• 0.7.1 a57c1d202c

    0.7.1
    All checks were successful
    published / source-is-tested (push) Successful in 0s
    published / fetched (push) Successful in 0s
    published / projectfile-is-valid (push) Successful in 5s
    published / signing-is-ready (push) Successful in 6s
    published / source-is-secure (push) Successful in 9s
    published / projectfile-is-ok (push) Successful in 4s
    published / source-is-compliant (push) Successful in 15s
    published / source-passes-lint (push) Successful in 34s
    published / source-is-ok (push) Successful in 0s
    published / documentation-passes-lint (push) Successful in 52s
    published / documentation-is-ok (push) Successful in 0s
    published / inputs-are-ok (push) Successful in 0s
    published / image-is-built-24 (24) (push) Successful in 2m2s
    published / image-is-built-26 (26) (push) Successful in 1m56s
    published / image-is-built (push) Successful in 0s
    published / secrets-ready (push) Successful in 0s
    published / images-are-ok (push) Successful in 0s
    published / container-is-ok (push) Successful in 0s
    published / container-ready-to-test (push) Successful in 0s
    published / container-is-diagnosed (push) Successful in 2s
    published / image-has-sbom (24) (push) Successful in 13s
    published / image-has-sbom (26) (push) Successful in 13s
    published / image-is-secure (24) (push) Successful in 18s
    published / image-is-secure (26) (push) Successful in 19s
    published / container-is-verified (26) (push) Successful in 28s
    published / container-is-verified (24) (push) Successful in 28s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (26, kiota) (push) Successful in 14s
    published / image-is-attested (24, kiota) (push) Successful in 15s
    published / release-is-published (push) Successful in 2s
    published / release-notes-are-published (push) Successful in 3s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-09 07:45:23 +00:00 | 56 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    6 commits, 1 contributor, 10 hours since 0.7.0.

    Bug fixes

    • image: keep the global npm install cache out of the image layer (dcf7193)
    • deps: bump upstream to 26.11.1 (8ef2ccf)
    • security: suppress npm-bundled GHSA twins via shared fragment (fee58b1)

    Installation

    Pull the published container image:

    docker pull kiota.ch/b19/node:0.7.1
    

    This release also publishes the 0.7 and 0 tags — pull the precision you want to pin.

    Usage

    Build on top of this image:

    FROM kiota.ch/b19/node:0.7.1
    

    For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull kiota.ch/b19/node@sha256:3aab851ae1d7c074ccf31c5c548799da32409856f3234f9b41a753cfa4a867ca
    

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/b19/node@sha256:3aab851ae1d7c074ccf31c5c548799da32409856f3234f9b41a753cfa4a867ca
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/b19/node@sha256:3aab851ae1d7c074ccf31c5c548799da32409856f3234f9b41a753cfa4a867ca
    

    Full changes: https://kiota.ch/b19/node/compare/0.7.0...0.7.1

    Downloads