sean/platform-seanfarm
Watch
1
0
Fork
You've already forked platform-seanfarm
 0
Code Issues Pull requests 1 Projects Releases 177 Packages Wiki Activity
177 releases 177 tags
  • v505b3069b55a 505b3069b5

    v505b3069b55a Stable

    pipeline-bot released this 2026-07-31 12:15:13 +00:00 | 49 commits to trunk since this release

    Release v505b3069b55a from immutable source 505b3069b55a760ed82260ba7e5a282f74acc714.

    Included changes (vf7cbf0e2b515 -> v505b3069b55a)

    • 475966699aa9 docs: retire the "land" verb from live comments
    • f1390e9c1be4 fix(forgejo): the import credential was written to disk and to logs
    • 2182fc35e102 docs: the documented routine flow could not work
    • 21c6cb1dd5de feat(gitmirror): birth bytey — hello world in C, the zero-payload overhead-measurement repo
    • cc8d69651ab1 fix(forgejo): grant pipeline-bot write on sean/olly
    Downloads
  • v780297243f40 780297243f

    v780297243f40 Stable

    pipeline-bot released this 2026-07-31 10:09:02 +00:00 | 51 commits to trunk since this release

    All notable changes to platform-seanfarm — the Crossplane platform APIs (XRDs + Compositions + instances). Releasing promotes the Unreleased section into a dated release section (see sean/pipelines docs/RELEASING.md). This repo is a versioned gitops-flux pipeline project: a plain merge validates; pipectl release platform-seanfarm cuts a vX.Y.Z tag + ff's main, and the main push deploys (flux reconcile). Contributors append bullets under the Unreleased heading.

    • Stop embedding the Codeberg credential in the repo-import URL. apis/forgejo/composition.yaml
      built the clone URL as https://${CODEBERG_USERNAME}:${CODEBERG_PASSWORD}@codeberg.org/... and
      then echoed it. That is not a transient exposure: git PERSISTS remote URLs, so git clone --bare,
      git remote add and git remote set-url each wrote the password into the imported repository's
      .git/config on the Forgejo PVC, and the progress line put it in pod logs on every run. A scan of
      the live PVC found one of 34 repositories already carrying an embedded credential this way.
      The credential now travels beside the URL and is applied by a git credential helper, so the URL
      that gets persisted and printed is clean by construction. The helper reads the secret from the
      environment at call time rather than from the git command line, so it is not visible to ps
      either. tests/check-url-credentials.sh keeps it that way.
    • Stop handing contributors a routine flow that cannot work. The README's two-line recipe told
      you to git push forgejo feat/x — which the laptop credential is deliberately read-only for —
      and then make land, a target that has been a tombstone exiting 1 since it became make merge. Both lines now name what actually works: make push-branch (the in-cluster bot pushes
      on your behalf) then make merge. Also corrects the changelog header, which cited a
      SHIPPING.md renamed to RELEASING.md and a pipectl ship verb that now errors.

    Included changes (vf7cbf0e2b515 -> v780297243f40)

    • f1390e9c1be4 fix(forgejo): the import credential was written to disk and to logs
    • 2182fc35e102 docs: the documented routine flow could not work
    • 21c6cb1dd5de feat(gitmirror): birth bytey — hello world in C, the zero-payload overhead-measurement repo
    • cc8d69651ab1 fix(forgejo): grant pipeline-bot write on sean/olly
    Downloads
  • vf2f5a02ec0fe f2f5a02ec0

    vf2f5a02ec0fe Stable

    pipeline-bot released this 2026-07-30 21:34:44 +00:00 | 55 commits to trunk since this release

    • feat: GitMirror bytey-alice — birth the bytey workload repo (hello world in C, prints
      "nom"): Forgejo canonical seeded from codeberg someara/bytey, 10-minute codeberg backup
      cron. bytey is the zero-payload pipeline-overhead measurement project.

    Included changes (vf7cbf0e2b515 -> vf2f5a02ec0fe)

    • 21c6cb1dd5de feat(gitmirror): birth bytey — hello world in C, the zero-payload overhead-measurement repo
    • cc8d69651ab1 fix(forgejo): grant pipeline-bot write on sean/olly
    Downloads
  • v0e569765a9e0 0e569765a9

    v0e569765a9e0 Stable

    pipeline-bot released this 2026-07-30 17:56:02 +00:00 | 57 commits to trunk since this release

    Release v0e569765a9e0 from immutable source 0e569765a9e072ea0d657632b67de86bb38a7c36.

    Included changes (vf7cbf0e2b515 -> v0e569765a9e0)

    • cc8d69651ab1 fix(forgejo): grant pipeline-bot write on sean/olly
    Downloads
  • vf7cbf0e2b515 f7cbf0e2b5

    vf7cbf0e2b515 Stable

    pipeline-bot released this 2026-07-29 16:05:46 +00:00 | 59 commits to trunk since this release

    Release vf7cbf0e2b515 from immutable source f7cbf0e2b515c02aec51b60fd33ed9c6092eebd9.

    Included changes (vd32063bbb7c1 -> vf7cbf0e2b515)

    • 4e1eba731f36 fix(gitmirror): consolidate the seanfarm org into sean
    • 50e2ab290c33 deploy(forgejo-operator): controller image v0.6.30
    Downloads
  • vd32063bbb7c1 d32063bbb7

    vd32063bbb7c1 Stable

    pipeline-bot released this 2026-07-29 15:04:31 +00:00 | 62 commits to trunk since this release

    Release vd32063bbb7c1 from immutable source d32063bbb7c1a63d225214c57ab92919dd8ea8da.

    Included changes (vd25ef14cb488 -> vd32063bbb7c1)

    • edd2ad4ca0cd deploy(forgejo-operator): controller image v0.6.30
    Downloads
  • vd25ef14cb488 d25ef14cb4

    vd25ef14cb488 Stable

    pipeline-bot released this 2026-07-29 13:57:29 +00:00 | 64 commits to trunk since this release

    Release vd25ef14cb488 from immutable source d25ef14cb488161b54269c7c51c8bae2c028b8b4.

    Included changes (v858b09620db3 -> vd25ef14cb488)

    • bf5be9002b13 feat(gitmirror): back up to codeberg with a push mirror, not a cron
    • c12ce7bf7d45 deploy(operators): forgejo 0.6.28 -> 0.6.29, openbao 0.12.30 -> 0.12.31
    • 8057916c3580 fix(tenantbucket): converge the tenant MinIO key instead of creating it once
    • 993de3689cb0 test(guards): advance the operator-pin tripwire; make check-argo-v4 able to fail
    • baf0ca275002 deploy(operators): controller images Forgejo v0.6.28, OpenBao v0.12.30
    Downloads
  • v1e9fb053cac6 1e9fb053ca

    v1e9fb053cac6 Stable

    pipeline-bot released this 2026-07-28 15:33:32 +00:00 | 66 commits to trunk since this release

    Release v1e9fb053cac6 from immutable source 1e9fb053cac6bdfd5ef6fba7f41f181bb9e57859.

    Included changes (v858b09620db3 -> v1e9fb053cac6)

    • c12ce7bf7d45 deploy(operators): forgejo 0.6.28 -> 0.6.29, openbao 0.12.30 -> 0.12.31
    • 8057916c3580 fix(tenantbucket): converge the tenant MinIO key instead of creating it once
    • 993de3689cb0 test(guards): advance the operator-pin tripwire; make check-argo-v4 able to fail
    • baf0ca275002 deploy(operators): controller images Forgejo v0.6.28, OpenBao v0.12.30
    Downloads
  • v095c24e7d105 095c24e7d1

    v095c24e7d105 Stable

    pipeline-bot released this 2026-07-28 00:57:36 +00:00 | 70 commits to trunk since this release

    Release v095c24e7d105 from immutable source 095c24e7d10592a4ab9f72a8ce6a41ad834e6350.

    Included changes (v858b09620db3 -> v095c24e7d105)

    • 993de3689cb0 test(guards): advance the operator-pin tripwire; make check-argo-v4 able to fail
    • baf0ca275002 deploy(operators): controller images Forgejo v0.6.28, OpenBao v0.12.30
    Downloads
  • v858b09620db3 858b09620d

    v858b09620db3 Stable

    pipeline-bot released this 2026-07-27 23:32:02 +00:00 | 73 commits to trunk since this release

    Release v858b09620db3 from immutable source 858b09620db3f14eaf75d566effc06db05df22c9.

    Included changes (v0.1.126 -> v858b09620db3)

    • 6ae4c69b0776 docs(gitmirror): correct what spec.branch actually does
    Downloads