• 0.9.0 e57dd2b76e

    0.9.0
    All checks were successful
    published / release-tag (push) Successful in 2s
    published / projectfile-is-valid (push) Successful in 4s
    published / runner-is-ready (push) Successful in 5s
    published / source-is-compliant (push) Successful in 7s
    published / source-is-secure (push) Successful in 8s
    published / signing-is-ready (push) Successful in 4s
    published / projectfile-is-ok (push) Successful in 3s
    published / source-passes-lint (push) Successful in 33s
    published / documentation-passes-lint (push) Successful in 48s
    published / image-is-built-24 (24, amd64) (push) Successful in 53s
    published / image-is-built-26 (26, amd64) (push) Successful in 55s
    published / image-has-sbom (24, amd64) (push) Successful in 21s
    published / image-has-sbom (26, amd64) (push) Successful in 21s
    published / image-is-secure (24, amd64) (push) Successful in 25s
    published / image-is-secure (26, amd64) (push) Successful in 25s
    published / container-is-verified (26, amd64) (push) Successful in 46s
    published / container-is-verified (24, amd64) (push) Successful in 46s
    published / image-is-published (26, kiota) (push) Successful in 12s
    published / image-is-published (24, kiota) (push) Successful in 13s
    published / image-is-published (26, dockerhub) (push) Successful in 43s
    published / image-is-published (24, dockerhub) (push) Successful in 57s
    published / release-is-published (push) Successful in 2s
    published / release-notes-are-published (push) Successful in 4s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-25 04:34:55 +00:00 | 7 commits to main since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    11 commits, 1 contributor, 3 days since 0.8.0.

    Features

    • forge: declare and publish to GitHub with arm64 (e5908fb)
    • publish: push to Docker Hub (9412845)

    Bug fixes

    • deps: bump pnpm to 12.15.0 (c8088e5)
    • deps: bump upstream to 26.12.1 (c0304a0)
    • deps: bump upstream to 24.22.1 (32894b7)
    • deps: bump upstream to 22.23.4 (da4fb5e)
    • pnpm: keep the pnpm store and corepack cache in the npm cache (95643a6)
    • security: update VAs (1942eed)
    • deps: patch undici bundled in global npm and pnpm (f3dc84d)

    Installation

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/b19-node:0.9.0
    

    This release also publishes the 0.9 and 0 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/b19/node:0.9.0
    

    Usage

    Build on top of this image:

    FROM damianbuho/b19-node:0.9.0
    

    For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/b19-node@sha256:252b9924174f91e0b572ea99534ec7814ab5dcaf7127b802dd2913b2e3f5ae49
    docker pull kiota.ch/b19/node@sha256:252b9924174f91e0b572ea99534ec7814ab5dcaf7127b802dd2913b2e3f5ae49
    
    Platform Digest Size
    linux/amd64 sha256:14347be18fbe7f89da1d4e3e485253e7eca55f832cc534d30f054a695a5e75f5 216.0 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/b19-node@sha256:252b9924174f91e0b572ea99534ec7814ab5dcaf7127b802dd2913b2e3f5ae49
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/b19/node@sha256:252b9924174f91e0b572ea99534ec7814ab5dcaf7127b802dd2913b2e3f5ae49
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/b19-node@sha256:252b9924174f91e0b572ea99534ec7814ab5dcaf7127b802dd2913b2e3f5ae49
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/b19/node@sha256:252b9924174f91e0b572ea99534ec7814ab5dcaf7127b802dd2913b2e3f5ae49
    

    Full changes: https://kiota.ch/b19/node/compare/0.8.0...0.9.0

    Downloads