[rmcdaniel]

Chart follow-through for native 3.6.0, which is now published and promoted. Index sha256:7f7df14b… is in both registries; 3.6, 3 and latest all point to it.

• resources/release/source-release.json: chart 1.4.0, app 3.6.0. sync-source-release.mjs --write updated Chart.yaml, values.yaml and the README.
• Artifact Hub changes: default image 3.5.0 → 3.6.0, with no schema upgrade from 3.5.0 (schema 12 stays) and rollback by image change. A security entry covers the base fix for CVE-2026-109518 and the release scan gate (server#802). The added features are Native: read a retained update outcome later by update id (.github#212) #1131, Native: produce the replay_clock entry carrier on workflow tasks (.github#215) #1132, Native: resume activities from their last acknowledged heartbeat (.github#218) #1139 and Native: report replay-blocked runs in operator metrics and health (match workflow#1091) #1154.
• docs/UPGRADING.md: Chart 1.4.0 section. From 3.4.x or earlier, apply the Chart 1.3.0 schema upgrade first.

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[rmcdaniel]

Chart 1.4.0 readback (General, 2026-11-12, anonymous GHCR):

• oci://ghcr.io/durable-workflow/charts/durable-workflow:1.4.0, manifest sha256:72f2b4af0ebf59bf75d008c976aaf808b0461ad2e21b30b065fe207a3aa91814
• chart layer sha256:7b9cb92114a67b33716c3f28f5307e5cb150abec613e1ef5dd64e07f16beb221; the downloaded .tgz hashes to the same value
• Chart.yaml: version 1.4.0, appVersion 3.6.0; values image tag 3.6.0 (published index sha256:7f7df14b…)
• annotation dev.durable-workflow.source-revision 96a0e9e738f1076373932d059f2f6338a00667a7, which is on server main
• Helm Chart Release run 43156922649 succeeded

This is used as the docs qualification reference for chart 1.4.0.