release: bump version to v0.2.35

This commit is contained in:
2026-03-20 22:54:30 +00:00
parent 1c342c2a19
commit c0e8f8d813
3 changed files with 13 additions and 2 deletions

View File

@@ -1,5 +1,16 @@
# Changelog # Changelog
## [0.2.35] - 2026-03-20
### Added
- **Anonymous read mode** (`NORA_AUTH_ANONYMOUS_READ=true`): allow pull/download without credentials while requiring auth for push. Use case: public demo registries, read-only mirrors.
### Fixed
- Pin slsa-github-generator and codeql-action by SHA instead of tag
- Replace anonymous tuple with named struct in activity grouping (readability)
- Replace unwrap() with if-let pattern in activity grouping (safety)
- Add warning message on SLSA attestation failure instead of silent suppression
## [0.2.34] - 2026-03-20 ## [0.2.34] - 2026-03-20
### Fixed ### Fixed

2
Cargo.lock generated
View File

@@ -1277,7 +1277,7 @@ dependencies = [
[[package]] [[package]]
name = "nora-registry" name = "nora-registry"
version = "0.2.34" version = "0.2.35"
dependencies = [ dependencies = [
"async-trait", "async-trait",
"axum", "axum",

View File

@@ -6,7 +6,7 @@ members = [
] ]
[workspace.package] [workspace.package]
version = "0.2.34" version = "0.2.35"
edition = "2021" edition = "2021"
license = "MIT" license = "MIT"
authors = ["DevITWay <devitway@gmail.com>"] authors = ["DevITWay <devitway@gmail.com>"]