-
Onebox v8.3.3
StableRelease / build-and-release (push) Successful in 18m1sreleased this
2026-09-05 00:19:25 +00:00 | 236 commits to main since this release2026-09-05 - 8.3.3
Fixes
- preserve service image identity through deployments and upgrades (services)
- Derive and persist imageDigest from digest-pinned image references and validate explicit SHA256 digests before runtime side effects.
- Pull and create containers with digest-bound runtime image references while preserving the stored image name.
- Clear stale digests when mutable images, registries, or forced pulls change without a new digest, and restore the prior image tuple on failed replacements.
- Keep Cloudly WorkloadInit approval secret-file mappings reserved after cutover metadata is retired.
- normalize service runtime image references to repo digests (services)
- Build Docker runtime image references as repository@digest by stripping mutable tags while preserving the stored service image name.
- Normalize digest-pinned images with registries and ports to satisfy Docker RepoDigest pull and inspect lookups.
- Add coverage for Docker client request paths using normalized digest references.
- bump appstore dependency and pin cutover approval fixture (appstore)
- Update @serve.zone/appstore from 2.5.0 to 2.7.0.
- Use a v2.5.0 catalog fixture for Cloudly secrets v2 cutover approvals so pinned hashes remain deterministic.
Downloads
- preserve service image identity through deployments and upgrades (services)