What's Changed
- ci: bootstrap hardened release workflows onto main [skip-version] by @reinamora137 in #899
- feat(ci): trunk (main-primary) release + CI automation by @reinamora137 in #903
- docs: rewrite for the main-primary (trunk) model by @reinamora137 in #904
- docs(whitepaper): fix P2WSH witness-discount error + clarify 64KB cap by @reinamora137 in #905
- docs(ops): production deploy checklist (fork-prevention + reconcile runbook) by @reinamora137 in #908
- ci(#907): make consensus gates report a status on every PR (prep for required-checks) by @reinamora137 in #910
- docs: README hero banner + restructure, fix whitepaper historical dates by @reinamora137 in #911
- docs(sip-0110): apply #878 review — 2-tx layout, Method-B scope, activation/fail-safe + precision fixes by @reinamora137 in #906
- fix(readme): repair broken CI badges (run CI on push:main) by @reinamora137 in #912
- fix(readme): stop codecov badge rendering as a broken image by @reinamora137 in #913
- fix(snapshots): correct stale messages_hash for blocks 955070-955979 by @reinamora137 in #914
- fix(reparse): validator must reproduce production ValidStamp base64 fields by @reinamora137 in #915
- deps(rust): bump pyo3 0.24 → 0.29 (GHSA-36hh-v3qg-5jq4) by @reinamora137 in #909
- chore: release 1.9.2 [skip-version] by @reinamora137 in #916
Full Changelog: 1.9.1...1.9.2
Signed release image
This release is published to Docker Hub as an immutable digest and signed
keyless (Sigstore/cosign, GitHub Actions OIDC - no private keys):
btcstamps/indexer@sha256:cb64cc0b8e5c3cc0c5d6eedd3bc4859788a7a3dc39a55177a288f4d577ef14f1
Verify the signature:
cosign verify \
--certificate-identity-regexp '^https://github.com/stampchain-io/btc_stamps/.github/workflows/docker-auto-publish.yml@refs/tags/1.9.2$' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
btcstamps/indexer@sha256:cb64cc0b8e5c3cc0c5d6eedd3bc4859788a7a3dc39a55177a288f4d577ef14f1
Verify the SPDX SBOM attestation:
cosign verify-attestation --type spdxjson \
--certificate-identity-regexp '^https://github.com/stampchain-io/btc_stamps/.github/workflows/docker-auto-publish.yml@refs/tags/1.9.2$' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
btcstamps/indexer@sha256:cb64cc0b8e5c3cc0c5d6eedd3bc4859788a7a3dc39a55177a288f4d577ef14f1