3 Commits

Include renames

Author	SHA1	Message	Date
dependabot[bot]andGitHub	80330a8b07	chore(deps): bump the actions group with 5 updates (#508) ... Bumps 5 GitHub Actions via Dependabot. All 17 checks green.	2026-07-17 10:58:28 +08:00
SnapOtterandGitHub	b6fdabaea8	ci(release): keep image attestations in GitHub's API, drop provenance sidecars (#504) ... Stop pushing SLSA attestations to the registries as OCI referrer tags (attest.yml: push-to-registry: false) and disable buildx's default provenance sidecars (release.yml: provenance: false). GHCR rendered both as package versions / unknown-unknown architecture entries on the package page. The release/publish flow (publish-images gate, RELEASE_TOKEN, web Sentry DSN) is unchanged.	2026-07-12 05:02:15 +08:00
SnapOtter	008c4e3654	ci: add SLSA provenance attestation workflow for published releases [skip ci]	2026-07-07 16:25:02 +08:00