chore: add release supply-chain checks

2026-07-19 13:03:28 +08:00
parent 21395c19e9
commit 71b6402bd8
6 changed files with 43 additions and 1 deletions
@@ -13,6 +13,7 @@
 - Added a repeatable FTS search benchmark and documented PostgreSQL migration decision criteria.
 - Added persistent alert delivery with HTTPS validation, exponential-backoff retries, and Prometheus delivery-state metrics.
 - Added verified backup reports plus optional age-encrypted rclone offsite copies.
+- Added production dependency auditing, reproducible SPDX SBOM generation, and a documented release/upgrade/signing path.

 ### Fixed