Depot corresponding source

Release SHA: 364b2920f2d6c53e9a6eab1ac4e9ff6fb1e62b58
Shelf upstream base: 03e3c25d9d73b0dea36eb6cbed630e1af9f7641c
Application license: AGPL-3.0 (see LICENSE)
Node requirement: >=22.20.0
Package manager: pnpm@9.15.9

Application build:
  corepack enable
  pnpm install --frozen-lockfile
  pnpm db:generate
  pnpm build

Production image build:
  docker build --build-arg RELEASE_SHA=364b2920f2d6c53e9a6eab1ac4e9ff6fb1e62b58 -f apps/webapp/Dockerfile .

Database migrations are in packages/database/prisma/migrations. Applying them
requires a separately configured PostgreSQL/Supabase environment and is not
part of source-archive verification.

FullCalendar 6.1.20:
  The exact preferred-form workspace source is bundled as
  third-party-source/fullcalendar-workspace-v6.1.20-c37d6ce3310e0633d506108c2bb20c6c3e52fec6.tar.gz.
  Its SHA-256 is 23ace684bc12a759051a8b37c6d076b12c83b48b016cae3a7f27d4cca009caea.
  FullCalendar Premium is used under GPL-3.0-only with the
  GPL-My-Project-Is-Open-Source key. The adjacent FullCalendar npm tarballs
  are the exact installed distributions used by this release.

Production copyleft dependencies (linux-x64-musl):
  DEPENDENCY_LICENSES.json records the sanitized production dependency license
  inventory. Exact, checksum-pinned preferred-form sources for the LGPL and MPL
  components used by the production image are in third-party-source. Their
  package mapping, download URLs, versions, licenses, and checksums are recorded
  in SOURCE_MANIFEST.json and scripts/release/source-lock.json.

Verify this release with scripts/release/verify-source-archive.sh and the
detached depot-source-364b2920f2d6c53e9a6eab1ac4e9ff6fb1e62b58.tar.gz.sha256 file distributed beside the archive.
