• v0.1.19 fbddd87afb

    v0.1.19 Stable

    pipeline-bot released this 2026-07-10 14:14:43 +00:00 | 422 commits to main since this release

    • fix(forgejo signing): copy-signing-key initContainer must run BEFORE configure-gitea.
      configure-gitea runs forgejo migrate, which loads [repository.signing] and READS the key —
      so the key must be placed first. (3a shipped it last → Forgejo boot-fail-fast "could not read
      repository signing key".) Reorder is index-safe: all 4 initContainers use the same forgejo
      image and init-app-ini stays index 1.

    Included changes (v0.1.18 -> v0.1.19)

    • 9ec57b2904c1 fix(forgejo): copy-signing-key initContainer before configure-gitea
    Downloads
  • v0.1.18 18a45ee8f1

    v0.1.18 Stable

    pipeline-bot released this 2026-07-10 13:57:47 +00:00 | 426 commits to main since this release

    • Forgejo instance signing (SSH ed25519), key in OpenBao KV. Max-security Phase 3a. A keygen
      Job (scoped OpenBaoPolicy + k8s-auth role) generates an ed25519 SSH signing key into OpenBao
      kv (cas=0 generate-once) and materializes it as the forgejo-signing-key Secret; a
      copy-signing-key initContainer places a 0600 copy on /data (the raw key never mounts in the
      main container). [repository.signing] FORMAT=ssh MERGES=always DEFAULT_TRUST_MODEL=committer
      so server-side merges/squashes are signed+verified. Behavior-neutral until requireSignedCommits
      (Phase 3c). Append-only composition edit (env/volume/initContainer indices unshifted).

    Included changes (v0.1.17 -> v0.1.18)

    • 86bc37b0ad2f feat(forgejo): SSH-ed25519 instance signing, key in OpenBao KV (max-security 3a)
    Downloads
  • v0.1.17 d912dc4210

    v0.1.17 Stable

    pipeline-bot released this 2026-07-09 13:03:51 +00:00 | 430 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.16 -> v0.1.17)

    • 120ef78a3c39 chore(gitmirror): retire pipelines-argocd repo (folded into sean/pipelines)
    Downloads
  • v0.1.16 936a590746

    v0.1.16 Stable

    pipeline-bot released this 2026-07-09 10:16:35 +00:00 | 435 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.15 -> v0.1.16)

    • 5ec9860856c8 fix(workflows): observe-only the workflows namespace (stop the flux↔crossplane SSA fight)
    Downloads
  • v0.1.15 41e03e2ae0

    v0.1.15 Stable

    pipeline-bot released this 2026-07-09 10:02:59 +00:00 | 440 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.14 -> v0.1.15)

    • 1fe765cad1b8 fix(staticsite): store ref zot-dev -> zot-alice (stale tenant name)
    • b199849b139f chore(workflows): remove the build-pipeline flux Kustomization (ArgoCD owns it)
    • e2b19020e44c chore(workflows): prune:false on build-pipeline Kustomization before ArgoCD takeover
    Downloads
  • v0.1.14 5e77c6f597

    v0.1.14 Stable

    pipeline-bot released this 2026-07-09 01:06:12 +00:00 | 449 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.13 -> v0.1.14)

    • e03cdfbcef6c fix(governance): restore bot write for the non-mirror gitops repos (seanfarm, platform-seanfarm)
    Downloads
  • v0.1.13 d2a396b5b6

    v0.1.13 Stable

    pipeline-bot released this 2026-07-09 00:50:14 +00:00 | 454 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.12 -> v0.1.13)

    • f9def2938ffb chore(governance): retire the manual pipeline-bot collaborator list
    Downloads
  • v0.1.12 a1103cabbf

    v0.1.12 Stable

    pipeline-bot released this 2026-07-08 23:36:17 +00:00 | 459 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.11 -> v0.1.12)

    • 098f97b4450a feat(gitmirror): auto-grant pipeline-bot write per mirror (composed ForgejoCollaborator)
    Downloads
  • v0.1.11 62cf0997ef

    v0.1.11 Stable

    pipeline-bot released this 2026-07-08 23:00:34 +00:00 | 464 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.10 -> v0.1.11)

    • 6d68825c977c feat(governance): pipeline-bot write + main protection for sean/pipelines-argocd
    Downloads
  • v0.1.10 20e8ebdfba

    v0.1.10 Stable

    pipeline-bot released this 2026-07-08 20:17:15 +00:00 | 469 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.9 -> v0.1.10)

    • 85a9e55d348b feat(gitmirror): pipelines-argocd — in-cluster ArgoCD config repo
    • 9d3d73948bc5 deploy(forgejo-operator): bump controller image v0.6.9 -> v0.6.10 (ForgejoToken controller)
    Downloads