sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests 7 Projects Releases 117 Packages Wiki Activity
117 releases 126 tags
  • v0.1.56 b429fd8155

    v0.1.56 Stable

    pipeline-bot released this 2026-07-16 07:17:36 +00:00 | 264 commits to main since this release

    Added

    • Athens poison-sweep sidecar (shared + release instances): purges cache entries
      the 2026-07-15/16 incidents proved persist forever — zero-byte files and
      truncated-but-nonempty zips missing the EOCD record (the klauspost/compress shape
      that a size-0 sweep missed). Same-pod sidecar (RWO PVC), same digest-pinned image,
      10-minute grace for in-flight writes; Athens re-fetches purged entries on demand.

    Included changes (v0.1.55 -> v0.1.56)

    • 4ea259a20cea feat(athens): poison-sweep sidecar — purge zero-byte + truncated-zip cache entries
    Downloads
  • v0.1.55 f0658d2f3e

    v0.1.55 Stable

    pipeline-bot released this 2026-07-16 06:24:30 +00:00 | 268 commits to main since this release

    Changed

    • minio-resource-operator cut over to the pipeline: image pin v0.3.4 -> v0.3.5 (first
      pipeline release — cosign-signed, multi-arch, lib v0.4.10) and the legacy Shipwright
      Build retired (the buildkit pipeline is the producer now).

    Included changes (v0.1.54 -> v0.1.55)

    • 4a3efa047348 feat(minio-operator): pipeline cutover — pin v0.3.5 + retire the Shipwright build
    • e08081011b52 feat(olly): collapse Alloy fan-out to olly-platform + whitelist ClusterSecretStore
    Downloads
  • v0.1.54 63538f8de5

    v0.1.54 Stable

    pipeline-bot released this 2026-07-15 18:45:57 +00:00 | 274 commits to main since this release

    Changed

    • CRD-source/image lockstep for the lib-v0.4.10 wave: forgejo-operator v0.6.20,
      openbao-operator v0.12.19, kratos-identity-operator v0.5.12.

    Included changes (v0.1.53 -> v0.1.54)

    • bacc1deb566c fix(operators): lockstep pins for the lib-v0.4.10 wave (forgejo v0.6.20, openbao v0.12.19, kratos v0.5.12)
    Downloads
  • v0.1.53 92c2e05acb

    v0.1.53 Stable

    pipeline-bot released this 2026-07-15 17:17:20 +00:00 | 278 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.52 -> v0.1.53)

    • 6111138ac1a0 feat(olly): observability app-of-apps seed (argocd-platform + sean/olly)
    Downloads
  • v0.1.52 7ef23054ef

    v0.1.52 Stable

    pipeline-bot released this 2026-07-15 16:40:12 +00:00 | 282 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.51 -> v0.1.52)

    • ef6bee2cd1c6 feat(argocd-base): use ${ARGOCD_HOST} for server url + OIDC redirectURI
    Downloads
  • v0.1.51 3445fab72e

    v0.1.51 Stable

    pipeline-bot released this 2026-07-15 16:32:46 +00:00 | 286 commits to main since this release

    Changed

    • CRD-source/image lockstep for the lib-v0.4.9 operator wave: forgejo-operator source
      tag v0.6.19, openbao-operator source tag v0.12.18, kratos-identity-operator image
      v0.5.11 (paired with the platform-seanfarm controller-image bumps).

    Included changes (v0.1.50 -> v0.1.51)

    • 2978ee07d096 fix(operators): lockstep pins for the lib-v0.4.9 wave (forgejo v0.6.19, openbao v0.12.18, kratos v0.5.11)
    Downloads
  • v0.1.50 13e40f79fc

    v0.1.50 Stable

    pipeline-bot released this 2026-07-15 15:00:17 +00:00 | 290 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.49 -> v0.1.50)

    • 32865a31cd95 chore: remove Capacitor Flux web UI
    Downloads
  • v0.1.49 9fd87a9ee3

    v0.1.49 Stable

    pipeline-bot released this 2026-07-15 14:29:41 +00:00 | 294 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.48 -> v0.1.49)

    • 83266dd7c5d0 deploy(openbao-operator): resource-source ref v0.12.16 -> v0.12.17 (cosmetic lockstep; no CRD change)
    Downloads
  • v0.1.48 18faef3a69

    v0.1.48 Stable

    pipeline-bot released this 2026-07-15 14:00:00 +00:00 | 298 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.48)

    • abc6e4dcfb6b chore: remove Zulip team chat entirely
    • 2e90502cc862 chore(mayastor): drop io-engine to 2 reactor cores to reclaim ~10 CPU
    • 7b42674f36ae deploy(kratos): controller image v0.5.9 -> v0.5.10 (r5 fixes: delete cred-leak, adopt-guard, held-mirror)
    • 10c41262dae1 deploy(forgejo-operator): resource-source ref v0.6.17 -> v0.6.18 (FUNCTIONAL — new CRD: oauthapp.name immutable + token appliedScopes)
    • 773c94f9302d deploy(forgejo-operator): resource-source ref v0.6.16 -> v0.6.17 (FUNCTIONAL — new CRD)
    • 95cdae53285a deploy(openbao-operator): resource-source ref v0.12.15 -> v0.12.16 (lockstep)
    • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
    • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
    • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
    • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
    • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
    • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
    • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
    • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
    • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    Downloads
  • v0.1.47 0d0b4ef4e6

    v0.1.47 Stable

    pipeline-bot released this 2026-07-15 13:39:46 +00:00 | 303 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.47)

    • 7b42674f36ae deploy(kratos): controller image v0.5.9 -> v0.5.10 (r5 fixes: delete cred-leak, adopt-guard, held-mirror)
    • 10c41262dae1 deploy(forgejo-operator): resource-source ref v0.6.17 -> v0.6.18 (FUNCTIONAL — new CRD: oauthapp.name immutable + token appliedScopes)
    • 773c94f9302d deploy(forgejo-operator): resource-source ref v0.6.16 -> v0.6.17 (FUNCTIONAL — new CRD)
    • 95cdae53285a deploy(openbao-operator): resource-source ref v0.12.15 -> v0.12.16 (lockstep)
    • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
    • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
    • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
    • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
    • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
    • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
    • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
    • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
    • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    Downloads