From 06121c637efe788fbf71ed3a0315b9b882709adf Mon Sep 17 00:00:00 2001
From: Ibrahim Roshdy <22573766+ibrahimroshdy@users.noreply.github.com>
Date: Fri, 16 Oct 2026 18:21:54 +0300
Subject: [PATCH] docs(release): the 1.10.5 record

Signed-off-by: Ibrahim Roshdy <22573766+ibrahimroshdy@users.noreply.github.com>
---
 docs/releases/1.10.5.md | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 docs/releases/1.10.5.md

diff --git a/docs/releases/1.10.5.md b/docs/releases/1.10.5.md
new file mode 100644
index 00000000..0d43d0ce
--- /dev/null
+++ b/docs/releases/1.10.5.md
@@ -0,0 +1,32 @@
+# Kept 1.10.5
+
+Built 2026-10-16 from commit `ca6ea5df614441f6dc2f3952985e8b1728956b9d` by `scripts/release.sh` on GitHub Actions (https://github.com/keptinventory/kept/actions/runs/38922528424).
+
+## The image
+
+`ghcr.io/keptinventory/kept@sha256:9737ec3f9c757aa98d0fc23e1cf719c2026c0d25f290b8dbe6f0cb5a14935510`, for linux/amd64 and linux/arm64, each smoked by digest before any tag
+(each natively, by the workflow's build job on a runner of its own architecture) with `/version` answering 1.10.5 at this commit.
+
+| Platform | Manifest |
+|---|---|
+| linux/amd64 | `sha256:c75d771a10234fe99eae55be9cbf01200aa1c1b13a3ba109d526ef432a64be57` |
+| linux/arm64 | `sha256:d66d0252d84f3ffddde61caa2e5afa2ee2e61be7da307bcbd8e6c2992ab09363` |
+
+Tags, all pointing at that digest (there is never a `latest`):
+
+- `ghcr.io/keptinventory/kept:1.10.5`
+- `ghcr.io/keptinventory/kept:1.10`
+- `ghcr.io/keptinventory/kept:1`
+
+## The chart
+
+`oci://ghcr.io/keptinventory/charts/kept:1.10.5` (`sha256:940ebb0e5bd89e9b29690af193d844f7e9e1900bca9f0b983ca337dd68d02d2d`), appVersion 1.10.5, its image pinned by the digest above.
+
+## Verify
+
+```sh
+cosign verify --key cosign.pub ghcr.io/keptinventory/kept:1.10.5
+cosign verify --key cosign.pub ghcr.io/keptinventory/charts/kept@sha256:940ebb0e5bd89e9b29690af193d844f7e9e1900bca9f0b983ca337dd68d02d2d
+docker buildx imagetools inspect ghcr.io/keptinventory/kept:1.10.5 --format '{{ json .SBOM }}'   # the SPDX SBOM per platform
+```
+