-
v0.1.58 Stable
released this
2026-07-24 17:07:44 +00:00 | 0 commits to main since this releaseAdded
- Serve the Pipelines dashboard as escaped, server-rendered Go + vendored
HTMX 2.0.10 fragments, with strict CSP and no Node/npm/CDN dependency. - Run the bounded Ship endpoint as a race-safe Go service backed directly by
PipelineProjectandPipelineReleaseresources.
Changed
- Build CI and release binaries with the digest-pinned AlmaLinux
go-builderimage and package the static binary fromscratch, removing
generic public Go and distroless base images.
Included changes (v0.1.57 -> v0.1.58)
8e4591118b5ffeat(web): replace Node dashboard with Go and HTMX
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Serve the Pipelines dashboard as escaped, server-rendered Go + vendored
-
v0.1.57 Stable
released this
2026-07-24 15:48:12 +00:00 | 4 commits to main since this releaseFixed
- Provision the protected
trunkbranch forgitops-deployprojects before
their first merge, and include that branch contract in the immutable
provision Job hash so onboarding a new ArgoCD repo is self-bootstrapping. - Bound workflow-liveness sweeps to active workflows plus the small labeled
cleanup set instead of copying retained workflow history every 15 seconds;
raise the controller memory envelope to 1 GiB as defense in depth after the
v0.1.56 rollout exposed a 586-workflow OOM loop.
Included changes (v0.1.56 -> v0.1.57)
7db89e78f313fix(liveness): bound retained workflow scans1b4212569474fix(projects): bootstrap gitops deploy trunks
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Provision the protected
-
v0.1.56 Stable
released this
2026-07-24 15:09:51 +00:00 | 9 commits to main since this releaseFixed
- Keep cold-cache builds responsive by pinning the native Go builder manifest
instead of making Zot import the full multi-platform image index.
Added
- Detect pipeline Workflows whose owned pods are all terminal while Argo still
reportsPending/Running: expose a safe stalled reason through Change CRs
and the query API, nudge Argo once, then request termination if projection
remains wedged. Mutex waiters, approval suspends, live non-pod nodes, and
active pods are excluded. - Bound automatic Argo CD, Flux, and IBM i deploy Workflows with taxonomy-sized
active deadlines. Kernel rollout approval workflows remain deliberately
unbounded and are not submitted by this change.
Changed
- Export project-scoped workflow-liveness action/stalled metrics and terminal
projection latency, and make envtest teardown safe when control-plane startup
itself fails.
Included changes (v0.1.55 -> v0.1.56)
95c499a67dcafix(workflows): recover stalled terminal projections23a1e6ad7b1cfix(build): pin native Go builder manifest
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Keep cold-cache builds responsive by pinning the native Go builder manifest
-
v0.1.55 Stable
released this
2026-07-24 06:48:07 +00:00 | 15 commits to main since this releaseAdded
- Expose credential-safe, project-scoped Argo Workflow status through the
read-only/workflowquery endpoint so clients no longer need direct Argo reads.
Fixed
- Resolve controller image pins nested inside Crossplane Compositions and repair
same-version deploy provenance when a project moves to its real carrier.
Included changes (v0.1.54 -> v0.1.55)
e90144683964fix(observability): follow real operator deploy carriers
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Expose credential-safe, project-scoped Argo Workflow status through the
-
v0.1.54 Stable
released this
2026-07-24 04:38:07 +00:00 | 19 commits to main since this releaseAdded
- Project a failed deploy's safe step/stage into
PipelineDeploy.status.failedStepand the query API, clearing it on a later
successful run.
Fixed
- Keep the module's source-compatibility floor at Go 1.26.0 so the
installer-render utility can regenerate manifests, while the CI and release
builders remain pinned to the security-fixed Go 1.26.5 runtime.
Included changes (v0.1.53 -> v0.1.54)
610029bb9bdefeat(deploy): expose failed workflow stage
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Project a failed deploy's safe step/stage into
-
v0.1.53 Stable
released this
2026-07-24 03:33:46 +00:00 | 23 commits to main since this releaseFixed
- Respect
PipelineProject.spec.intentModeinReleaseSubmitter: projected
projects now run one sensor-owned release execution instead of racing it with
a duplicate operator-submitted build/publish/sign path. - Keep a projected-mode ship intent open and mirror the matching projected
release through its real terminal status, sopipectl ship --waitno longer
reports success immediately after prepare while the actual release is still
running.
Changed
- Clear the static-analysis backlog: emit current
events.k8s.ioEvents,
replace deprecated controller-runtime apply/scheme APIs, and fix unchecked
cleanup/test errors and mechanical staticcheck findings. - Build with Go 1.26.5 and update the reachable
golang.org/x/netand
golang.org/x/textdependency paths to their security-fixed releases.
Included changes (v0.1.52 -> v0.1.53)
35da8e0e7af8fix(release): preserve renderer toolchain compatibilityc4301f64a753fix(release): respect projected intent ownership
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Respect
-
v0.1.52 Stable
released this
2026-07-23 16:25:08 +00:00 | 29 commits to main since this release- Add an
argoApplicationRevisiondeployment-pin kind so artifact deploy
status follows version-tagged Argo CD Applications in their real carrier
repository instead of reporting an obsolete Flux pin.
Included changes (v0.1.51 -> v0.1.52)
f7a3de96560efix(deploy): resolve Argo Application version pins
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Add an
-
v0.1.51 Stable
released this
2026-07-23 15:09:58 +00:00 | 33 commits to main since this release- Harden the shared anonymous Forgejo client against malformed repository and
traversal-like file paths, safely handle a missing transport, and cover its
raw-file, tag, compare, escaping, and failure contracts.
Included changes (v0.1.50 -> v0.1.51)
5bac101c9088test(forgejo): exercise malformed API payloads78396d97b32btest(forgejo): harden client request contracts
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Harden the shared anonymous Forgejo client against malformed repository and
-
v0.1.50 Stable
released this
2026-07-22 22:18:36 +00:00 | 38 commits to main since this releaseChanged
- Incremental release.
Included changes (v0.1.49 -> v0.1.50)
c0f8f8dc9888rename(forgejo): ForgejoNS forgejo-alice→forgejo + fixture regen
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.1.49 Stable
released this
2026-07-22 18:56:19 +00:00 | 42 commits to main since this releaseChanged
- Incremental release.
Included changes (v0.1.48 -> v0.1.49)
ccfa467bb16crename(minio): flip _partials.tmpl MINIO env + ci-artifacts endpoint minio-platform→minio
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads