• v0.1.114 087499a7e3

    v0.1.114 Stable

    pipeline-bot released this 2026-07-24 15:19:37 +00:00 | 0 commits to main since this release

    Fixed

    • Migrate the olly Forgejo backup CronWorkflow to Argo v4's spec.schedules
      list, and reject future v3 spec.schedule regressions in GitOps manifests.

    Included changes (v0.1.113 -> v0.1.114)

    • cb6fd9640b1c test(argo): group v4 schedule assertions
    • 25dfdb670403 fix(argo): migrate olly backup schedule to v4
    Downloads
  • v0.1.113 3cd90b6177

    v0.1.113 Stable

    pipeline-bot released this 2026-07-24 15:02:49 +00:00 | 5 commits to main since this release

    Security

    • Remove shipd's obsolete Workflow admission policy now that its RBAC is
      PipelineRelease-only, and make the remaining exact-ServiceAccount CEL match
      safe for admission requests without a username.

    Included changes (v0.1.112 -> v0.1.113)

    • d0e3e9f13ad2 fix(admission): retire obsolete shipd workflow guard
    Downloads
  • v0.1.112 418c7fbc41

    v0.1.112 Stable

    pipeline-bot released this 2026-07-24 14:38:01 +00:00 | 9 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.111 -> v0.1.112)

    • 9c77964b152b feat(argo): vendor v4.0.8 workflow CRDs
    Downloads
  • v0.1.111 bc46e6fce3

    v0.1.111 Stable

    pipeline-bot released this 2026-07-24 14:30:34 +00:00 | 13 commits to main since this release

    • feat(sso): stand up the ory-argocd app-of-apps seed + ory-user-passwords SOPS source for the Ory SSO stack move into the dedicated sean/ory ArgoCD repo (ory-alice→ory singleton). Additive/parallel: the new ns ory stack runs alongside live ory-alice against the same shared alice_hydra/alice_kratos DBs; ory-push.sh bot-pushes content. Session keys unused live (CHANGEME crypto reproduced via ODS) so continuity is automatic; the 5 per-user Kratos passwords are frozen as SOPS (ESO generator re-mints). No LE-prod cert issuance (auth-tls byte-copied at cutover).

    Included changes (v0.1.110 -> v0.1.111)

    • 77ae5023e535 feat(sso): ory-argocd seed + user-passwords SOPS for the sean/ory move
    Downloads
  • v0.1.110 e267ed337e

    v0.1.110 Stable

    pipeline-bot released this 2026-07-24 12:34:35 +00:00 | 17 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.109 -> v0.1.110)

    • 28a0cb908c21 chore(images): update v0.3.10 -> v0.3.11
    Downloads
  • v0.1.109 c0e716da27

    v0.1.109 Stable

    pipeline-bot released this 2026-07-24 11:58:42 +00:00 | 21 commits to main since this release

    Fixed

    • Roll the persistent Shipwright BuildKit daemon whenever its registry
      configuration changes, so newly added Zot mirrors take effect immediately
      instead of waiting for an unrelated pod restart.

    Included changes (v0.1.108 -> v0.1.109)

    • 0e4b3b6c9552 fix(buildkit): roll Shipwright daemon on config changes
    Downloads
  • v0.1.108 264eb85916

    v0.1.108 Stable

    pipeline-bot released this 2026-07-24 11:42:29 +00:00 | 25 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.107 -> v0.1.108)

    • dfefc396d495 chore(dns): rebuild-hygiene after the static-key cutover
    Downloads
  • v0.1.107 81b2d2f680

    v0.1.107 Stable

    pipeline-bot released this 2026-07-24 11:11:59 +00:00 | 29 commits to main since this release

    Performance

    • Reduce unexplained inter-step Argo workflow pauses by shortening the
      controller's safety requeue from 10s to 2s, and raise its Kubernetes client
      limits from 20/30 to the documented 50 QPS / 75 burst because the controller
      was visibly client-throttled during scheduled workflow waves.

    Included changes (v0.1.106 -> v0.1.107)

    • a5efe23469e0 feat(dns): permanent static dns.admin GCP key via Flux-SOPS (Option B)
    • 3d51d8f7b6aa perf(workflows): reduce inter-step controller latency
    Downloads
  • v0.1.106 7d573dca75

    v0.1.106 Stable

    pipeline-bot released this 2026-07-24 10:46:59 +00:00 | 35 commits to main since this release

    Fixed

    • Route Codeberg base-image pulls from the rootless shared BuildKit daemon
      through the in-cluster Zot pull-through cache, matching the existing Docker
      Hub and GCR path and preventing public registry auth timeouts from wedging
      operator builds at image metadata resolution.

    Included changes (v0.1.105 -> v0.1.106)

    • 7a44fbe2abad fix(buildkit): mirror Codeberg through Zot
    Downloads
  • v0.1.105 b9df4ed6e1

    v0.1.105 Stable

    pipeline-bot released this 2026-07-24 10:11:17 +00:00 | 39 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.104 -> v0.1.105)

    • 17bafd552840 deploy(operators): advance OpenBao and Forgejo sources
    • d5c67108da64 chore(images): update v0.5.16 -> v0.5.17
    Downloads