Homelab/workflows
Homelab/workflows
Watch
5
0
Fork
You've already forked workflows
 0
Code Issues 7 Pull requests Projects Releases 95 Packages Wiki Activity Actions
95 releases 129 tags
  • v1.3.4 f453997031

    v1.3.4
    All checks were successful
    Repository security / security-1 (push) Successful in 1m20s
    Details
    Repository security / security (push) Successful in 0s
    Details
    Library checks / tests (push) Successful in 1m51s
    Details
    Stable

    gitchegumi released this 2026-09-06 10:55:14 -05:00 | 275 commits to main since this release

    v1.3.4

    Fixes release-asset downloads that blocked deployment of signed bundles from private Forgejo repositories.

    Fixes

    • Download assets through Forgejo’s authenticated UUID attachment route instead of browser-facing release URLs.
    • Report the affected asset name and HTTP status when a download fails.

    Security and compatibility

    • Reject external assets, malformed attachment UUIDs, and redirects.
    • Preserve signature verification, artifact checksums, provenance validation, mitigation expiry, and deployment rescanning.
    • Existing signed bundle releases remain compatible; no rebuild is required.

    Validation

    All 68 unit tests, 16 scaffold cases, and hosted CI checks pass. New regression tests cover authenticated downloads, redirect rejection, invalid metadata, and HTTP failures.

    Downloads