chore(release): v1.10.5 - #664
Merged
Merged
Conversation
Corrections to the AI-model path, three of which change what a scan writes. The model becomes the subject of its own ML-BOM (metadata.component) instead of the generator's scan job. The conformance report separates a check with nothing to judge from one that is unmet, which moves the coverage denominators. A card whose license is "other" carries the terms it declares rather than an identifier guessed from the LICENSE text. A consumer of these artifacts sees different output than on v1.10.4, so the notes lead with that. The rest close gaps that ran backwards: a card declaring its training datasets scored lower than one declaring none, names scraped out of card prose counted as disclosed training data, and an AI SBOM that followed the CycloneDX shape was analyzed as ordinary software.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release bump:
CHANGELOG.mdandelectron/package.json.Scope
Nine commits since v1.10.4; seven are functional (#654, #656, #657, #659, #660,
#661, #662) and two are demo capture.
Why the notes lead with a Changed section
Three of the fixes alter what an AI-model scan writes, so a consumer of those
artifacts sees different output than on v1.10.4:
metadata.component(it was the generator's scan job);naKindand the coverage denominators move, since acheck with nothing to judge no longer counts as met;
othercarries a license name and link rather than anSPDX identifier guessed from the LICENSE text.
They are corrections, not new behaviour, which is why this stays a patch — but a
tool reading the output has to know, so they are listed first rather than mixed
into the fix list.
After merge
v1.10.5→ images (1.10.5, including the opt-in AI image) and desktop bundlesVerification
scripts/ko-style/lint.mjsclean (67 files, 0 findings)