From 3e13ba09ef9a3b0d877bc393659ae907145d006c Mon Sep 17 00:00:00 2001
From: chen21019 <19357113+chen21019@users.noreply.github.com>
Date: Sat, 24 Oct 2026 02:40:05 +0800
Subject: [PATCH] docs: align current README entry with v1.36.5

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 4b4d798..98e7d48 100644
--- a/README.md
+++ b/README.md
@@ -50,7 +50,7 @@ Legacy command-line flags, metadata endpoints, Docker-shim assumptions, in-tree
 
 ```sh
 bash scripts/validate
-SOURCE_REVISION=$(git rev-parse HEAD) TAG=v1.36.4 bash scripts/package
+SOURCE_REVISION=$(git rev-parse HEAD) TAG=v1.36.5 bash scripts/package
 ```
 
 `scripts/package` builds the exact image, checks every packaged binary and label, compiles the CNI loopback test suite and exercises its unprivileged `VERSION` protocol, confirms the minimal root filesystem, scans every vulnerability severity and secrets, and emits raw plus VEX-aware Trivy JSON, a vulnerability-enriched CycloneDX SBOM, the rootfs inventory, and immutable evidence under `dist/`. The sole VEX statement is accepted only after the source package graph proves that all seven commands exclude the discontinued `x/crypto/openpgp` package. CNI `ADD`/`CHECK`/`DEL` tests require a privileged network namespace and belong to the target-node integration scope in `COMPATIBILITY.md`, not to a rootless image build.