• v0.1.216 7995a2c856

    v0.1.216 Stable

    pipeline-bot released this 2026-07-21 07:30:51 +00:00 | 298 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.215 -> v0.1.216)

    • 89039343d21b feat(ci-spine): union dashboardread to the workflows bucket + provision into workflows (CR-registry step 1)
    Downloads
  • v0.1.215 b2ea3e1fdf

    v0.1.215 Stable

    pipeline-bot released this 2026-07-20 23:40:12 +00:00 | 302 commits to main since this release

    • Prune the idle workflows-alice linux sensors after the kernel hook flip (CI-spine collapse B0b, cutover step C). With
      sean/linux CI now on the bare workflows eventsource (hook flipped; workflows-infra-bare/linux serves the live sensors),
      the workflows-alice linux-ci/linux-staging sensors + linux-ci-artifacts CM never fire — drop them from
      projects/linux/kustomization.yaml. Only branch-protection (forgejo-alice) remains, retiring with the alice overlay at B4.

    Included changes (v0.1.214 -> v0.1.215)

    • 6c5c0ee87648 cutover(ci-spine): prune idle workflows-alice linux sensors (B0b step C)
    Downloads
  • v0.1.214 1bd0046be5

    v0.1.214 Stable

    pipeline-bot released this 2026-07-20 22:42:53 +00:00 | 306 commits to main since this release

    • Drop the alice linux re-pointer ahead of the kernel hook flip (CI-spine collapse B0b, cutover step A). Remove
      provision-hook.yaml from projects/linux/kustomization.yaml. That PreSync hook's provision.sh re-PATCHes the sean/linux
      Forgejo webhook back to the workflows-alice eventsource on every pipeline-workflows-infra sync; removing it FIRST (while
      the alice linux-ci/linux-staging sensors stay live) lets the out-of-band flip to the bare workflows eventsource stick
      with no flap. The bare workflows overlay already mints the linux keys (webhook OFF). sensor-ci/staging + ci-artifacts stay
      until step C prunes the now-idle alice sensors after the flip; branch-protection (forgejo-alice) retires at B4. No node roll.

    Included changes (v0.1.213 -> v0.1.214)

    • 9312663f3f19 cutover(ci-spine): drop alice linux re-pointer before the kernel hook flip (B0b step A)
    Downloads
  • v0.1.213 0c9186815b

    v0.1.213 Stable

    pipeline-bot released this 2026-07-20 22:22:01 +00:00 | 310 commits to main since this release

    • Provision the bare workflows kernel CI plumbing additively (CI-spine collapse B0b, additive phase). Stand up the
      sean/linux build plumbing in ns workflows alongside the still-live workflows-alice copies, with NO cutover yet (the
      hook still points at workflows-alice). bundle/workflows-infra-bare/kernel-build-rbac-bare.yaml: SA pipeline-build-kernel
      • executor RoleBinding (reuse Role workflows-argo-workflows-workflow) + a DISTINCT-named cross-ns RoleBinding
        pipeline-build-kernel-workflows into shipwright-build (reuses the shared Role pipeline-build-kernel — NOT re-declared, to
        avoid an ArgoCD name collision). bundle/workflows-infra-bare/linux/: hand-authored bare overlay (linux has no
        PipelineProject CR and the operator no kernel-bootc taxonomy, so a CR renders 0 sensors) — linux-ci + linux-staging Sensors
        (Sensor ns AND submitted-Workflow ns = workflows), the linux-ci-artifacts log-archival CM, and a key-minting PreSync
        (webhook OFF in the bare provision.sh). Bare sensors go live-but-idle; branch-protection stays with the alice overlay
        (forgejo-alice) to avoid a dual-ownership prune race. Fully reversible; the live hook flip is a separate later step.

    Included changes (v0.1.212 -> v0.1.213)

    • a18a1f2e68a4 feat(ci-spine): provision bare workflows kernel CI plumbing additively (B0b additive phase)
    Downloads
  • v0.1.212 7e08192b3d

    v0.1.212 Stable

    pipeline-bot released this 2026-07-20 21:35:01 +00:00 | 314 commits to main since this release

    • Remove dead infra/build-pipeline/pipelines-operator-pindeploy.yaml (CI-spine cleanup). The workflows-alice-era
      self-deploy Sensor was relocated to bundle/workflows-infra-bare (ns workflows) at B0c; the old copy no longer rendered
      (only a comment referenced it in the kustomization) — a pure repo leftover. git rm it; the kustomization comment
      documenting the move stays.

    Included changes (v0.1.211 -> v0.1.212)

    • ef7798a2e217 cleanup(ci-spine): remove dead pipelines-operator-pindeploy.yaml
    Downloads
  • v0.1.211 76de497bb0

    v0.1.211 Stable

    pipeline-bot released this 2026-07-20 19:44:26 +00:00 | 318 commits to main since this release

    • Move zerotea's quality-guard crons workflows-alice -> workflows (CI-spine collapse B0d part 2). The two
      Flux/ArgoCD-owned guards (zerotea-mutation-smoke 6h + zerotea-staging-health 15m) were the last non-backup
      crons pinned to workflows-alice; git mv them into bundle/project-crs-bare/zerotea-guards so the overlay's
      namespace: workflows transformer re-homes them onto the bare stack (delivered via workflows-infra-bare ->
      ../project-crs-bare), and drop them from project-crs in lockstep. Behaviour-neutral: both clone code.sean.farm
      over the in-cluster hairpin, mount only the moved configMap, and run under pipeline-build-untrusted +
      pipeline-build-untrusted-egress — both already present in workflows. Leaves only the two prereq Secrets
      (builder-images codeberg push cred, pub400 creds) in project-crs, to retire with the workflows-alice ns at B4.

    Included changes (v0.1.210 -> v0.1.211)

    • d0034fd6fecb rehome(ci-spine): zerotea quality-guard crons workflows-alice -> workflows (B0d part 2)
    Downloads
  • v0.1.210 d33da7cea4

    v0.1.210 Stable

    pipeline-bot released this 2026-07-20 17:25:27 +00:00 | 322 commits to main since this release

    • Move the pipelines-operator-pindeploy Sensor workflows-alice -> workflows (CI-spine collapse B0c). The
      hand-maintained self-deploy trigger for pipelines-operator was the last operator sensor pinned to the
      workflows-alice eventing; relocate it to the bare workflows stack (bundle/workflows-infra-bare) so it
      survives the B4 teardown, and drop it from infra/build-pipeline in lockstep (only one may be live — both
      eventsources receive the operator main-push). Deps all present in workflows: build-pipeline-sensor +
      build-pipeline SAs, forgejo eventsource, the cluster-scoped pipeline-deploy-operator-pin template.

    Included changes (v0.1.209 -> v0.1.210)

    • c31997a65291 move(ci-spine): pipelines-operator-pindeploy sensor workflows-alice -> workflows (B0c)
    Downloads
  • v0.1.209 93c807e369

    v0.1.209 Stable

    pipeline-bot released this 2026-07-20 16:47:31 +00:00 | 326 commits to main since this release

    • Retire the workflows-platform twin — pipelines side (CI-spine collapse B1). The dead-end platform-collapse
      Phase-2 singleton twin is being torn down (decision: bare workflows is the single kernel/platform-singleton home,
      not workflows-platform). Delete the pipeline-workflows-infra-platform ArgoCD Application + its bundle/workflows-infra-platform
      • the workflows-platform AppProject destination. ArgoCD prunes the build-pipeline eventing/RBAC it owned there. The
        Crossplane Workflows/platform claim + cosign trust are removed in the platform-seanfarm companion change.

    Included changes (v0.1.208 -> v0.1.209)

    • c8bd42a5daea retire(ci-spine): remove workflows-platform twin -- pipelines side (B1)
    Downloads
  • v0.1.208 a8cb6c2b8c

    v0.1.208 Stable

    pipeline-bot released this 2026-07-20 15:56:57 +00:00 | 330 commits to main since this release

    • Repoint the dashboard pollers workflows-aliceworkflows (CI-spine Stage 3 fix). The wf-poller +
      build-meta-poller sidecars still queried the old workflows-alice namespace, so the SPA left-nav
      (/api/projects), wf-status, and live-logs went stale after CI moved to workflows — projects that
      hadn't run a merge/build in workflows-alice this cycle (rpg-*, zelnet) dropped off the sidebar. Flip
      all 8 poller queries to workflows and add a RoleBinding binding the live dashboard's pkg-alice
      pkg-host-dash SA to the zelnet-workflow-reader Role in workflows (bundle/pkg-host). Display-only —
      the build/release/deploy panes read Change CRs cluster-wide and were always correct.

    Included changes (v0.1.207 -> v0.1.208)

    • 544d64bf16fe fix(dashboard): repoint pollers workflows-alice -> workflows (Stage 3)
    Downloads
  • v0.1.207 80ee789cb1

    v0.1.207 Stable

    pipeline-bot released this 2026-07-20 15:07:31 +00:00 | 334 commits to main since this release

    • Flip the Argo artifactRepository + pipectl workbucket to the bare workflows bucket (CI-spine Stage 3).
      bundle/argo-workflows default artifactRepository and bin/pipectl's merge workbucket now target workflows,
      in lockstep with the operator WorkBucketPrefix flip + pipeline-merge.sh WORKBUCKET. Also durably lands the
      B0a pipectl namespace flip (NS=workflows) — the CRs moved to workflows, so pipectl ship/merge resolve
      there. The minio-platform-workflows-s3-credentials store name is intentionally kept (cosmetic rename deferred).
    • Deploy pipelines-operator v0.1.45 (CI-spine Stage 3 writer flip). Bump the pipelines-operator
      ArgoCD app targetRevision + controller image v0.1.44v0.1.45, rolling the operator that flips
      every sensor's workBucket to the bare workflows bucket. Lands together with the argo artifactRepository
      • pipectl workbucket flips so writers and readers cut over as one wave.

    Included changes (v0.1.206 -> v0.1.207)

    • 727dc11652e0 deploy(operator): bump pipelines-operator v0.1.44 -> v0.1.45 (Stage 3 writer flip)
    • 53bffff0c2d7 feat(ci-spine): flip argo artifactRepository + pipectl workbucket -> workflows (Stage 3)
    Downloads