1.1.0

Add first-class strapi template (glibc runner; reuses build-prod-node.sh); audit hardening (BASE_REVISION validation, checksum coverage, fail-closed signature checks); reconcile ssh-allowed-signers with gpg-list.

Release 1.0.1

What's Changed

• Add script to generate .npmrc and .yarnrc.yml with dynamic scopes by @harris1111 in #25
• Add safe.directory configuration to build scripts by @harris1111 in #24
• Refactor generate-yarn-npm.sh to temporarily disable npmScopes by @harris1111 in #26
• Refactor generate-yarn-npm.sh to re-enable scope handling by @harris1111 in #27
• Devops/change dockerfile script to placeholder by @harris1111 in #29
• Change nguyendinhthang3101 gpg public key by @nguyendinhthang3101 in #30
• Devops/add env file build by @harris1111 in #31
• Fix permissions for nginx cache and PID files in Dockerfile generation by @harris1111 in #32
• Add SSH signature verification script and generate allowed signers list by @harris1111 in #33
• Update SSH allowed signers list with new keys by @harris1111 in #34
• Update checksum for ssh-allowed-signers file by @harris1111 in #35
• Fix nginx permissions and update SSH allowed signers list by @harris1111 in #36
• Update SSH allowed signers and regenerate checksum by @chiro-hiro in #38
• Fix missing corepack by @chiro-hiro in #39
• Fix corepack enable, prevent error in nginx by @chiro-hiro in #40
• Update SSH key of signers by @chiro-hiro in #41
• fix(security.sh): remove orphaned second shebang by @chirojr in #50
• Harden security and improve extensibility of the trust-root scripts by @chiro-hiro in #51
• Keep the npm build token out of builder-stage layers by @chiro-hiro in #52
• Bump docker-compose images to latest stable and pin them by @chiro-hiro in #54
• chore: refresh ssh-allowed-signers and checksums by @chiro-hiro in #55
• Decouple corepack enable from the runner chmod in the Dockerfile template by @chiro-hiro in #53

New Contributors

• @chirojr made their first contribution in #50

Full Changelog: 1.0.0...1.0.1

Release 1.0.0

What's Changed

• Add chiro gpg public key by @chiro-hiro in #1
• Add wonrax GPG public key by @wonrax in #4
• Add hungnguyen gpg public key by @hungnguyen18 in #2
• add brian gpg public key by @brianw3b in #9
• Add ngotrongphuc gpg public key by @ngotrongphuc in #5
• Add nguyendinhthang3101 gpg public key by @nguyendinhthang3101 in #7
• Add BaoNinh2808 gpg key by @BaoNinh2808 in #6
• Add harris1111 public key by @harris1111 in #8
• Add caohoaitan gpg public key by @CaoHoaiTan in #3
• Add ThanhNguyen03 gpg public key by @ThanhNguyen03 in #10
• Misc: Add alothanhh gpg public key by @alothanhh in #11
• Misc: Add SangTran-127 gpg key by @SangTran-127 in #14
• Add Github webflow key by @chiro-hiro in #15
• Fix missing EOL lead to invalid section by @chiro-hiro in #16
• Add all gpg-list file and checksum by @chiro-hiro in #17
• DevOps: Check & verify GPG key by @SangTran-127 in #18
• add quanghoang112 gpg public key by @quanghoang112 in #21
• Add docker template and improve check gpg with revision by @chiro-hiro in #20
• Update new checksum logic and fix wrong uri in gpg-check.sh by @chiro-hiro in #22
• Fix wrong docker file and wrong nginx.conf check by @chiro-hiro in #23

New Contributors

• @chiro-hiro made their first contribution in #1
• @wonrax made their first contribution in #4
• @hungnguyen18 made their first contribution in #2
• @brianw3b made their first contribution in #9
• @ngotrongphuc made their first contribution in #5
• @nguyendinhthang3101 made their first contribution in #7
• @BaoNinh2808 made their first contribution in #6
• @harris1111 made their first contribution in #8
• @CaoHoaiTan made their first contribution in #3
• @ThanhNguyen03 made their first contribution in #10
• @alothanhh made their first contribution in #11
• @SangTran-127 made their first contribution in #14
• @quanghoang112 made their first contribution in #21

Full Changelog: https://github.com/orochi-network/dev-off/commits/1.0.0