• v0.1.47 0d0b4ef4e6

    v0.1.47 Stable

    pipeline-bot released this 2026-07-15 13:39:46 +00:00 | 308 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.47)

    • 7b42674f36ae deploy(kratos): controller image v0.5.9 -> v0.5.10 (r5 fixes: delete cred-leak, adopt-guard, held-mirror)
    • 10c41262dae1 deploy(forgejo-operator): resource-source ref v0.6.17 -> v0.6.18 (FUNCTIONAL — new CRD: oauthapp.name immutable + token appliedScopes)
    • 773c94f9302d deploy(forgejo-operator): resource-source ref v0.6.16 -> v0.6.17 (FUNCTIONAL — new CRD)
    • 95cdae53285a deploy(openbao-operator): resource-source ref v0.12.15 -> v0.12.16 (lockstep)
    • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
    • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
    • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
    • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
    • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
    • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
    • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
    • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
    • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    Downloads