.1.1
a3fe725
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Patch release improving direct-download reliability for collected issue packs.

Fixed

  • Accept safe, separately packaged contiguous direct-download issue packs when
    their declared coverage includes the requested issue; extract and import the
    explicitly selected issue plus any other wanted members without replacing
    existing files.
  • Preserve direct-acquisition fallback source metadata and accept configured
    alternate series names when validating extracted pack members.

CI / Build

  • Refreshed narrow Docker Hardened Image vulnerability exceptions for the
    current Debian 13 package revisions that have no upstream fix.

Commit Details

✨ Features

  • import separable direct-download issue packs

🐛 Bug Fixes

  • harden direct pack post-processing
  • preserve direct pack acquisition intent
  • accept spaced direct pack ranges
  • accept direct packs for covered issues
  • validate separable direct-download packs

🧰 Chores

  • bump version to 1.1.1 for release

🏗️ CI / Build

  • refresh DHI vulnerability exceptions

🐳 Docker Images

docker pull ghcr.io/pullboxapp/pullbox:1.1.1
docker pull docker.io/pullbox/pullbox:1.1.1

Digest: sha256:35d97268159f0f22481632c5c2fdf8accc6dfab4df2b7a4b1e46685b4e3754f9

🔐 Image Verification

Release images are signed with keyless Sigstore/Cosign using GitHub Actions OIDC.
These commands verify the exact multi-architecture image digest published by this release.

cosign verify \
  --certificate-identity-regexp '^https://github.com/pullboxapp/pullbox/\.github/workflows/docker-release\.yml@refs/tags/v1.1.1$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  ghcr.io/pullboxapp/pullbox@sha256:35d97268159f0f22481632c5c2fdf8accc6dfab4df2b7a4b1e46685b4e3754f9

cosign verify \
  --certificate-identity-regexp '^https://github.com/pullboxapp/pullbox/\.github/workflows/docker-release\.yml@refs/tags/v1.1.1$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  docker.io/pullbox/pullbox@sha256:35d97268159f0f22481632c5c2fdf8accc6dfab4df2b7a4b1e46685b4e3754f9

Full Changelog: v1.1.0...v1.1.1

Assets 2
Loading