• v0.1.3 2382b707c3

    v0.1.3 Stable

    gitea_admin released this 2026-07-02 16:07:18 +00:00 | 1383 commits to main since this release

    Fixed

    • pipelines CI no longer fires on the release machinery's ephemeral branches.
      Every release's devbump pushed _devbump/vX.Y.Z-dev and deleted it seconds
      later (after its ff-merge) — CI cloned the already-deleted branch, failed
      with git exit 128, and left a label-less red "—" row in the BUILD pane, one
      per release. The pipelines sensor filter now excludes _devbump/ (as
      zelnet's always has) and rollback- (as seanfarm's always has) — both
      exclusions predate pipelines having a VERSION file, which is why it lacked
      them.
    Downloads
  • v0.1.2 a9b45e277c

    v0.1.2 Stable

    gitea_admin released this 2026-07-02 15:49:25 +00:00 | 1386 commits to main since this release

    Splits per-commit CI from the expensive release work, and adds a deterministic
    "when to cut a release" signal — so a grind can fan out fast feature branches
    while fuzz + ReleaseSafe still run often, just not per-PR.

    Added

    • templates/base/pipeline-release-cadence.yaml — a trusted CWT (holds the
      Forgejo token, runs no project code) that a per-project CronWorkflow submits
      on a schedule. If staging advanced past the last release tag, it drops the
      -dev suffix in the version file, promotes the CHANGELOG [Unreleased]
      section to a dated one, and lands it — driving pipeline-staging release mode
      (deep fuzz + ReleaseSafe + packaging + promote). Idempotent no-op when staging
      == last tag, the version is already clean, or the tag exists.
    • projects/zerotea/release-cron.yaml — the zerotea release-cadence signal
      (0 */6 * * *, concurrency Forbid). Fuzz + ReleaseSafe now run every 6h when
      there are changes, not on every PR.

    Changed

    • projects/zerotea/build.sh — per-commit CI is now a FAST correctness gate:
      zig fmt --check + zig build test + a Debug zig build (compiles exe +
      fuzz harness) + a deterministic kcov coverage gate (src-scoped, floor 85%,
      today ~99.6%; degrades to a warning until the builder ships kcov). The deep
      fuzz pass + amd64/arm64 ReleaseSafe cross-compile + nfpm packaging are gated
      to release mode (clean x.y.z). config.yaml records the coverage floor +
      the 6h cadence.
    Downloads
  • v0.1.1 c9816fc8b2

    v0.1.1 Stable

    gitea_admin released this 2026-07-02 15:00:39 +00:00 | 1391 commits to main since this release

    Hardens the release path against the Forgejo ff-race that stranded v0.1.0
    (tagged + released but never deployed: the ff-merge 200'd, the DB recorded the
    PR merged, and an internal Forgejo op pushed main back seconds later — after
    which every re-PR of the same sha insta-closed as "already included"). This
    release is itself the fix-forward that advances main past the stranded sha.

    Fixed

    • promote-tag: main advancement now runs in up to 3 rounds and only counts a
      main that still holds the release sha after an 8s settle; all rounds failing
      aborts the release BEFORE the tag is cut (nothing half-released).
    • deploy: when the triggering trunk tip is BEHIND the deploy sha (regression),
      fail loudly instead of "Succeeded (skipped as superseded)" — a stranded
      release is now a red row, not silence.
    • promote-tag / devbump / deploy ffpr: PR-number fallbacks now match their own
      head+base with jq — the old first-open-PR grep could pick an unrelated PR
      and merge the wrong thing into the wrong branch.
    Downloads
  • v0.1.0 8d6e9344b4

    v0.1.0 Stable

    gitea_admin released this 2026-07-02 14:40:18 +00:00 | 1394 commits to main since this release

    The first shaped release: the pipelines repo now follows its own contract.

    Added

    • Consolidated CI/CD dashboard (pipelines.sean.farm): left-nav SPA over every
      project, BUILD / RELEASE / DEPLOY panes, per-step archived build & deploy
      logs (click a row), greenscreen reel galleries, dev-build downloads.
    • Shared pipeline templates across 5 taxonomies and 13 projects: validate /
      build (buildkit, desktop, ibmi) / test (pkg-install, ibmi-behavioral, noop) /
      promote (gpg-pkg, image-cosign, tag) / land / staging / deploy (+ flux
      variant) / devbump / cancel-stale / provisioner.
    • gitops-deploy taxonomy v2 — tag-shaped releases: VERSION + CHANGELOG.md,
      releases cut by pipeline-promote-tag, deploys triggered by the release
      advancing main (a main-push sensor), not by every staging land.
    • deploy-v2: server-side dry-run gate before main advances, ff-only merge
      machinery, ArgoCD convergence gate (Synced@sha + Healthy), data-plane smoke
      (the dashboard must serve rows, not just 200), auto-rollback on failed
      convergence for staging-triggered deploys.
    • In-cluster CI guards mirrored from pre-push: dashboard row classifier,
      archived-log index parser, and the poller-scripts structural guard (all four
      broken-\-continuation variants).

    Fixed

    • The dashboard silent-empty family: poller kubectl promotion gated on
      success, per-project truncate (no ghost rows), download-index and prune
      protected from transient-blip clobbers.
    Downloads