• v0.1.222 cf4a59e437

    v0.1.222 Stable

    pipeline-bot released this 2026-07-21 10:55:22 +00:00 | 271 commits to main since this release

    • CR-registry control flip, steps 3–5 (the gate flips). Repoint every live gate CR read/write from workflows-alice
      to workflows now that the history is mirrored there and the SAs are authorized: I1 land gate (pipeline-assert-ready
      reads pipelinebuild), I2 deploy gate (pipeline-deploy reads pipelinerelease), the promote release row
      (pipeline-promote-images write+status), the operator-autodeploy declare CR (pipeline-deploy-operator-pin), and
      shipd.js (Ship-button create — depends on the step-1 grant). Also fix the dead Argo deep-links in dashboard.html
      (×4) + the pipeline-build-buildkit commit-status target_url (runs execute in workflows now). No *-rbac.yaml or
      workflows-alice grants removed — those retire at B4. Both read gates fail open, so the cutover degrades to no-op, never blocks.

    Included changes (v0.1.221 -> v0.1.222)

    • 8ef92d9c5f37 feat(cr-registry): flip live gate CR reads/writes workflows-alice->workflows (steps 3-5)
    Downloads