• v0.1.66 10fbddd25d

    v0.1.66 Stable

    pipeline-bot released this 2026-07-20 21:37:07 +00:00 | 337 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.65 -> v0.1.66)

    • 3b502cb2de4a cleanup(obsbucket): drop dead -platform namespaces from MinIO scoped-user allow-list
    Downloads
  • v0.1.65 d0309fbe77

    v0.1.65 Stable

    pipeline-bot released this 2026-07-20 18:06:58 +00:00 | 341 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.64 -> v0.1.65)

    • 00e609131396 rehome(ci-spine): XGitMirror backup crons workflows-alice -> workflows (B0d)
    Downloads
  • v0.1.64 640bbbd1c0

    v0.1.64 Stable

    pipeline-bot released this 2026-07-20 16:53:26 +00:00 | 345 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.63 -> v0.1.64)

    • 782d715968a9 retire(ci-spine): remove Workflows/platform twin -- platform-seanfarm side (B1)
    Downloads
  • v0.1.63 abae190c10

    v0.1.63 Stable

    pipeline-bot released this 2026-07-20 10:47:42 +00:00 | 349 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.62 -> v0.1.63)

    • 6afee71c7389 feat(obsbucket): create bare workflows bucket + grant (CI-spine bucket rename S1)
    Downloads
  • v0.1.62 2b4a0ed73a

    v0.1.62 Stable

    pipeline-bot released this 2026-07-20 07:06:35 +00:00 | 353 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.61 -> v0.1.62)

    • 573d01a7dd21 feat(stack): Δ-F trust bare workflows cosign-signer (dual-run)
    Downloads
  • v0.1.61 45b8f9727a

    v0.1.61 Stable

    pipeline-bot released this 2026-07-19 15:40:39 +00:00 | 357 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.60 -> v0.1.61)

    • 6a7b3f8b7935 feat(obsbucket): scope minio-platform-workflows store to bare workflows/buildkit/pkg
    Downloads
  • v0.1.60 c77aebbefb

    v0.1.60 Stable

    pipeline-bot released this 2026-07-19 11:16:01 +00:00 | 361 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.59 -> v0.1.60)

    • 2c3ba8129a6a feat(oidc+stack): retire komoplane/tekton composites + point oathkeeper upstreams at olly-platform
    Downloads
  • v0.1.59 f2351d0878

    v0.1.59 Stable

    pipeline-bot released this 2026-07-19 10:30:46 +00:00 | 365 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.58 -> v0.1.59)

    • 84b6fb9da785 feat(portal): point komoplane/tekton listeners at olly-platform + cutover runbook
    Downloads
  • v0.1.58 8f398fd5e2

    v0.1.58 Stable

    pipeline-bot released this 2026-07-18 21:39:22 +00:00 | 369 commits to trunk since this release

    Changed

    • Rename the platform ArgoCD browser host argocd-platform.sean.farmargocd.sean.farm. The
      short apex host is free now that argocd-alice is retired, so the singleton takes the clean name.
      instances/argocd-platform.yaml hostPrefix: argocd-platformargocd (drives ARGOCD_HOST
      the argocd-base server url + OIDC redirectURI + the Hydra client redirect_uris), and
      apis/portal/composition.yaml moves the gateway listener hostname + the argocd-gateway-tls
      cert dnsNames + the portal apps.json link to argocd.%s. The K8s NAMESPACE stays argocd-platform
      (only the hostname moved); the listener's allowedRoutes still select the argocd-platform ns.
      Deploy note: the completed Hydra registrar Job may need a re-run to update the client redirect_uris.

    Included changes (v0.1.57 -> v0.1.58)

    • 72428c1f35df feat(argocd): rename browser host argocd-platform.sean.farm -> argocd.sean.farm
    Downloads
  • v0.1.57 944ecd221b

    v0.1.57 Stable

    pipeline-bot released this 2026-07-18 19:49:01 +00:00 | 373 commits to trunk since this release

    Changed

    • cosign auth role trusts workflows-platform (platform-collapse Phase 2, gate-prep). The
      vault-build-pipeline-auth-role (OpenBaoKubernetesAuthRole build-pipeline-{stackName}) now binds
      pipeline-cosign-signer in BOTH workflows-{stackName} and (static) workflows-platform, so the
      platform kernel-bake cosign sign step can assume the role and sign with the shared cosign-ec transit
      key during dual-run. Transitional bridge — removed when the cosign auth role relocates to the platform
      singleton at cutover.

    Included changes (v0.1.56 -> v0.1.57)

    • 6bbac394ca36 feat(stack): cosign auth role trusts workflows-platform (gate-prep)
    Downloads