-
Onebox v8.4.3
StableRelease / build-and-release (push) Successful in 32m33sjkunz released this
2026-09-05 11:08:56 +00:00 | 0 commits to main since this release2026-09-05 - 8.4.3
Fixes
- republish external gateway routes when services resume running (services)
- Include route enabledness in external gateway route change detection so transitions back to running trigger route syncs.
- Avoid gateway metadata writes when services remain disabled across stopped or failed states.
Downloads
- republish external gateway routes when services resume running (services)
-
Onebox v8.4.2
StableRelease / build-and-release (push) Successful in 30m11s2026-09-05 09:41:01 +00:00 | 2 commits to main since this release2026-09-05 - 8.4.2
Fixes
- migrate legacy platform secrets during startup (platform-secrets)
- Add a data 0.14.0 startup migration that atomically moves legacy platform credential copies from public service env vars into encrypted service secret bundles.
- Remove legacy secret reconciliation from platform service manager initialization.
- Preserve workload-init approval custody and runtime identity while handling conflicts and concurrent updates safely.
- Add regression coverage for idempotence, rollback, startup ledger behavior, and approval recovery.
Downloads
- migrate legacy platform secrets during startup (platform-secrets)
-
Onebox v8.4.1
StableRelease / build-and-release (push) Successful in 29m27s2026-09-05 08:15:47 +00:00 | 4 commits to main since this release2026-09-05 - 8.4.1
Maintenance
- Reissue the WorkloadInit approval runtime as a patch release after the 8.4.0 binary publication was blocked by a CI test timeout. Runtime behavior and test limits are unchanged.
Downloads
-
Onebox v8.3.3
StableRelease / build-and-release (push) Successful in 18m1s2026-09-05 00:19:25 +00:00 | 9 commits to main since this release2026-09-05 - 8.3.3
Fixes
- preserve service image identity through deployments and upgrades (services)
- Derive and persist imageDigest from digest-pinned image references and validate explicit SHA256 digests before runtime side effects.
- Pull and create containers with digest-bound runtime image references while preserving the stored image name.
- Clear stale digests when mutable images, registries, or forced pulls change without a new digest, and restore the prior image tuple on failed replacements.
- Keep Cloudly WorkloadInit approval secret-file mappings reserved after cutover metadata is retired.
- normalize service runtime image references to repo digests (services)
- Build Docker runtime image references as repository@digest by stripping mutable tags while preserving the stored service image name.
- Normalize digest-pinned images with registries and ports to satisfy Docker RepoDigest pull and inspect lookups.
- Add coverage for Docker client request paths using normalized digest references.
- bump appstore dependency and pin cutover approval fixture (appstore)
- Update @serve.zone/appstore from 2.5.0 to 2.7.0.
- Use a v2.5.0 catalog fixture for Cloudly secrets v2 cutover approvals so pinned hashes remain deterministic.
Downloads
- preserve service image identity through deployments and upgrades (services)
-
Onebox v8.3.2
StableRelease / build-and-release (push) Successful in 15m23s2026-09-04 22:41:37 +00:00 | 13 commits to main since this release2026-09-04 - 8.3.2
Fixes
- allow route restoration for services without cutover metadata (services)
- Only enforce held-service route suppression when cloudlySecretsV2Cutover metadata exists.
- Add service start lifecycle coverage for ordinary, promoted, held, and route-suppressed starts.
- Verify cutover retirement leaves services startable with routes restored.
Downloads
- allow route restoration for services without cutover metadata (services)
-
Onebox v8.3.1
StableRelease / build-and-release (push) Successful in 15m5s2026-09-04 21:50:52 +00:00 | 15 commits to main since this release2026-09-04 - 8.3.1
Fixes
- upgrade Corestore runtime pin to 6.3.1 (corestore)
- Require the 6.3.1 Corestore digest for fresh deployments and diagnostic read access grants
- Allow completed Corestore platform replay from 6.3.0 to 6.3.1 while requiring current consumers to be stopped
- Accept Cloudly secrets v2 cleanup tuples that include the new Corestore image
Downloads
- upgrade Corestore runtime pin to 6.3.1 (corestore)
-
Onebox v8.3.0
StableRelease / build-and-release (push) Successful in 14m49s2026-09-04 21:31:40 +00:00 | 17 commits to main since this release2026-09-04 - 8.3.0
Features
- archive completed Cloudly Secrets v2 cutovers on startup (migrations)
- Add an irreversible 0.12.0 startup migration that writes CloudlySecretsV2CutoverArchive records before removing completed cutover state from service documents.
- Validate every service before writing and fail closed for in-flight cutovers, pending intents, unreadable operations, or archive conflicts.
- Register irreversible migration steps without down handlers so rewinds crossing them are refused without changing data or the ledger.
- Update CLI help, documentation, and tests for cutover retirement and rewind behavior.
Fixes
- harden cutover retirement validation before service updates (cloudly-secrets-v2-cutover-retirement)
- Block retirement when a promoted Cloudly Secrets v2 cutover still carries a pendingIntent property, including null values.
- Reject replay against incomplete or conflicting cutover archive provenance before modifying services.
- Update cutover tests for staged production settlement access.
Downloads
- archive completed Cloudly Secrets v2 cutovers on startup (migrations)
-
Onebox v8.2.6
StableRelease / build-and-release (push) Successful in 14m40s2026-09-04 16:25:34 +00:00 | 20 commits to main since this release2026-09-04 - 8.2.6
Fixes
- refresh verification runtime environment before restart (cloudly-secrets-v2-cutover)
- Allow verify-once service mutations during cutover verification.
- Recompose the verification runtime from current environment variables while preserving the target image tuple.
- Permit unchanged target identity replay during verify-once rollback without allowing old-image rollback.
Downloads
- refresh verification runtime environment before restart (cloudly-secrets-v2-cutover)
-
Onebox v8.2.5
StableRelease / build-and-release (push) Successful in 14m28s2026-09-04 12:56:26 +00:00 | 22 commits to main since this release2026-09-04 - 8.2.5
Fixes
- allow cutover environment repair after failed verify (database)
- Allows stopped services with a pending verify-cutover intent to re-arm templated app-store environment declarations.
- Continues to reject running services and non-verify cutover intents during repair.
Downloads
- allow cutover environment repair after failed verify (database)
-
Onebox v8.2.4
StableRelease / build-and-release (push) Successful in 14m23s2026-09-04 12:26:28 +00:00 | 24 commits to main since this release2026-09-04 - 8.2.4
Fixes
- re-arm platform templates during service upgrades (service-template-env)
- Prefer platform-owned App Store template declarations over stored public environment literals while preserving operator overrides for non-templated values.
- Keep service-intrinsic templates frozen to preserve install-time validation semantics.
- Add an offline migration repair command to re-arm previously frozen templated environment values for stopped cutover services.
- Behaviour change: an app template whose public declaration references an absent optional launcher-environment secret now fails its upgrade during validation instead of deploying a stale literal.
Downloads
- re-arm platform templates during service upgrades (service-template-env)