• v1.4.3 e1f05ef63f

    v1.4.3
    All checks were successful
    Repository security / security-1 (push) Successful in 1m20s
    Repository security / security (push) Successful in 0s
    Library checks / tests (push) Successful in 1m54s
    Stable

    gitchegumi released this 2026-09-08 14:14:43 -05:00 | 259 commits to main since this release

    Deployment credential validation

    Adds a credential validation mode that exercises automatic credential issuance without deploying an application.

    Added

    • credential_mode: validate for the reusable deployment workflow.
    • Validation of Forgejo OIDC authentication, OpenBao login, temporary Kubernetes credentials, and required and forbidden permissions.
    • Progress logging for each validation stage, permission check, cleanup, and total elapsed time.

    Fixed

    • Removed the diagnostic startup dependency on PyYAML so inspection and validation work on a fresh runner.
    • Updated two existing scan mitigation fingerprints after code relocation, preserving their controls and expiry dates.

    Validation

    • All 97 unit tests pass, including clean-runner startup, authorization checks, and cleanup failure handling.

    Existing deployment modes remain available. Live credential issuance validation is the next operational acceptance step.

    Downloads