serve.zone/onebox
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 82 Wiki Activity

82 Releases 305 Tags

RSS Feed
  • v33.11.0 08908bb8ee
    Compare

    Onebox v33.11.0
    Release / build-and-release (push) Failing after 13m18s
    Details
    Stable

    philkunz released this 2026-10-07 01:46:37 +00:00 | 37 commits to main since this release

    2026-10-07 - 33.11.0

    Features

    • Bundle the Cloudly App Store template 1.24.0 for Cloudly 33.16.0 through @serve.zone/appstore 32.24.0, moved from 32.23.0 in package.json, pnpm-lock.yaml and the binary's deno.lock. Onebox reads the App Store from the catalog this package bundles, so onebox appstore upgrade cloudly --version 1.24.0 needs this release. The template pins the Cloudly 33.16.0 image index code.foss.global/serve.zone/cloudly@sha256:d326dd0b5c195cb54b6688e6b82234ae3dfe517a8d3d57f532d9421a523c5763 and keeps minOneboxVersion 33.8.0, so Onebox 33.7.0 and earlier still refuse the upgrade with App requires Onebox >= 33.8.0; current version is <version>. 1.24.0 differs from 1.23.0 only in the image and changelog. Cloudly 33.16.0 keeps the data version 0.25.0, so an upgrade from 1.23.0, 1.22.0, 1.21.0 or 1.20.0 runs no data step; an upgrade from 1.19.0 or earlier still runs the forward-only step runtime-log-attempts at Cloudly's first start, which every Cloudly before 33.15.0 refuses (DOWNGRADE_NOT_SUPPORTED), so stop Cloudly and take a verified backup (onebox backup create cloudly) before upgrading, and a rollback is onebox backup restore <backup-id> of that backup. Cloudly 33.16.0 lets an administrator capture a legacy service's runtime attestation from a host observation (hostObservation): the capture needed a Coreflow session, which legacy hosts never have, and was always refused as LEGACY_ATTESTATION_RUNTIME_UNAVAILABLE. Cloudly now judges the observation, read at most 15 minutes before the capture, against the one root every replica runs, which its legacy tag need not still name, and its registry prune keeps an attested root until an import consumes it or the legacy service is retired; Cloudly 33.15.0 to 33.15.3 neither accept such an attestation for an import nor protect its root. Onebox enforces only minOneboxVersion; the other flags and the template changelog are the operator's. The App Store upgrade test now prepares the 1.24.0 upgrade from installs of 1.2.1 through 1.23.0 on Onebox 33.8.0, checks that 1.24.0 differs from 1.23.0 only in its image and changelog, and checks that Onebox 33.7.0 refuses it from 1.19.0 with that exact message. App Store 32.24.0 keeps @serve.zone/interfaces 32.42.0, so no other serve.zone package moves. deno.lock was re-resolved from https://registry.npmjs.org/ after a build and changes only the App Store entry, pinned by SHA-512. In pnpm-lock.yaml only the App Store entry changes, pinned by SHA-512.

    Maintenance

    • Release tooling: @git.zone/tstest 7.1.0 → 7.2.0; the lockfile drops the older duplicate copies of @git.zone/tsbundle 3.1.3, @push.rocks/smartspawn 3.0.4, @push.rocks/qenv 8.1.1, @push.rocks/smartconfig 6.2.5 and @push.rocks/smartshell 4.2.0 (their newer versions stay; build tooling only, deno.lock unchanged). @git.zone/tsdeno stays at 1.x (2.0.0 is its own migration). pnpm stays at 12.8.1 until 12.8.2 is seven days old (2026-10-07 01:15 UTC); @types/node stays at 26.6.3 until 26.6.4 is seven days old (2026-10-08 22:39 UTC).
    Downloads