RegistryStack v0.8.3

RegistryStack v0.8.3

RegistryStack v0.8.3 is a security and release-trust patch release after
v0.8.2.

Scope

• Keeps the stack release in the public registrystack/registry-stack
  monorepo.
• Adds release-level SLSA provenance generation for tag-triggered GitHub
  Releases, allowing the release workflow to publish and verify
  *.intoto.jsonl provenance for non-signature release assets.
• Fixes cargo-deny advisory checks and removes unmaintained JSON-LD test
  dependencies.
• Triages CodeQL code scanning findings in scripts, demos, and generated docs
  helpers.
• Replaces RS256 RSA verification support with AWS-LC-backed crypto in the
  platform crypto layer.
• Keeps Crosswalk as the tested pinned product input.
• Keeps Registry Atlas and the eSignet Relay authenticator held as lab-only
  external inputs.

Release Gates

The source release is expected to pass:

• release manifest validation;
• import-map audit;
• Rust workspace checks;
• Lab monorepo source proof;
• full docs checks, archive builds, SEO, and built-link validation.

The tag-driven release workflow publishes final binaries, GHCR images, image
digests, SBOMs, Grype reports, keyless cosign signatures, and release-level SLSA
provenance. Hosted/public announcement remains a separate gate after
hosted-state proof.

RegistryStack v0.8.2

RegistryStack v0.8.2

RegistryStack v0.8.2 is the fix-forward release for the failed v0.8.1
artifact workflow.

Scope

• Keeps the stack release in the public registrystack/registry-stack
  monorepo.
• Includes the v0.8.1 release preparation, release workflow hardening,
  signed-release documentation, GHCR package namespace cleanup, registryctl
  install defaults, and OpenSSF Best Practices documentation updates.
• Fixes the release-only registry-relay build failure by updating OGC API
  EDR and OGC API Features GeoJSON vertex counting for the GeoJSON 1.0
  GeometryValue API.
• Keeps Crosswalk as the tested pinned product input.
• Keeps Registry Atlas and the eSignet Relay authenticator held as lab-only
  external inputs.

Release Gates

The source release is expected to pass:

• release manifest validation;
• import-map audit;
• Rust workspace checks;
• the release-equivalent registry-relay feature build that failed in v0.8.1;
• Lab monorepo source proof;
• full docs checks, archive builds, SEO, and built-link validation.

The tag-driven release workflow publishes final binaries, GHCR images, image
digests, SBOMs, Grype reports, and keyless cosign signatures. Hosted/public
announcement remains a separate gate after hosted-state proof.

RegistryStack v0.8.0

RegistryStack v0.8.0

RegistryStack v0.8.0 is the first release from the public monorepo
registrystack/registry-stack.

Scope

• Imports RegistryStack-owned source history into one repository.
• Builds the root Rust workspace from a single lockfile.
• Keeps Crosswalk as an external pinned input.
• Adds monorepo Lab source proof.
• Generates current docs from monorepo source while archived docsets continue
  to build from historical product refs.
• Adds release manifest validation, import audit tooling, and release evidence
  hooks.

Release Gates

The source release is expected to pass:

• release manifest validation;
• import-map audit;
• Rust workspace checks;
• Lab monorepo source proof;
• full docs checks, archive builds, SEO, and built-link validation.

The tag-driven release workflow publishes final binaries, GHCR images, image
digests, SBOMs, and Grype reports. Hosted/public announcement remains a
separate gate after hosted-state proof.