Skip to content

mergetrain 2.4.2

Choose a tag to compare

View all tags
@yongjip yongjip released this 02 Sep 14:49
· 58 commits to main since this release
Immutable release. Only release title and notes can be modified.
v2.4.2
This tag was signed with the committer’s verified signature.
yongjip Yongjip Kim
SSH Key Fingerprint: GzYcD3pog7t8Yikk8XJwwbuRkNdrYvISkNGogPNNCIc
Verified
Learn about vigilant mode.
e418dc3

Release trust-chain safety patch. Production publishing is now dispatched from protected main, verifies the signed annotated tag against main's signer policy, requires the tagged commit in main history, pins downstream work to that exact commit, separates verification/build from OIDC authority, and requires an immutable GitHub Release. TestPyPI and production environment policies are main-bound. See CHANGELOG.md for details.

Assets 3
Loading