v1.4.1-scality.5

Images

Image	Tag	Digest
ghcr.io/scality/databricks-opensharing	v1.4.1-scality.5	sha256:1b4b9a0a2ace7db00470cb37de6a9121787f946efe407ccde599caa7c46ff2ff
ghcr.io/scality/databricks-opensharing-setup	v1.4.1-scality.5	sha256:6e7dafdfae22ccfb745de58e52f91222d51e3594b13ab22e24397b136c7d0627

Pin the digest, not only the tag:

docker pull ghcr.io/scality/databricks-opensharing@sha256:1b4b9a0a2ace7db00470cb37de6a9121787f946efe407ccde599caa7c46ff2ff
docker pull ghcr.io/scality/databricks-opensharing-setup@sha256:6e7dafdfae22ccfb745de58e52f91222d51e3594b13ab22e24397b136c7d0627

linux/amd64 only. This release moves no floating tag: latest is not updated.

Changes since v1.4.1-scality.4

• isv-integration.yaml: the ISV team group owns the descriptor (de60773)
• Docs: CVE counts of the images built from this branch (b16d5a3)
• Docs: what this release line does not yet do; what changes for existing consumers (0ca318f)
• Descriptor, ports off the RING reserved set, alert rules and ARTESCA monitoring (d9cc2a9)
• JSON logs and one audit event per share/table request (ee758bd)
• Run both images as uid 1000; unauthenticated health endpoints; HTTP probes (cd11451)
• Supply chain: SBOMs on the Release, a CVE gate, Trivy, dependency graph, pinned bases (91e4710)
• Release workflow: GitHub Release with digests, publish a tag once, stop moving latest (e4b0af6)
• CLAUDE.md: no AI attribution in commits/PRs; communication is between humans (7c5fab1)
• CLAUDE.md: be concise and specific in everything written for the user (bd2edd2)
• CLAUDE.md: a subagent does the work itself and never spawns another (30de38c)
• CLAUDE.md: main session orchestrates, subagents do the work by model tier (2a0c28c)
• docs: name the current release, and which tag brought metrics and the bundle (2aa4507)

Documentation

• What is verified and what is not: docs/scality/README.md
• The setup image: setup/README.md