sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests 7 Projects Releases 118 Packages Wiki Activity
118 releases 127 tags
  • v0.1.39 1af191d8e9

    v0.1.39 Stable

    pipeline-bot released this 2026-07-14 15:45:04 +00:00 | 340 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.39)

    • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
    • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
    • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
    • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
    • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    Downloads