james/carol
james/carol
1
1
Fork 0
Code Issues 44 Pull requests 7 Projects Releases 25 Packages 1 Wiki Activity Actions
25 releases 26 tags
  • v0.0.1-rc.7 dd99a7faa3

    Carol v0.0.1-rc.7
    All checks were successful
    Secrets / gitleaks (push) Successful in 10s
    Details
    Release / Build, sign, and publish (push) Successful in 21s
    Details
    Pre-release

    james released this 2026-06-18 13:49:03 +00:00 | 372 commits to main since this release

    Signed by james
    SSH key fingerprint: SHA256:vAv/s1UqS+brNCXATCv/JPKIc/j94WCgmQAszXM+m8s

    0.0.1-rc.7 — 2026-06-18

    Bug fixes

    • use execFileSync for git diff in coverage script (92e4c55)
    • drop per-rule rangeStrategy from npm-majors packageRule (#94) (7c601e6)
    • route scanner-comment API calls via internal Forgejo URL (#104) (ac39bcb)
    • post-callback redirect honors APP_URL (reverse-proxy) (c3777b9)

    CI

    • coverage report with soft targets as sticky PR comment (f02519a)
    • add workflow_dispatch workflow for ad-hoc feature-branch images (#108) (6352947)

    Features

    • name, contact details, picture, title statement, brief (#21) (052393a)
    • OIDC userinfo fallback for email / email_verified (a694e94)

    Other

    • Merge pull request 'ci(test): coverage report with soft targets as sticky PR comment (#110)' (#111) from 110-ci-coverage into main (dd99a7f)
    • Merge pull request 'fix(ci): drop per-rule rangeStrategy from npm-majors packageRule (#94)' (#112) from 94-renovate-config-fix into main (ceb8282)
    • Merge pull request 'feat(profile): name, contact details, picture, title statement, brief (#21)' (#113) from 21-profile into main (de86751)
    • Merge pull request 'ci(build): add workflow_dispatch workflow for ad-hoc feature-branch images (#108)' (#109) from 108-feature-branch-image-workflow into main (ae98e91)
    • Merge pull request 'fix(ci): route scanner-comment API calls via internal Forgejo URL (#104)' (#107) from 99-forgejo-api-url-override into main (b19de99)
    • Merge pull request 'feat(auth): OIDC userinfo fallback for email / email_verified (#105)' (#106) from 105-oidc-userinfo-fallback into main (4de8b7c)
    • Merge pull request 'fix(auth): post-callback redirect honors APP_URL (reverse-proxy) (#102)' (#103) from 102-redirect-honor-app-url into main (5afe834)

    Verifying the image

    cosign verify \
  --key https://forge.wynning.tech/james/carol/raw/branch/main/cosign.pub \
  forge.wynning.tech/james/carol@sha256:716a7334db60b1292a475238db30b45aee926cab9ee8fc3a3306fa6e354be00e

cosign verify-attestation \
  --type slsaprovenance1 \
  --key https://forge.wynning.tech/james/carol/raw/branch/main/cosign.pub \
  forge.wynning.tech/james/carol@sha256:716a7334db60b1292a475238db30b45aee926cab9ee8fc3a3306fa6e354be00e
    Downloads