What's changed
Maintenance release — dependency updates and a small README polish, no functional changes.
Changed
- Updated
modernc.org/sqlite(1.56.0 → 1.58.0) andgolang.org/x/crypto(0.54.0 → 0.55.0) in the backend - Updated 16 frontend npm packages (minor/patch versions)
- Updated pinned GitHub Actions:
pnpm/action-setup,docker/login-action,ossf/scorecard-action,actions/attest-build-provenance, and thecodeql-actiongroup - Reworked the README header to a centered logo/title/tagline/badges layout
Full diff: v1.10.0...v1.10.1
Container image
docker pull ghcr.io/kj187/jarvis:1.10.1Digest: sha256:a89a2cdb3f767f36e90e6c798fe02f0f9a2a7e1d9a0b04c28c8e334dba568500
Verify image signature (cosign)
cosign verify ghcr.io/kj187/jarvis@sha256:a89a2cdb3f767f36e90e6c798fe02f0f9a2a7e1d9a0b04c28c8e334dba568500 \
--certificate-identity-regexp="https://github.com/kj187/jarvis/.*" \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"Verify build provenance (GitHub attestation)
gh attestation verify oci://ghcr.io/kj187/jarvis:1.10.1 --repo kj187/jarvisHelm chart
helm install jarvis oci://ghcr.io/kj187/charts/jarvis --version 1.7.5Verify chart signature (cosign)
cosign verify ghcr.io/kj187/charts/jarvis:1.7.5 \
--certificate-identity-regexp="https://github.com/kj187/jarvis/.*" \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"SBOM
The SPDX SBOM is attached to this release (sbom.spdx.json) and also
embedded in the image manifest (docker buildx imagetools inspect).