sean/pipelines
Watch
1
0
Fork
You've already forked pipelines
 0
Code Issues Pull requests Projects Releases 758 Packages Wiki Activity
758 releases 759 tags
  • v0.1.128 d9bde1f76e

    v0.1.128 Stable

    pipeline-bot released this 2026-07-10 16:39:40 +00:00 | 2196 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.127 -> v0.1.128)

    • fd8630369b74 feat(maxsec-3b): dial-gated Do:squash for signed-commit trunks
    Downloads
  • v0.1.127 3da48eba59

    v0.1.127 Stable

    pipeline-bot released this 2026-07-10 12:33:11 +00:00 | 2200 commits to trunk since this release

    • Max-security Phase 2: outdated-branch self-heal + hello-lib dials. pipeline-merge now
      reacts to Forgejo's blockOnOutdatedBranch 405 by server-side-rebasing the PR
      (update?style=rebase), waiting for CI to re-green the rebased sha (new build + new
      pipeline/ci status), then retrying the merge bound to the new tip (max 2 updates; a rebase
      conflict fails loud). Reactive — zero behavior change for repos without the dial. hello-lib
      (canary) turns on blockOnOutdatedBranch + dismissStaleApprovals (inert until approvals).

    Included changes (v0.1.126 -> v0.1.127)

    • 75b7b24c856f feat(merge): outdated-branch self-heal + hello-lib Phase-2 dials
    Downloads
  • v0.1.126 91bf4a9c0a

    v0.1.126 Stable

    pipeline-bot released this 2026-07-10 12:12:33 +00:00 | 2204 commits to trunk since this release

    • provision.sh: guarded mc curl — never apk add mc (that is Midnight Commander). The apk
      "fix" installed Alpine's mc = the file manager, breaking every provision run ("TERM
      unset"). Now: use baked mc when present (pipeline-tools), else curl dl.min.io (healthy again
      after its cert renewal) as fallback.

    Included changes (v0.1.125 -> v0.1.126)

    • 2042914e0ee1 fix(provisioner): guarded mc curl — never 'apk add mc' (Midnight Commander trap)
    Downloads
  • v0.1.125 f8b8ac9a7a

    v0.1.125 Stable

    pipeline-bot released this 2026-07-10 11:51:12 +00:00 | 2208 commits to trunk since this release

    • Max-security canary: hello-lib trunk gates merges on the pipeline/ci status. First project
      to set spec.branchProtection.security.statusCheck — the operator renders its trunk
      ForgejoBranchProtection with enableStatusCheck:true + statusCheckContexts:[pipeline/ci], so a
      trunk merge now requires the commit-status CI posts. Trunk only (main is releases-only).

    Included changes (v0.1.124 -> v0.1.125)

    • c9d56ca532df feat(hello-lib): max-security canary — gate trunk merges on pipeline/ci status
    Downloads
  • v0.1.124 c20645cbb8

    v0.1.124 Stable

    pipeline-bot released this 2026-07-10 11:40:17 +00:00 | 2212 commits to trunk since this release

    • provision.sh: mc via apk add (no dl.min.io). The provisioner Job runs provision.sh on
      alpine/k8s (external overlay image) and already apk-adds gnupg; switch its dead dl.min.io mc fetch
      to apk add mc (Alpine mirror). templates/base is now fully off dl.min.io.

    • pkg-install: mc via a baked initContainer (no dl.min.io). The native-install test legs run
      stock distro images (debian/alma) that fetched mc from the now-dead dl.min.io. A pipeline-tools
      initContainer now copies baked mc into a shared /mcbin volume on the leg PATH. Last CWT off dl.min.io.

    Included changes (v0.1.123 -> v0.1.124)

    • 50eb579fddff fix(provisioner): provision.sh gets mc via apk, not dead dl.min.io
    • 78c0892c31b5 fix(pkg-install): provide mc via a pipeline-tools initContainer (drop dl.min.io)
    Downloads
  • v0.1.123 7c321894ec

    v0.1.123 Stable

    pipeline-bot released this 2026-07-10 11:28:29 +00:00 | 2219 commits to trunk since this release

    • Fleet off dl.min.io: repoint the remaining mc-download trusted steps to baked images.
      dl.min.io's cert expired 2026-07-10, breaking every runtime curl … mc (exit 127). The 6
      git/curl/jq/mc(/kubectl/skopeo) steps (promote-image ×2, deploy-kernel, build-images gather,
      build-backfill, provisioner Job) now run on the baked pipeline-tools image; the 2 crane steps
      (promote-images, promote-kernel) run on sysadmin:v8 (crane+mc baked) — no runtime tool
      downloads. pkg-install + provisioner provision.sh (fixed/external images) follow via an
      mc initContainer.

    Included changes (v0.1.122 -> v0.1.123)

    • f198f5f7d7f6 fix(pipeline): repoint remaining mc-download steps off dead dl.min.io
    Downloads
  • v0.1.122 f1438f95d3

    v0.1.122 Stable

    pipeline-bot released this 2026-07-10 09:16:07 +00:00 | 2224 commits to trunk since this release

    • promote-tag runs on the baked pipeline-tools image (no more dl.min.io). dl.min.io's TLS
      cert expired 2026-07-10, breaking the promote's runtime curl … mc download fleet-wide (exit 127).
      pipeline-promote-tag now runs on the new pipeline-tools image (git/curl/jq/mc baked, mc COPYed
      from the mirrored upstream image) — no runtime tool download. Durable replacement for the break-glass.

    Included changes (v0.1.121 -> v0.1.122)

    • 834c5f68b94a fix(promote-tag): run on baked pipeline-tools image (drop dl.min.io mc download)
    Downloads
  • v0.1.121 74d14a01be

    v0.1.121 Stable

    pipeline-bot released this 2026-07-10 08:59:56 +00:00 | 2228 commits to trunk since this release

    • Deploy pipelines-operator v0.1.27. Auto-bump the operator app pin (targetRevision + controller image) v0.1.26 -> v0.1.27 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.120 -> v0.1.121)

    • 40da9b530f22 deploy(operator): pin pipelines-operator v0.1.26 -> v0.1.27
    Downloads
  • v0.1.120 5b1452ae54

    v0.1.120 Stable

    pipeline-bot released this 2026-07-10 07:22:49 +00:00 | 2232 commits to trunk since this release

    • CI posts a pipeline/ci commit status to Forgejo. pipeline-build-buildkit (go-library-tag /
      go-operator-image) now posts state:success on the head sha after a green compile+publish, so branch
      protection can gate trunk merges on it (MED-S5). Best-effort (a Forgejo blip never false-reds a build);
      keyed to the exact built sha; holds the pipeline-bot token in a fixed curl step, preserving the
      untrusted/trusted split. First half of the maximum-repo-security workflow.

    Included changes (v0.1.119 -> v0.1.120)

    • 204c229c7b1d feat(pipelines): post pipeline/ci commit status to Forgejo on green build
    Downloads
  • v0.1.119 028e38c364

    v0.1.119 Stable

    pipeline-bot released this 2026-07-10 07:11:01 +00:00 | 2236 commits to trunk since this release

    • Auto-deploy pipelines-operator pin. On a sean/pipelines-operator main push (a new
      operator release), the pipelines-operator-pindeploy Sensor fires pipeline-deploy-operator-pin,
      which idempotently bumps the operator app pin (targetRevision + controller image) in
      apps/applications.yaml, waits for CI green, merges to trunk, and ships a pipelines release —
      restoring the auto-deploy the flux->ArgoCD consolidation dropped, pipelines-operator-specifically
      (a bespoke CWT+Sensor, NOT the shared go-operator-image taxonomy).

    Included changes (v0.1.118 -> v0.1.119)

    • 6c21715160e6 feat(pipelines): auto-deploy pipelines-operator pin on operator release
    Downloads