• v0.1.109 addd5edff3

    v0.1.109 Stable

    pipeline-bot released this 2026-07-24 08:15:10 +00:00 | 42 commits to main since this release

    Changed

    • Deploy Forgejo operator v0.6.26, enforcing the one-shot repository import
      contract and upgrading reachable vulnerable dependencies.

    Included changes (v0.1.108 -> v0.1.109)

    • 7f55f9f55744 deploy(forgejo): promote operator v0.6.26
    Downloads
  • v0.1.108 50d2a3a958

    v0.1.108 Stable

    pipeline-bot released this 2026-07-24 07:49:05 +00:00 | 46 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.107 -> v0.1.108)

    • 908ba51279f8 feat(n8n): widen auth-role + portal listeners to admit singleton ns n8n
    Downloads
  • v0.1.107 c69d16fda3

    v0.1.107 Stable

    pipeline-bot released this 2026-07-24 06:20:41 +00:00 | 50 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.106 -> v0.1.107)

    • e5a36baa0e98 chore(portal): narrow pkg/pipelines listeners to the bare pkg ns (B8)
    Downloads
  • v0.1.106 3ef290b759

    v0.1.106 Stable

    pipeline-bot released this 2026-07-24 06:12:31 +00:00 | 54 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.105 -> v0.1.106)

    • 5d7c5a702ce9 test(guards): retire the pkg-host half of check-rollout-recovery
    • 544af48caaf6 retire(apis): delete apis/workflows — the engine is ArgoCD's now
    Downloads
  • v0.1.105 e3dc34a98d

    v0.1.105 Stable

    pipeline-bot released this 2026-07-24 05:59:05 +00:00 | 59 commits to main since this release

    Changed

    • Deploy OpenBao operator v0.12.28 so every API operation can evict revoked
      cached tokens immediately, with vulnerable Go dependencies upgraded.

    Included changes (v0.1.104 -> v0.1.105)

    • 21b38fa0fd65 chore(openbao): deploy operator v0.12.28
    Downloads
  • v0.1.104 b540e729a9

    v0.1.104 Stable

    pipeline-bot released this 2026-07-24 05:49:41 +00:00 | 63 commits to main since this release

    Removed

    • delta-C: retire the XWorkflows child from the stack (Track B7). The - name: workflows
      composed block is gone — its live substrate (ns workflows-alice) was pruned 07-24 and every
      resident already rehomed to the bare singleton (B2–B5). Cascade deletes XWorkflows/alice +
      its 9 Objects (the failing workflows-alice/pkg-host-alice flux KSs tear down pkg-alice with
      their prune; the bare pkg routes/dashboard take over — pre-staged). Heals Stack/alice
      Ready. Also consolidates the two dual-run bridges whose comments scheduled this: the
      build-pipeline auth role's boundServiceAccountNamespaces and the cosign-key-writer subject
      both collapse to the bare workflows literal (their [0]-index patches removed atomically —
      leaving either patch would clobber the literal with the dead alice ns).

    Included changes (v0.1.103 -> v0.1.104)

    • 2aa29d2f071f retire(stack): delta-C — remove the XWorkflows child + consolidate signer bridges (B7)
    Downloads
  • v0.1.103 db1065c8bc

    v0.1.103 Stable

    pipeline-bot released this 2026-07-24 00:37:41 +00:00 | 67 commits to main since this release

    Changed

    • Dual-admit pkg/pipelines listeners + bare oathkeeper dashboard upstream (Track B5). The
      pkg-https/http and pipelines-https/http listener selectors widen to
      In [pkg-alice, pkg] (4 tenant-derived selector patches removed; narrow to [pkg] at
      delta-C), and the oathkeeper pipelines access-rule upstream flips to the bare
      pipelines.pkg.svc (combine verbs 6 = vars 6). Lands lockstep with the sean/pipelines
      dashboard/pkg-host rehome; brief dashboard 502 between the two deploys is expected.

    Included changes (v0.1.102 -> v0.1.103)

    • bc3b1e904b3c feat(portal,oidc): dual-admit pkg listeners + bare dashboard upstream (B5)
    Downloads
  • v0.1.102 88d9f741c0

    v0.1.102 Stable

    pipeline-bot released this 2026-07-24 00:09:37 +00:00 | 71 commits to main since this release

    Fixed

    • portal: workflows listeners admit the bare workflows ns (B4 pulled forward — OUTAGE
      FIX).
      The workflows-alice ns was pruned early (the B2 hcloud-token targetNamespace flip
      renamed the rendered Namespace via kustomize's NamespaceTransformer — flux pruned the old
      one), taking the alice HTTPRoutes and 404ing workflows.sean.farm. Listener selectors go
      straight to the bare literal (no widen/narrow dance — there is no alice side left to admit);
      the bare routes land in sean/pipelines bundle/argo-workflows in lockstep.

    Included changes (v0.1.101 -> v0.1.102)

    • 8f130467682f fix(portal): workflows listeners admit bare 'workflows' ns (B4 pulled forward)
    Downloads
  • v0.1.101 59caeda89f

    v0.1.101 Stable

    pipeline-bot released this 2026-07-23 16:54:00 +00:00 | 75 commits to main since this release

    Changed

    • cosign-key-writer RoleBinding gains a bare workflows subject (Track B2 widen). The
      kyverno cosign-public-key write grant admitted only workflows-{stack}; the bare singleton's
      cosign-public-key-extractor twin needs it too. Alice subject retires with the ns at B8.

    Included changes (v0.1.100 -> v0.1.101)

    • b9f8cb9e073e feat(stack): cosign-key-writer bare 'workflows' subject (Track B2 widen)
    Downloads
  • v0.1.100 b07facfe20

    v0.1.100 Stable

    pipeline-bot released this 2026-07-23 16:39:50 +00:00 | 79 commits to main since this release

    Fixed

    • postgres: un-list cnpg_pooler_pgbouncer from managed.roles (webhook-reserved). CNPG's
      admission webhook rejects any managed.roles entry for the operator-reserved pooler role —
      even ensure: absent — which blocked the entire Cluster apply and with it the bob_*
      tombstone DROPs. The pooler leftover gets a documented one-off imperative DROP ROLE instead.

    Included changes (v0.1.99 -> v0.1.100)

    • 5afea0e4aece fix(postgres): CNPG reserves cnpg_pooler_pgbouncer — un-list it from managed.roles
    Downloads