serve.zone/onebox
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 25 Wiki Activity

25 Releases 235 Tags

RSS Feed
  • v7.1.0 adbb0b01a3
    Compare

    Onebox v7.1.0
    Release / build-and-release (push) Successful in 12m5s
    Details

    jkunz released this 2026-08-04 21:03:58 +00:00 | 144 commits to main since this release

    2026-08-04 - 7.1.0

    Features

    • add a durable Cloudly Secrets v2 App Store cutover coordinator (platform)
      • Persist immutable source/target identities, phase and action fences, pending intents, backup and runtime evidence, operator approval, authorization, and maintenance receipts on the owned service.
      • Hold every non-promoted operation at zero before startup reconciliation, restore the selected database through an operation-owned Corestore scratch resource, compare canonical source/restored data, and require explicit gates through restart-without-authorization before promotion.
      • Adopt deterministic completed maintenance attempts after lost responses, persist terminal ownership before output parsing, require explicit zero-blocker completion evidence, and remove them only after proving cleanup.
    • add bounded read-only Corestore migration status inspection (migration)
      • Consume SmartDB's offline management sidecar without initializing or mutating storage and emit only redacted hashes, counts, phases, and timestamps.

    Fixes

    • serialize conditional service-secret updates and fail closed on stale cutover writes (security)
      • Use selector-bound atomic writes for service and encrypted secret state while sharing one per-service mutation lock with cutover creation, transitions, and deletion.
      • Remove operation-owned plaintext keyring and authorization staging on success, failure, startup, and shutdown paths; reconcile persisted scratch ownership before proceeding.
    • fence Cloudly cutover Docker lifecycle and recovery paths (security)
      • Resolve persisted service/platform ownership for generic runtime starts, restarts, scaling, and removal, including an exact legacy MongoDB migration fence.
      • Force-remove failed maintenance candidates, restore zero replicas after verification failures, and require restart verification again after startup recovery.
    • make the Onebox release target explicitly Git-only (release)
      • Keep binary publication owned by the existing tag-triggered Gitea workflow without adding npm or Docker release targets.
    Downloads