v0.1.5

v0.1.5

v0.1.4

v0.1.4

v0.1.3

Release Notes for v0.1.3

Highlights

• Corrected release-tag signature verification behavior in the GitHub-hosted SBOM workflow by using a verified tagger identity for signed release tags.

Changelog Reference

• Change log entry: 0.1.3

Verification

• Release-tag CI discipline is enforced by .github/workflows/ci.yml (Release Tag Discipline job).
• SBOM publication + retention + provenance attestation are enforced by .github/workflows/release-sbom.yml.
• Immutable release artifact pack is generated by tools/collect_release_evidence.sh and uploaded by the SBOM workflow.

v0.1.2

Release Notes for v0.1.2

Highlights

• Fixed release SBOM CI wait behavior to poll commit check-runs for Release Tag Discipline, preventing false timeout failures on tag-triggered releases.

Changelog Reference

• Change log entry: 0.1.2

Verification

• Release-tag CI discipline is enforced by .github/workflows/ci.yml (Release Tag Discipline job).
• SBOM publication + retention + provenance attestation are enforced by .github/workflows/release-sbom.yml.
• Immutable release artifact pack is generated by tools/collect_release_evidence.sh and uploaded by the SBOM workflow.

v0.1.1

Release Notes for v0.1.1

Highlights

• Added Gate 1 release-discipline hardening across signed-tag checks, immutable release-evidence collection, and release-tag CI/SBOM enforcement artifacts.

Changelog Reference

• Change log entry: 0.1.1

Verification

• Release-tag CI discipline is enforced by .github/workflows/ci.yml (Release Tag Discipline job).
• SBOM publication + retention + provenance attestation are enforced by .github/workflows/release-sbom.yml.
• Immutable release artifact pack is generated by tools/collect_release_evidence.sh and uploaded by the SBOM workflow.