kj187/jarvis v1.9.3

on GitHub

What's changed

Routine dependency-maintenance release — no feature or behavior changes.

Changed

• modernc.org/sqlite 1.53.0 → 1.56.0 (pure-Go SQLite driver)
• prometheus/client_golang 1.23.2 → 1.24.1
• React 19.2.7 → 19.2.8, React Router 1.170.17 → 1.170.25, TanStack Query 5.101.2 → 5.101.4, lucide-react 1.23.0 → 1.31.0, highlight.js 11.11.1 → 11.11.2
• CI toolchain and tooling bumps (Go 1.25.13, GitHub Actions, Playwright, ESLint, Vite, Tailwind, and other dev-only dependencies) — no effect on the shipped image

Full diff: v1.9.2...v1.9.3

Container image

docker pull ghcr.io/kj187/jarvis:1.9.3

Digest: sha256:a4de02050359625e3ce72ab37c7c6e73790910378d5db2e75d18ed66a05d858e

Verify image signature (cosign)

cosign verify ghcr.io/kj187/jarvis@sha256:a4de02050359625e3ce72ab37c7c6e73790910378d5db2e75d18ed66a05d858e \
  --certificate-identity-regexp="https://github.com/kj187/jarvis/.*" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

Verify build provenance (GitHub attestation)

gh attestation verify oci://ghcr.io/kj187/jarvis:1.9.3 --repo kj187/jarvis

Helm chart

helm install jarvis oci://ghcr.io/kj187/charts/jarvis --version 1.7.3

Verify chart signature (cosign)

cosign verify ghcr.io/kj187/charts/jarvis:1.7.3 \
  --certificate-identity-regexp="https://github.com/kj187/jarvis/.*" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

SBOM

The SPDX SBOM is attached to this release (sbom.spdx.json) and also
embedded in the image manifest (docker buildx imagetools inspect).