kj187/jarvis v1.10.0 on GitHub

What's changed

Jarvis finally gets a face — a logo and full favicon set, plus a dependency fix that closed two high-severity advisories.

Added

Logo & favicons — a proper logo (embedded in the README) and a full favicon set (favicon.ico, 16x16/32x32 PNG, apple-touch-icon) wired into the browser tab and bookmarks
NOTICE — the logo/favicon assets are now explicitly excluded from the Apache-2.0 grant (all rights reserved), separate from the project's open-source code license

Security

browserslist patched to ≥4.28.7 via a pnpm override, closing two high-severity advisories (unbounded memory growth / OOM, and an uncaught crash via untrusted browserslist-stats.json) pulled in transitively through eslint-plugin-react-hooks

Full diff: v1.9.3...v1.10.0

Container image

docker pull ghcr.io/kj187/jarvis:1.10.0

Digest: sha256:0c55c275b0e97a790198a97319ee1ea098f0088eb951aa160c7c8c462cf9addd

Verify image signature (cosign)

cosign verify ghcr.io/kj187/jarvis@sha256:0c55c275b0e97a790198a97319ee1ea098f0088eb951aa160c7c8c462cf9addd \
  --certificate-identity-regexp="https://github.com/kj187/jarvis/.*" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

Verify build provenance (GitHub attestation)

gh attestation verify oci://ghcr.io/kj187/jarvis:1.10.0 --repo kj187/jarvis

Helm chart

helm install jarvis oci://ghcr.io/kj187/charts/jarvis --version 1.7.4

Verify chart signature (cosign)

cosign verify ghcr.io/kj187/charts/jarvis:1.7.4 \
  --certificate-identity-regexp="https://github.com/kj187/jarvis/.*" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

SBOM

The SPDX SBOM is attached to this release (sbom.spdx.json) and also
embedded in the image manifest (docker buildx imagetools inspect).