• 0.7.4 a37f0018cd

    0.7.4
    All checks were successful
    published / projectfile-is-valid (push) Successful in 7s
    published / release-tag (push) Successful in 2s
    published / runner-is-ready (push) Successful in 11s
    published / source-is-compliant (push) Successful in 11s
    published / source-is-secure (push) Successful in 14s
    published / signing-is-ready (push) Successful in 8s
    published / projectfile-is-ok (push) Successful in 9s
    published / documentation-passes-lint (push) Successful in 1m6s
    published / source-passes-lint (push) Successful in 1m7s
    published / image-is-built-24 (24) (push) Successful in 2m41s
    published / image-is-built-26 (26) (push) Successful in 2m25s
    published / image-has-sbom (24) (push) Successful in 36s
    published / image-has-sbom (26) (push) Successful in 48s
    published / image-is-secure (24) (push) Successful in 55s
    published / image-is-secure (26) (push) Successful in 35s
    published / container-is-verified (24) (push) Successful in 2m18s
    published / container-is-verified (26) (push) Successful in 2m19s
    published / image-is-published (24, kiota) (push) Successful in 16s
    published / image-is-published (26, kiota) (push) Successful in 14s
    published / release-is-published (push) Successful in 2s
    published / release-notes-are-published (push) Successful in 7s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-19 04:39:40 +00:00 | 29 commits to main since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    10 commits, 1 contributor, 2 days since 0.7.3.

    Bug fixes

    Installation

    Pull the published container image:

    docker pull kiota.ch/b19/node:0.7.4
    

    This release also publishes the 0.7 and 0 tags — pull the precision you want to pin.

    Usage

    Build on top of this image:

    FROM kiota.ch/b19/node:0.7.4
    

    For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull kiota.ch/b19/node@sha256:3d2a7651af5e70cef6965e9f5e82ba397d393b808fa29e6c46f62da5e19e6c8c
    

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/b19/node@sha256:3d2a7651af5e70cef6965e9f5e82ba397d393b808fa29e6c46f62da5e19e6c8c
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/b19/node@sha256:3d2a7651af5e70cef6965e9f5e82ba397d393b808fa29e6c46f62da5e19e6c8c
    

    Full changes: https://kiota.ch/b19/node/compare/0.7.3...0.7.4

    Downloads