chore: prepare release 4.5.3
Some checks failed
CI / build (push) Has been cancelled

This commit is contained in:
matt 2026-04-02 10:47:33 -07:00
parent 75184a5967
commit dd996939e6
7 changed files with 27 additions and 4 deletions

View file

@ -1,6 +1,9 @@
# MTG Python Deckbuilder
## [Unreleased]
_No unreleased changes yet._
## [4.5.3] - 2026-04-02
### Added
- **SBOM & supply chain provenance**: Every tagged release now attaches source SBOMs (SPDX + CycloneDX JSON) for Python dependencies and a CycloneDX container image SBOM to the GitHub Release assets. Build provenance attestations (SLSA-style) are published for the multi-arch Docker image via the GitHub Attestations API. `provenance: mode=max` is enabled on all arch builds.