• Onebox v33.12.0
    Release / build-and-release (push) Failing after 25m9s
    Stable

    philkunz released this 2026-10-07 11:10:07 +00:00 | 34 commits to main since this release

    2026-10-07 - 33.12.0

    Features

    • Bundle the Cloudly App Store template 1.25.0 for Cloudly 33.17.0 through @serve.zone/appstore 32.25.0, moved from 32.24.0 in package.json, pnpm-lock.yaml and the binary's deno.lock. Onebox reads the App Store from the catalog this package bundles, so onebox appstore upgrade cloudly --version 1.25.0 needs this release. The template pins the Cloudly 33.17.0 image index code.foss.global/serve.zone/cloudly@sha256:177269c8044604f70c0a5c045479b36222876685a2b8bde70ee76e43e4568ab7 and keeps minOneboxVersion 33.8.0, so Onebox 33.7.0 and earlier still refuse the upgrade with App requires Onebox >= 33.8.0; current version is <version>. 1.25.0 differs from 1.24.0 only in the image and changelog. Cloudly 33.17.0 moves the data version from 0.25.0 to 0.28.0 through the forward-only steps cluster-node-hostname-intent, deployment-operation-route-evidence and service-secret-target-predecessor, so every upgrade, from 1.24.0 too, runs a data step at Cloudly's first start, which every Cloudly before 33.17.0 refuses (DOWNGRADE_NOT_SUPPORTED); an upgrade from 1.19.0 or earlier first runs runtime-log-attempts. Stop Cloudly and take a verified backup (onebox backup create cloudly) before upgrading; a rollback is onebox backup restore <backup-id> of that backup. Cloudly 33.17.0 lets a legacy import reserve: Cloudly 33.16.0 refused every tsdeploy import-legacy reserve ROUTE_UNAVAILABLE, and an import now takes over its legacy service's route claims while the cluster ingress keeps serving them. Cloudly also owns a node's hostname (setClusterNodeHostname, resetClusterNodeHostname, cloudly-worker-<name> by default) and routes a Pallet service by node id, so a rename moves no traffic; a routeless deployment records its empty route evidence when it succeeds; a cluster's designated ingress service cannot be deleted while designated; and a deleted service's secret target state goes with its row. Onebox enforces only minOneboxVersion; the other flags and the template changelog are the operator's. The App Store upgrade test now prepares the 1.25.0 upgrade from installs of 1.2.1 through 1.24.0 on Onebox 33.8.0, checks that 1.25.0 differs from 1.24.0 only in its image and changelog, and checks that Onebox 33.7.0 refuses it from 1.19.0 with that exact message. App Store 32.25.0 keeps @serve.zone/interfaces 32.42.0, so no other serve.zone package moves. deno.lock was re-resolved from https://registry.npmjs.org/ after a build and changes only the App Store entry, pinned by SHA-512. In pnpm-lock.yaml only the App Store entry changes, pinned by SHA-512.

    Maintenance

    • Release tooling: pnpm 12.8.1 → 12.8.2. @types/node stays at 26.6.3 until 26.6.4 is seven days old (2026-10-08 22:39 UTC); the @git.zone tools are current and tsdeno stays on its 1.x line.
    Downloads