• v2.25.0 3807df5937

    v2.25.0 Stable

    op1st-gitops released this 2026-05-26 06:11:44 +00:00 | 625 commits to main since this release

    No known key found for this signature in database
    GPG key ID: 9AFBDCD702A142D8

    Changelog

    • 3807df5937 chore(release): 2.25.0
    • 1137f7eee7 chore: 🗂️ beads close forgejo-mcp-00o, 3h2, aps + session wrap
    • 8c1df9dd8e chore: 🗂️ merge beads jsonl after #161
    • bd3ccae5ff Merge pull request 'fix: 🐛 pipeline task fixes validated by run11 success' (#163) from forgejo-mcp-aps into main
    • 0901bf0b92 fix: 🐛 pipeline task fixes validated by run11 success
    • 5e232175f2 Merge pull request 'fix: 🔒️ restore fail-closed cosign signing, remove bootstrap SKIP_SIGN' (#158) from forgejo-mcp-00o into main
    • 187c51c1f2 Merge pull request 'fix: 🐛 sha256sum filename mismatch + privileged SCC for buildah' (#162) from forgejo-mcp-aps into main
    • 97ee636e49 fix: 🐛 filename mismatch in sha256sum + privileged SCC for buildah
    • 41cdafc0bf fix: ✏️ buildah needs runAsUser 0 for chroot isolation with hi/go base
    • b45e2e46e8 Merge pull request 'fix: 🐛 rootless buildah in build-image task for OpenShift SCC' (#161) from forgejo-mcp-aps into main
    • 6a55f3f02f fix: 🐛 rootless buildah in build-image task for OpenShift SCC
    • e6a6185955 feat: render dep graph as subway map
    • 118d19feaf Merge pull request 'fix: 🐛 move release-tools PipelineRuns to .tekton/ root' (#160) from forgejo-mcp-8sz into main
    • 7706d17411 fix: ✏️ correct CEL macro files.any.exists → files.exists
    • 4649f98c1b fix: 🐛 move release-tools PipelineRuns to .tekton/ root
    • a7883a62ed chore: 🗂️ beads jsonl claim forgejo-mcp-3h2 + forgejo-mcp-00o
    • 68a7276998 Merge pull request 'fix: 🔒️ SHA256-verify goreleaser+syft, drop piped install.sh' (#159) from forgejo-mcp-3h2 into main
    • da3cfb1262 fix: 🔒️ SHA256-verify goreleaser+syft, drop piped install.sh
    • 8a282ca1e4 fix: 🔒️ restore fail-closed cosign signing, remove bootstrap SKIP_SIGN
    • bbe36d6b4e chore: 🗂️ beads jsonl close forgejo-mcp-p1p
    • bd92d217e7 chore: 📋 archive release-tools-image openspec change + sync spec
    • 0f1e6492ab chore: 🔧 set vendor label to 'Operate First, by #B4mad'
    • 3dec0b9478 style: 💄 calm CRT text styling for legibility
    • ef5cf057f3 chore: 🗂️ beads jsonl post-PR#157 merge + close forgejo-mcp-1b4
    • e02cf5668f feat: release-tools image source tree + build/publish Tekton pipelines (#157)
    • 840f996de5 style: 💄 drop oversized #BEADS hero from dashboard
    • 8ffcd31f83 fix: 🐛 cosign sha256sum path — download to /tmp/cosign-linux-amd64 before verify
    • a620b174c5 feat: add CRT phosphor beads dashboard
    • 1ecb9527c1 chore: 🗂️ beads jsonl post-tasks rewrite
    • 0dcb2e14e9 refactor: ♻️ rewrite .tekton/tasks/ to use release-tools image
    • c1316d8a7e feat: add govulncheck + openspec to release-tools image
    • ef300baed3 chore: 🗂️ beads jsonl post-PR#157 review fixes
    • d59b9105e9 fix: 🔒️ address automated code review findings from PR #157
    • 2f5dc5123f fix(ci): 🔧 registry → codeberg.org/operate-first + cosign task bugs + bootstrap
    • 5df98baca9 feat(ci): 🚀 add release-tools image build + publish Tekton pipelines (iteration 2)
    • 240a544ed3 feat(image): 🐳 add release-tools OCI image source tree (iteration 1)
    • 9c84d7f227 chore: 🗂️ beads jsonl post-#155 merge
    • 550db7f300 Merge pull request 'docs(openspec): propose release-tools-image change with adversarial review' (#155) from feat/release-tools-image into main
    • ddbb5a091e docs(openspec): 📋 apply adversarial review patches to release-tools-image change
    • c81412792e docs(openspec): 📋 propose release-tools-image change for op1st Tekton pipeline
    • 082c71e7c8 chore: 🗂️ beads jsonl: capture release pipeline findings on P0 image bead
    Downloads