sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests 7 Projects Releases 117 Packages Wiki Activity
117 releases 126 tags
  • v0.1.36 0d01f12fdc

    v0.1.36 Stable

    pipeline-bot released this 2026-07-13 09:40:31 +00:00 | 347 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.36)

    • f043539b84ab feat(pkg-cache): github release pull-through (follow 302, cache signed asset)
    • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    Downloads
  • v0.1.35 faaa554832

    v0.1.35 Stable

    pipeline-bot released this 2026-07-13 09:22:41 +00:00 | 351 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.35)

    • 215ca47702c2 feat(gate): vendor lint-no-runtime-fetch for release-path CI coverage
    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    Downloads
  • v0.1.34 c5c2a72773

    v0.1.34 Stable

    pipeline-bot released this 2026-07-13 07:56:29 +00:00 | 355 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.34)

    • 5e742fd3aebc fix(zelnet): sdk-upload pod on pipeline-tools (mc baked), drop dl.min.io curl
    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    Downloads
  • v0.1.33 4cac17f119

    v0.1.33 Stable

    pipeline-bot released this 2026-07-12 08:44:17 +00:00 | 359 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.33)

    • 7dbae2822895 chore(shipwright): retire the stale ibmi-builder :v8 producer (dual-build cleanup)
    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    Downloads
  • v0.1.32 ac999dcf1a

    v0.1.32 Stable

    pipeline-bot released this 2026-07-12 07:48:46 +00:00 | 363 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.32)

    • 773d44044c0d feat(node-snapshot-bake): run on hetzner-builder:v1 (baked hcloud + ssh, no runtime fetch)
    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    Downloads
  • v0.1.31 e039410f44

    v0.1.31 Stable

    pipeline-bot released this 2026-07-12 06:57:45 +00:00 | 367 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.31)

    • e7b8c72da468 feat(kernel): stager + cosign-key-extractor use baked pipeline-tools:v4 (no runtime fetch)
    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    • abf652c425cc feat(pipelines): register zdns, zerotea (server-package) + zelnet (desktop-package) CRs
    Downloads
  • v0.1.30 ec17cf044f

    v0.1.30 Stable

    pipeline-bot released this 2026-07-12 06:03:43 +00:00 | 371 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.30)

    • 025210992f11 feat(kernel-builder): repoint seanfarm consumers v8 -> v9
    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    • abf652c425cc feat(pipelines): register zdns, zerotea (server-package) + zelnet (desktop-package) CRs
    • dc512c6c6411 chore: bump pipelines-operator v0.1.13 -> v0.1.14 (server + desktop renderers)
    Downloads
  • v0.1.29 8d12c08606

    v0.1.29 Stable

    pipeline-bot released this 2026-07-12 05:51:17 +00:00 | 375 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.29)

    • 5ba547b2a85d feat(kernel-builder): bump toolchain base image v8 -> v9 (producer output)
    • 8974075a479c docs: laptop de-root + break-glass audit feasibility plan
    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    • abf652c425cc feat(pipelines): register zdns, zerotea (server-package) + zelnet (desktop-package) CRs
    • dc512c6c6411 chore: bump pipelines-operator v0.1.13 -> v0.1.14 (server + desktop renderers)
    • 4bc34068f73d feat(pipelines): register rpg-* ibmi-rpg PipelineProject CRs (re-land)
    Downloads
  • v0.1.28 98159d515a

    v0.1.28 Stable

    pipeline-bot released this 2026-07-09 14:30:16 +00:00 | 381 commits to main since this release

    Security

    • Kyverno cosign verification now Enforces (CRIT-2). verify-seanfarm-images flips
      validationFailureAction: Audit -> Enforce, so an unsigned registry.sean.farm/seanfarm/* image is
      now REJECTED at admission instead of merely audited; mutateDigest restored to true (pins the
      admitted Pod to the verified @sha256 digest). failurePolicy stays Ignore on purpose (a
      Kyverno-webhook outage must not wedge admission of every internal pod); Ignore -> Fail is a
      separate hardening step. The prior "missing cosign-public-key secret" rationale was stale — the
      Secret has existed since 2026-06-16 and all verify-seanfarm-images policyreports pass (14/14).

    Changed

    • argo-server memory 256Mi -> 512Mi (REL-7). The workflows UI/API server OOMKilled 4x at ~1145
      live workflows; its list-watch fan-out scales with live-workflow volume the way the controller's
      informer cache does (already bumped to 2Gi). Request also raised 64Mi -> 128Mi.

    Included changes (v0.11.0 -> v0.1.28)

    • 5b6b836ff890 fix(tranche1): argo-server mem 256->512Mi (REL-7) + kyverno cosign Enforce (CRIT-2)
    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    • abf652c425cc feat(pipelines): register zdns, zerotea (server-package) + zelnet (desktop-package) CRs
    • dc512c6c6411 chore: bump pipelines-operator v0.1.13 -> v0.1.14 (server + desktop renderers)
    • 4bc34068f73d feat(pipelines): register rpg-* ibmi-rpg PipelineProject CRs (re-land)
    • 64783958de7e Revert "Merge pull request 'land feat/pproj-rpg-ibmi (cf751fdf3c)' (#201) from feat/pproj-rpg-ibmi into trunk"
    • cf751fdf3c1f feat(pipelines): register rpg-{hello,demo,lemonade,munchers} as ibmi-rpg PipelineProject CRs
    Downloads
  • v0.1.27 4e3981a09c

    v0.1.27 Stable

    pipeline-bot released this 2026-07-09 11:41:08 +00:00 | 386 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.11.0 -> v0.1.27)

    • bc7863201f28 fix(pipelines): repoint app-of-apps root App at sean/pipelines (fold retire pipelines-argocd)
    • d127d7d64700 fix(openbao): registry-pull-secret store zot-dev -> zot-alice (stale tenant name)
    • a430a79d60a8 chore(flux): delete the retired pipeline-projects + operator-prereqs Kustomizations
    • 8393cfc30b55 feat(argo): re-enable log archival for all workflows (bob is gone)
    • cfb7b98565b6 chore(flux): prune:false guard before retiring pipeline-projects + operator-prereqs
    • 9b6383d6f3b3 fix(flux): drop pipeline-projects' dead dependsOn (flux→ArgoCD leftover)
    • b2da9227d5b0 feat(forgejo-operator): opt into the envtest release test gate
    • a23d1f66500b chore(forgejo-operator): bump Flux source tag v0.6.11 -> v0.6.12
    • 0f7e0ae63696 chore(pipelines-operator): remove the retired flux delivery (ArgoCD owns it)
    • 4699eb7c8e62 feat(pipelines-argocd): declare the Forgejo→ArgoCD webhook (durable)
    • 0035834ece67 feat(pipelines): swap flux child Apps → app-of-apps root (PR B)
    • 16e78b4698bd feat(pipelines-operator): deploy v0.1.22 + prune:false handoff prep (PR A)
    • 8c6197c8f7c8 fix(pipelines-operator): whitelist Namespace in the pipelines AppProject
    • cb4b498585ea feat(pipelines-operator): ArgoCD cutover (Phase 2)
    • d7ca127e02dc feat(pipelines-operator): ArgoCD delivery (Phase 1, observe-only)
    • 8c0cc751f853 refactor(pipeline): rename land->merge (make merge, pipeline-merge.sh)
    • 459551db660c Merge branch 'trunk' of https://code.sean.farm/sean/seanfarm into deploy/forgejo-operator-v0.6.11
    • c92419c65c31 deploy(forgejo-operator): roll v0.6.9 -> v0.6.11
    • 14d070d9ea54 deploy(forgejo-operator): bump source pin v0.6.9 -> v0.6.10 (ForgejoToken CRD + controller)
    • dc44765ed660 feat(concurrency): raise crossplane/kratos/minio limits + tekton/shipwright ctrls off BestEffort
    • 3f1e0d8d102c feat(concurrency): Argo controller CPU+workers, OpenBao+argo-events off BestEffort
    • bbfaea91ae4c fix(mayastor): NVME_KATO 10s->60s + 4th io-engine reactor core (bulk-write stalls, round 2)
    • af9ba0975284 fix(mayastor): io-engine 2->3 reactor cores + crdt 30->60 (bulk-write keep-alive stalls)
    • b3e0f6eb0408 feat(sysadmin): retire duplicate Shipwright build — DFS is the single producer
    • 6f9f2de2da17 fix(pkg-cache): survive heavy nix builds — aio threads + tolerant liveness + headroom
    • c17092191212 feat(pkg-cache): kernel-chain zfs-userspace+node-bootc builds opt into pkg-cache
    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    • abf652c425cc feat(pipelines): register zdns, zerotea (server-package) + zelnet (desktop-package) CRs
    • dc512c6c6411 chore: bump pipelines-operator v0.1.13 -> v0.1.14 (server + desktop renderers)
    • 4bc34068f73d feat(pipelines): register rpg-* ibmi-rpg PipelineProject CRs (re-land)
    • 64783958de7e Revert "Merge pull request 'land feat/pproj-rpg-ibmi (cf751fdf3c)' (#201) from feat/pproj-rpg-ibmi into trunk"
    • cf751fdf3c1f feat(pipelines): register rpg-{hello,demo,lemonade,munchers} as ibmi-rpg PipelineProject CRs
    • ebcf146d8a4a chore: bump pipelines-operator v0.1.12 -> v0.1.13 (ibmi-rpg renderer)
    Downloads