Diego Rodrigues de Sa e Souza 9dc6500ebd fix(release): attach the SBOM to the GitHub Release on dispatch publishes too (#12020) ...

The step was gated on github.event_name == 'release'. v3.8.50's package shipped
through a workflow_dispatch (the staged publish, 11 attempts) and the step was
skipped, so the GitHub Release carried no SBOM — it was attached by hand from the
run's sbom-npm artifact (5.0 MB, 1,886 components). Now it attaches on release or
workflow_dispatch whenever a release for the published tag exists, and says so
when it does not (the workflow artifact remains the durable copy either way).

actionlint and prettier clean; npm-publish-artifact-provenance and
check-workflows-provenance-runner suites pass.

2026-08-29 10:02:51 -03:00

..

actions/npm-ci-retry

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

ISSUE_TEMPLATE

node dependency updates (#2259)

2026-05-14 20:20:54 -03:00

workflows

fix(release): attach the SBOM to the GitHub Release on dispatch publishes too (#12020)

2026-08-29 10:02:51 -03:00

CODEOWNERS

chore: optimize local git hooks and fix T11 any budget strictness

2026-04-06 00:29:54 -03:00

copilot-instructions.md

chore: optimize local git hooks and fix T11 any budget strictness

2026-04-06 00:29:54 -03:00

dependabot.yml

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00

FUNDING.yml

Release v3.8.23

2026-06-12 23:49:22 -03:00

pull_request_template.md

fix(ollama): route models by advertised capability (#11088)

2026-08-23 11:45:01 -03:00