117 releases 126 tags

RSS feed

• v0.1.46 967f217861

  Compare

  v0.1.46 Stable

  pipeline-bot released this 2026-07-15 12:57:36 +00:00 | 307 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.46)

  • 10c41262dae1 deploy(forgejo-operator): resource-source ref v0.6.17 -> v0.6.18 (FUNCTIONAL — new CRD: oauthapp.name immutable + token appliedScopes)
  • 773c94f9302d deploy(forgejo-operator): resource-source ref v0.6.16 -> v0.6.17 (FUNCTIONAL — new CRD)
  • 95cdae53285a deploy(openbao-operator): resource-source ref v0.12.15 -> v0.12.16 (lockstep)
  • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
  • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
  • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.45 bfcd0359e9

  Compare

  v0.1.45 Stable

  pipeline-bot released this 2026-07-15 02:05:32 +00:00 | 311 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.45)

  • 773c94f9302d deploy(forgejo-operator): resource-source ref v0.6.16 -> v0.6.17 (FUNCTIONAL — new CRD)
  • 95cdae53285a deploy(openbao-operator): resource-source ref v0.12.15 -> v0.12.16 (lockstep)
  • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
  • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
  • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.44 845e149c6a

  Compare

  v0.1.44 Stable

  pipeline-bot released this 2026-07-14 22:16:34 +00:00 | 315 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.44)

  • 95cdae53285a deploy(openbao-operator): resource-source ref v0.12.15 -> v0.12.16 (lockstep)
  • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
  • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
  • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.43 f657a8fff6

  Compare

  v0.1.43 Stable

  pipeline-bot released this 2026-07-14 21:21:28 +00:00 | 319 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.43)

  • 631cd9f6bc71 deploy(forgejo-operator): resource-source ref v0.6.15 -> v0.6.16 (lockstep)
  • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
  • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.42 e3d8ff549b

  Compare

  v0.1.42 Stable

  pipeline-bot released this 2026-07-14 18:25:33 +00:00 | 323 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.42)

  • 069bea46ab36 deploy(openbao): bump CRD source tag v0.12.14 -> v0.12.15 (lockstep with image)
  • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
  • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.41 b1e6fc79c1

  Compare

  v0.1.41 Stable

  pipeline-bot released this 2026-07-14 17:36:32 +00:00 | 327 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.41)

  • 2f8577c85593 deploy(forgejo): bump CRD source tag v0.6.12 -> v0.6.15 (lockstep with image)
  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
  • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
  • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.40 b541b8ebbc

  Compare

  v0.1.40 Stable

  pipeline-bot released this 2026-07-14 16:26:45 +00:00 | 331 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.40)

  • 34ace8ab325d deploy(openbao): bump openbao-operator source tag v0.12.6 -> v0.12.14
  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
  • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
  • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
  • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.39 1af191d8e9

  Compare

  v0.1.39 Stable

  pipeline-bot released this 2026-07-14 15:45:04 +00:00 | 335 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.39)

  • 3a1ce914966e deploy(kratos): bump kratos-identity-operator v0.5.3 -> v0.5.9
  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
  • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
  • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
  • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
  • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.38 84dec2fbe4

  Compare

  v0.1.38 Stable

  pipeline-bot released this 2026-07-14 11:31:08 +00:00 | 339 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.38)

  • 541e31ff1bd0 feat(athens): dedicated athens-release for the pipelines release path
  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
  • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
  • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
  • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
  • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
  • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.1.37 829f7af5e5

  Compare

  v0.1.37 Stable

  pipeline-bot released this 2026-07-14 08:03:40 +00:00 | 343 commits to main since this release

  Changed

  • Incremental release.

  Included changes (v0.11.0 -> v0.1.37)

  • 5a74b550b33e chore(athens): pin off :canary to v0.18.0 release
  • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
  • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
  • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
  • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
  • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
  • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
  • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
  • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
  • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
  • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
  • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
  • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
  • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
  • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
  • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
  • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
  • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
  • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
  • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
  • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
  • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
  • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
  • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
  • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
  • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
  • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
  • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
  • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
  • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
  • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
  • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
  • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
  • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
  • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
  • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
  • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
  • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
  • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
  • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
  • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
  • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
  • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
  • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
  • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
  • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
  • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
  • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
  • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
  • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads