• v0.1.58 d5c0c29f9d

    v0.1.58 Stable

    pipeline-bot released this 2026-07-24 17:07:44 +00:00 | 0 commits to main since this release

    Added

    • Serve the Pipelines dashboard as escaped, server-rendered Go + vendored
      HTMX 2.0.10 fragments, with strict CSP and no Node/npm/CDN dependency.
    • Run the bounded Ship endpoint as a race-safe Go service backed directly by
      PipelineProject and PipelineRelease resources.

    Changed

    • Build CI and release binaries with the digest-pinned AlmaLinux
      go-builder image and package the static binary from scratch, removing
      generic public Go and distroless base images.

    Included changes (v0.1.57 -> v0.1.58)

    • 8e4591118b5f feat(web): replace Node dashboard with Go and HTMX
    Downloads
  • v0.1.57 b40c8370c1

    v0.1.57 Stable

    pipeline-bot released this 2026-07-24 15:48:12 +00:00 | 4 commits to main since this release

    Fixed

    • Provision the protected trunk branch for gitops-deploy projects before
      their first merge, and include that branch contract in the immutable
      provision Job hash so onboarding a new ArgoCD repo is self-bootstrapping.
    • Bound workflow-liveness sweeps to active workflows plus the small labeled
      cleanup set instead of copying retained workflow history every 15 seconds;
      raise the controller memory envelope to 1 GiB as defense in depth after the
      v0.1.56 rollout exposed a 586-workflow OOM loop.

    Included changes (v0.1.56 -> v0.1.57)

    • 7db89e78f313 fix(liveness): bound retained workflow scans
    • 1b4212569474 fix(projects): bootstrap gitops deploy trunks
    Downloads
  • v0.1.56 240304e03d

    v0.1.56 Stable

    pipeline-bot released this 2026-07-24 15:09:51 +00:00 | 9 commits to main since this release

    Fixed

    • Keep cold-cache builds responsive by pinning the native Go builder manifest
      instead of making Zot import the full multi-platform image index.

    Added

    • Detect pipeline Workflows whose owned pods are all terminal while Argo still
      reports Pending/Running: expose a safe stalled reason through Change CRs
      and the query API, nudge Argo once, then request termination if projection
      remains wedged. Mutex waiters, approval suspends, live non-pod nodes, and
      active pods are excluded.
    • Bound automatic Argo CD, Flux, and IBM i deploy Workflows with taxonomy-sized
      active deadlines. Kernel rollout approval workflows remain deliberately
      unbounded and are not submitted by this change.

    Changed

    • Export project-scoped workflow-liveness action/stalled metrics and terminal
      projection latency, and make envtest teardown safe when control-plane startup
      itself fails.

    Included changes (v0.1.55 -> v0.1.56)

    • 95c499a67dca fix(workflows): recover stalled terminal projections
    • 23a1e6ad7b1c fix(build): pin native Go builder manifest
    Downloads
  • v0.1.55 949a725e10

    v0.1.55 Stable

    pipeline-bot released this 2026-07-24 06:48:07 +00:00 | 15 commits to main since this release

    Added

    • Expose credential-safe, project-scoped Argo Workflow status through the
      read-only /workflow query endpoint so clients no longer need direct Argo reads.

    Fixed

    • Resolve controller image pins nested inside Crossplane Compositions and repair
      same-version deploy provenance when a project moves to its real carrier.

    Included changes (v0.1.54 -> v0.1.55)

    • e90144683964 fix(observability): follow real operator deploy carriers
    Downloads
  • v0.1.54 a8e56ac8ab

    v0.1.54 Stable

    pipeline-bot released this 2026-07-24 04:38:07 +00:00 | 19 commits to main since this release

    Added

    • Project a failed deploy's safe step/stage into
      PipelineDeploy.status.failedStep and the query API, clearing it on a later
      successful run.

    Fixed

    • Keep the module's source-compatibility floor at Go 1.26.0 so the
      installer-render utility can regenerate manifests, while the CI and release
      builders remain pinned to the security-fixed Go 1.26.5 runtime.

    Included changes (v0.1.53 -> v0.1.54)

    • 610029bb9bde feat(deploy): expose failed workflow stage
    Downloads
  • v0.1.53 8f7518b823

    v0.1.53 Stable

    pipeline-bot released this 2026-07-24 03:33:46 +00:00 | 23 commits to main since this release

    Fixed

    • Respect PipelineProject.spec.intentMode in ReleaseSubmitter: projected
      projects now run one sensor-owned release execution instead of racing it with
      a duplicate operator-submitted build/publish/sign path.
    • Keep a projected-mode ship intent open and mirror the matching projected
      release through its real terminal status, so pipectl ship --wait no longer
      reports success immediately after prepare while the actual release is still
      running.

    Changed

    • Clear the static-analysis backlog: emit current events.k8s.io Events,
      replace deprecated controller-runtime apply/scheme APIs, and fix unchecked
      cleanup/test errors and mechanical staticcheck findings.
    • Build with Go 1.26.5 and update the reachable golang.org/x/net and
      golang.org/x/text dependency paths to their security-fixed releases.

    Included changes (v0.1.52 -> v0.1.53)

    • 35da8e0e7af8 fix(release): preserve renderer toolchain compatibility
    • c4301f64a753 fix(release): respect projected intent ownership
    Downloads
  • v0.1.52 e398725445

    v0.1.52 Stable

    pipeline-bot released this 2026-07-23 16:25:08 +00:00 | 29 commits to main since this release

    • Add an argoApplicationRevision deployment-pin kind so artifact deploy
      status follows version-tagged Argo CD Applications in their real carrier
      repository instead of reporting an obsolete Flux pin.

    Included changes (v0.1.51 -> v0.1.52)

    • f7a3de96560e fix(deploy): resolve Argo Application version pins
    Downloads
  • v0.1.51 c4a5b8dcfc

    v0.1.51 Stable

    pipeline-bot released this 2026-07-23 15:09:58 +00:00 | 33 commits to main since this release

    • Harden the shared anonymous Forgejo client against malformed repository and
      traversal-like file paths, safely handle a missing transport, and cover its
      raw-file, tag, compare, escaping, and failure contracts.

    Included changes (v0.1.50 -> v0.1.51)

    • 5bac101c9088 test(forgejo): exercise malformed API payloads
    • 78396d97b32b test(forgejo): harden client request contracts
    Downloads
  • v0.1.50 3bf00bbf41

    v0.1.50 Stable

    pipeline-bot released this 2026-07-22 22:18:36 +00:00 | 38 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.49 -> v0.1.50)

    • c0f8f8dc9888 rename(forgejo): ForgejoNS forgejo-alice→forgejo + fixture regen
    Downloads
  • v0.1.49 70fe90ec38

    v0.1.49 Stable

    pipeline-bot released this 2026-07-22 18:56:19 +00:00 | 42 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.48 -> v0.1.49)

    • ccfa467bb16c rename(minio): flip _partials.tmpl MINIO env + ci-artifacts endpoint minio-platform→minio
    Downloads