-
v0.1.109 Stable
released this
2026-07-24 08:15:10 +00:00 | 42 commits to main since this releaseChanged
- Deploy Forgejo operator v0.6.26, enforcing the one-shot repository import
contract and upgrading reachable vulnerable dependencies.
Included changes (v0.1.108 -> v0.1.109)
7f55f9f55744deploy(forgejo): promote operator v0.6.26
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Deploy Forgejo operator v0.6.26, enforcing the one-shot repository import
-
v0.1.108 Stable
released this
2026-07-24 07:49:05 +00:00 | 46 commits to main since this releaseChanged
- Incremental release.
Included changes (v0.1.107 -> v0.1.108)
908ba51279f8feat(n8n): widen auth-role + portal listeners to admit singleton ns n8n
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.1.107 Stable
released this
2026-07-24 06:20:41 +00:00 | 50 commits to main since this releaseChanged
- Incremental release.
Included changes (v0.1.106 -> v0.1.107)
e5a36baa0e98chore(portal): narrow pkg/pipelines listeners to the bare pkg ns (B8)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.1.106 Stable
released this
2026-07-24 06:12:31 +00:00 | 54 commits to main since this releaseChanged
- Incremental release.
Included changes (v0.1.105 -> v0.1.106)
5d7c5a702ce9test(guards): retire the pkg-host half of check-rollout-recovery544af48caaf6retire(apis): delete apis/workflows — the engine is ArgoCD's now
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.1.105 Stable
released this
2026-07-24 05:59:05 +00:00 | 59 commits to main since this releaseChanged
- Deploy OpenBao operator v0.12.28 so every API operation can evict revoked
cached tokens immediately, with vulnerable Go dependencies upgraded.
Included changes (v0.1.104 -> v0.1.105)
21b38fa0fd65chore(openbao): deploy operator v0.12.28
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Deploy OpenBao operator v0.12.28 so every API operation can evict revoked
-
v0.1.104 Stable
released this
2026-07-24 05:49:41 +00:00 | 63 commits to main since this releaseRemoved
- delta-C: retire the XWorkflows child from the stack (Track B7). The
- name: workflows
composed block is gone — its live substrate (ns workflows-alice) was pruned 07-24 and every
resident already rehomed to the bare singleton (B2–B5). Cascade deletes XWorkflows/alice +
its 9 Objects (the failing workflows-alice/pkg-host-alice flux KSs tear down pkg-alice with
their prune; the bare pkg routes/dashboard take over — pre-staged). Heals Stack/alice
Ready. Also consolidates the two dual-run bridges whose comments scheduled this: the
build-pipeline auth role's boundServiceAccountNamespaces and the cosign-key-writer subject
both collapse to the bareworkflowsliteral (their [0]-index patches removed atomically —
leaving either patch would clobber the literal with the dead alice ns).
Included changes (v0.1.103 -> v0.1.104)
2aa29d2f071fretire(stack): delta-C — remove the XWorkflows child + consolidate signer bridges (B7)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- delta-C: retire the XWorkflows child from the stack (Track B7). The
-
v0.1.103 Stable
released this
2026-07-24 00:37:41 +00:00 | 67 commits to main since this releaseChanged
- Dual-admit pkg/pipelines listeners + bare oathkeeper dashboard upstream (Track B5). The
pkg-https/http and pipelines-https/http listener selectors widen to
In [pkg-alice, pkg](4 tenant-derived selector patches removed; narrow to [pkg] at
delta-C), and the oathkeeperpipelinesaccess-rule upstream flips to the bare
pipelines.pkg.svc(combine verbs 6 = vars 6). Lands lockstep with the sean/pipelines
dashboard/pkg-host rehome; brief dashboard 502 between the two deploys is expected.
Included changes (v0.1.102 -> v0.1.103)
bc3b1e904b3cfeat(portal,oidc): dual-admit pkg listeners + bare dashboard upstream (B5)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Dual-admit pkg/pipelines listeners + bare oathkeeper dashboard upstream (Track B5). The
-
v0.1.102 Stable
released this
2026-07-24 00:09:37 +00:00 | 71 commits to main since this releaseFixed
- portal: workflows listeners admit the bare
workflowsns (B4 pulled forward — OUTAGE
FIX). The workflows-alice ns was pruned early (the B2 hcloud-token targetNamespace flip
renamed the rendered Namespace via kustomize's NamespaceTransformer — flux pruned the old
one), taking the alice HTTPRoutes and 404ing workflows.sean.farm. Listener selectors go
straight to the bare literal (no widen/narrow dance — there is no alice side left to admit);
the bare routes land in sean/pipelines bundle/argo-workflows in lockstep.
Included changes (v0.1.101 -> v0.1.102)
8f130467682ffix(portal): workflows listeners admit bare 'workflows' ns (B4 pulled forward)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- portal: workflows listeners admit the bare
-
v0.1.101 Stable
released this
2026-07-23 16:54:00 +00:00 | 75 commits to main since this releaseChanged
- cosign-key-writer RoleBinding gains a bare
workflowssubject (Track B2 widen). The
kyverno cosign-public-key write grant admitted only workflows-{stack}; the bare singleton's
cosign-public-key-extractor twin needs it too. Alice subject retires with the ns at B8.
Included changes (v0.1.100 -> v0.1.101)
b9f8cb9e073efeat(stack): cosign-key-writer bare 'workflows' subject (Track B2 widen)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- cosign-key-writer RoleBinding gains a bare
-
v0.1.100 Stable
released this
2026-07-23 16:39:50 +00:00 | 79 commits to main since this releaseFixed
- postgres: un-list cnpg_pooler_pgbouncer from managed.roles (webhook-reserved). CNPG's
admission webhook rejects any managed.roles entry for the operator-reserved pooler role —
evenensure: absent— which blocked the entire Cluster apply and with it the bob_*
tombstone DROPs. The pooler leftover gets a documented one-off imperative DROP ROLE instead.
Included changes (v0.1.99 -> v0.1.100)
5afea0e4aecefix(postgres): CNPG reserves cnpg_pooler_pgbouncer — un-list it from managed.roles
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- postgres: un-list cnpg_pooler_pgbouncer from managed.roles (webhook-reserved). CNPG's