v1.1.6

SHA256 Checksums

06c12b175084a0035ac220200b66dd97ef95baf7addef58e782e0d81c08008df  ci-tools_1.1.6_arm64.deb
9e2057cce1efc665fa5f6cb35a6d14bec707b6c52f24e80e6986c532b893d546  ci-tools_1.1.6_amd64.deb
cfcaba60a3e7fbf17f0ae8134269c9d437b00c63cdbe5b04cda4132f126c0c83  ci-tools_1.1.6_linux-arm64.tar.gz
cfcaba60a3e7fbf17f0ae8134269c9d437b00c63cdbe5b04cda4132f126c0c83  ci-tools_1.1.6_linux-x64.tar.gz
cfcaba60a3e7fbf17f0ae8134269c9d437b00c63cdbe5b04cda4132f126c0c83  ci-tools_1.1.6_osx-arm64.tar.gz
cfcaba60a3e7fbf17f0ae8134269c9d437b00c63cdbe5b04cda4132f126c0c83  ci-tools_1.1.6_osx-x64.tar.gz

What's Changed

Security

• Refresh ci-tools deps and clear stale Trivy ignores by @lex57ukr in #82

Enhancements

• Add en_US.UTF-8 locale to ci-tools image by @lex57ukr in #80

Dependencies

• Bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 in the minor-and-patch group by @dependabot[bot] in #72
• Bump node from 32f4586 to e07427b in /images/ci-tools by @dependabot[bot] in #73
• Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #74
• Bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in #75
• Bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 in the minor-and-patch group by @dependabot[bot] in #77
• Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #78
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #79

Full Changelog: v1.1.5...v1.1.6

v1.1.5

SHA256 Checksums

049697eeb127d0f446803c06be1c2a4bcf9e84cb9f8797075027491c7f6b2c89  ci-tools_1.1.5_arm64.deb
e38eba87256514e58e8826b5a5f1abf207603d4592a9a46a7cbcf59b6944a4fc  ci-tools_1.1.5_amd64.deb
e95ecc7f633c6fb89d0708692b13d7bf0eb0cda9f65a2b15eb8802efcee461d5  ci-tools_1.1.5_linux-arm64.tar.gz
e95ecc7f633c6fb89d0708692b13d7bf0eb0cda9f65a2b15eb8802efcee461d5  ci-tools_1.1.5_linux-x64.tar.gz
e95ecc7f633c6fb89d0708692b13d7bf0eb0cda9f65a2b15eb8802efcee461d5  ci-tools_1.1.5_osx-arm64.tar.gz
e95ecc7f633c6fb89d0708692b13d7bf0eb0cda9f65a2b15eb8802efcee461d5  ci-tools_1.1.5_osx-x64.tar.gz

What's Changed

Security

• Fix HIGH CVEs in bundled npm dependencies by @lex57ukr in #71

Enhancements

• Add busted to ci-tools image by @lex57ukr in #69

Full Changelog: v1.1.4...v1.1.5

v1.1.4

SHA256 Checksums

2e699053df87714c30ca85c8c72e7ec8f17bcffc65d468241b25a735abab5042  ci-tools_1.1.4_linux-arm64.tar.gz
2e699053df87714c30ca85c8c72e7ec8f17bcffc65d468241b25a735abab5042  ci-tools_1.1.4_linux-x64.tar.gz
2e699053df87714c30ca85c8c72e7ec8f17bcffc65d468241b25a735abab5042  ci-tools_1.1.4_osx-arm64.tar.gz
2e699053df87714c30ca85c8c72e7ec8f17bcffc65d468241b25a735abab5042  ci-tools_1.1.4_osx-x64.tar.gz
56ea5d07ecece3499141ab1004fab35161c76bd27adc765ba64d7f77d3e5ea80  ci-tools_1.1.4_arm64.deb
e85ccaad3059475036b3ec104e2580e121adc2c6a91636b26301108f5395645b  ci-tools_1.1.4_amd64.deb

What's Changed

Security

• Add scheduled CVE monitoring for published images by @lex57ukr in #64
• Harden CVE monitor against race conditions and false positives by @lex57ukr in #65

Enhancements

• Add GPG to ci-tools image by @lex57ukr in #67

Full Changelog: v1.1.3...v1.1.4

v1.1.3

SHA256 Checksums

c232e52c6bbcdb6efc7b1d6d924a9026616d39409d8a48228028dc227853feeb  ci-tools_1.1.3_arm64.deb
e55fd6a3334f3422e7718223e0dcc5187fbdf36a52a79c263a5a240028abc56f  ci-tools_1.1.3_amd64.deb
ece953579682191e3aceb63026f0ba9988ef0416bba6cdd829813b84709a0ea4  ci-tools_1.1.3_linux-arm64.tar.gz
ece953579682191e3aceb63026f0ba9988ef0416bba6cdd829813b84709a0ea4  ci-tools_1.1.3_linux-x64.tar.gz
ece953579682191e3aceb63026f0ba9988ef0416bba6cdd829813b84709a0ea4  ci-tools_1.1.3_osx-arm64.tar.gz
ece953579682191e3aceb63026f0ba9988ef0416bba6cdd829813b84709a0ea4  ci-tools_1.1.3_osx-x64.tar.gz

What's Changed

Enhancements

• Add GNU parallel to ci-tools image by @lex57ukr in #62

Full Changelog: v1.1.2...v1.1.3

v1.1.2

SHA256 Checksums

abb54e2397f59dd0b1d086b0e455b15396d6e51a0bd2c6dfa1c8c45c0413bdc1  ci-tools_1.1.2_arm64.deb
af5f6df2bb85b778a6b752b0a346ae5b12c151c4394073133a9922ba64187c2b  ci-tools_1.1.2_amd64.deb
b36b8076544b483bd51b5352131f6a09ad9762421f478eb3ebc0808033c9b214  ci-tools_1.1.2_linux-arm64.tar.gz
b36b8076544b483bd51b5352131f6a09ad9762421f478eb3ebc0808033c9b214  ci-tools_1.1.2_linux-x64.tar.gz
b36b8076544b483bd51b5352131f6a09ad9762421f478eb3ebc0808033c9b214  ci-tools_1.1.2_osx-arm64.tar.gz
b36b8076544b483bd51b5352131f6a09ad9762421f478eb3ebc0808033c9b214  ci-tools_1.1.2_osx-x64.tar.gz

What's Changed

Enhancements

• Add rsync and upgrade bats-core to v1.13.0 in ci-tools by @lex57ukr in #61

Full Changelog: v1.1.1...v1.1.2

v1.1.1

SHA256 Checksums

916f0e35d31bfa8b46558dac5b08df3d5fb1d838447d04296203e9b906f6eefa  ci-tools_1.1.1_amd64.deb
a8167c39b8e8f329dacc546fd9449a4297d5aea932fff30ef4b45b2d8c82e09d  ci-tools_1.1.1_arm64.deb
b2484c9deeb28a983d6cc2e51524287d6bbf60a0a1c156a662ea6c01494a4989  ci-tools_1.1.1_linux-arm64.tar.gz
b2484c9deeb28a983d6cc2e51524287d6bbf60a0a1c156a662ea6c01494a4989  ci-tools_1.1.1_linux-x64.tar.gz
b2484c9deeb28a983d6cc2e51524287d6bbf60a0a1c156a662ea6c01494a4989  ci-tools_1.1.1_osx-arm64.tar.gz
b2484c9deeb28a983d6cc2e51524287d6bbf60a0a1c156a662ea6c01494a4989  ci-tools_1.1.1_osx-x64.tar.gz

What's Changed

Enhancements

• Add bats-core and helper libraries to ci-tools image by @lex57ukr in #60

Full Changelog: v1.1.0...v1.1.1

v1.1.0

SHA256 Checksums

3784cf6508c038bff7e3cf5f5bd461d2b2e209cdb33cf9f444944b6def6f1128  ci-tools_1.1.0_linux-arm64.tar.gz
3784cf6508c038bff7e3cf5f5bd461d2b2e209cdb33cf9f444944b6def6f1128  ci-tools_1.1.0_linux-x64.tar.gz
3784cf6508c038bff7e3cf5f5bd461d2b2e209cdb33cf9f444944b6def6f1128  ci-tools_1.1.0_osx-arm64.tar.gz
3784cf6508c038bff7e3cf5f5bd461d2b2e209cdb33cf9f444944b6def6f1128  ci-tools_1.1.0_osx-x64.tar.gz
a9918ade17fc5b442cfda0b48133d4547d541e12c2c4d5766ffc787907997b59  ci-tools_1.1.0_arm64.deb
d75cd885352db428391000bcbe71292bb117c87bfaa2671847ff629791ed87ad  ci-tools_1.1.0_amd64.deb

What's Changed

Security

• Add SBOM generation, CVE scanning, and cosign image signing by @lex57ukr in #54
• Update ci-tools dependencies and ignore unfixable Go stdlib CVEs by @lex57ukr in #58

Enhancements

• Invoke scripts via shebang instead of explicit bash by @lex57ukr in #49
• Use Bash array for TEST_IMAGES in test-all.sh by @lex57ukr in #53
• Harden publish workflow: tag validation, provenance, and documentation by @lex57ukr in #56

Bug Fixes

• Fix make man on macOS by @lex57ukr in #45

Documentation

• Add Docker, Homebrew, and Apt install badges to README by @lex57ukr in #51

Dependencies

• Bump actions/download-artifact from 4.3.0 to 7.0.0 by @dependabot[bot] in #47
• Bump actions/upload-artifact from 4.6.2 to 6.0.0 by @dependabot[bot] in #46

Full Changelog: v1.0.8...v1.1.0

v1.0.8

SHA256 Checksums

3987fbb055c7109500c038a2490199766d5959892a81e03f85d341d940697e42  ci-tools_1.0.8_linux-arm64.tar.gz
3987fbb055c7109500c038a2490199766d5959892a81e03f85d341d940697e42  ci-tools_1.0.8_linux-x64.tar.gz
3987fbb055c7109500c038a2490199766d5959892a81e03f85d341d940697e42  ci-tools_1.0.8_osx-arm64.tar.gz
3987fbb055c7109500c038a2490199766d5959892a81e03f85d341d940697e42  ci-tools_1.0.8_osx-x64.tar.gz
3f7354178b6d88c0c94e922dae5975846517d2bb53c334e101f74e15cabb7547  ci-tools_1.0.8_arm64.deb
f69706b4bc290e571bc413e102986db4fecde95ee75294fec0fc7de85137f0dd  ci-tools_1.0.8_amd64.deb

What's Changed

Security

• Declare curl and jq as deb package runtime dependencies by @lex57ukr in #43

Other Changes

• Fix misleading comment in package-release.sh by @lex57ukr in #42

Full Changelog: v1.0.7...v1.0.8

v1.0.7

SHA256 Checksums

17cb0bb7b6fe87b0f269699286e8bbc77a07793d1f71e2bb4191ca48a653740b  ci-tools_1.0.7_arm64.deb
c1e4d09aace17c833db0beaa42f3903376e3a80ef389d3a71e1f2c951ce3e883  ci-tools_1.0.7_amd64.deb
d52167f7ee566b94c2b125c3655e0e8f451b37e6f2ef2b4cae229c9b7f0938fe  ci-tools_1.0.7_linux-arm64.tar.gz
d52167f7ee566b94c2b125c3655e0e8f451b37e6f2ef2b4cae229c9b7f0938fe  ci-tools_1.0.7_linux-x64.tar.gz
d52167f7ee566b94c2b125c3655e0e8f451b37e6f2ef2b4cae229c9b7f0938fe  ci-tools_1.0.7_osx-arm64.tar.gz
d52167f7ee566b94c2b125c3655e0e8f451b37e6f2ef2b4cae229c9b7f0938fe  ci-tools_1.0.7_osx-x64.tar.gz

What's Changed

Security

• Add deb packaging pipeline with CI testing by @lex57ukr in #41

Full Changelog: v1.0.6...v1.0.7

v1.0.6

What's Changed

Security

• Pin base image to digest by @lex57ukr in #35
• Add mandoc to ci-tools container image by @lex57ukr in #40

Enhancements

• Improve resolve script error messages and output by @lex57ukr in #36
• Add schema validation for versions.lock by @lex57ukr in #37

Bug Fixes

• Use atomic writes for versions.lock in resolve script by @lex57ukr in #31
• Chain Makefile lint commands for explicit success output by @lex57ukr in #32

Documentation

• Document root-user rationale for CI images by @lex57ukr in #33

Other Changes

• Add concurrency control to publish workflow by @lex57ukr in #34

Full Changelog: v1.0.5...v1.0.6