• v8.3.3 748040183c

    Onebox v8.3.3
    Release / build-and-release (push) Successful in 18m1s
    Stable

    jkunz released this 2026-09-05 00:19:25 +00:00 | 236 commits to main since this release

    2026-09-05 - 8.3.3

    Fixes

    • preserve service image identity through deployments and upgrades (services)
      • Derive and persist imageDigest from digest-pinned image references and validate explicit SHA256 digests before runtime side effects.
      • Pull and create containers with digest-bound runtime image references while preserving the stored image name.
      • Clear stale digests when mutable images, registries, or forced pulls change without a new digest, and restore the prior image tuple on failed replacements.
      • Keep Cloudly WorkloadInit approval secret-file mappings reserved after cutover metadata is retired.
    • normalize service runtime image references to repo digests (services)
      • Build Docker runtime image references as repository@digest by stripping mutable tags while preserving the stored service image name.
      • Normalize digest-pinned images with registries and ports to satisfy Docker RepoDigest pull and inspect lookups.
      • Add coverage for Docker client request paths using normalized digest references.
    • bump appstore dependency and pin cutover approval fixture (appstore)
      • Update @serve.zone/appstore from 2.5.0 to 2.7.0.
      • Use a v2.5.0 catalog fixture for Cloudly secrets v2 cutover approvals so pinned hashes remain deterministic.
    Downloads