0.4.2

Development Process Improvements

This release only improves how we release new versions of this package. From now on, all releases will be done from our Github Actions pipelines.

This will ensure that we are able to establish the provenance of that release, said in other words: this allows us to guarantee that the published package comes from a specific commit of this repository, without any alteration.

This guarantee is key for code supply chains security, and it will help with regulations and certifications compliance.

Autogenerated Changelog

• security: configure ci/cd builds & provenance by @castarco in #15
• ci: workaround to allow pnpm publish from tag by @castarco in #16
• fix: add missing install step in release workflow by @castarco in #17

Full Changelog: 0.4.1...0.4.2

Provenance Attestations

• SigStore Log Entry 71868022
• Associated Build Pipeline