-
Onebox v8.7.3
StableRelease / build-and-release (push) Successful in 12m41sjkunz released this
2026-09-16 05:51:58 +00:00 | 50 commits to main since this release2026-09-16 - 8.7.3
Fixes
- Make the release binary build independent of Deno's download host and fail loudly on a degraded compile (ci)
deno compile --targetfetches a per-targetdenortruntime intoDENO_DIR, and the build used a freshmktempdirectory, so every release re-downloaded both runtimes fromdl.deno.landin the middle of the compile. Seed them beforehand from the GitHub release - the host the pinned Deno step already proves reachable - verify them against the published.sha256sumassets, and point the build at that preparedDENO_DIR.- Add a preflight step that reports
df -h .,free -mandnprocand fails early with a clear message below 6 GB free, instead of failing somewhere insidedeno compile. - Timestamp the build output;
tsdenoalready logscompiling target "<name>", so a stalled or failing target is now identifiable by name and elapsed time. - Refuse a release binary below a 500 MB floor.
deno compileexits 0 and reports success even when it cannot fetch the npm packages it embeds, producing a ~145 MB binary that fails at runtime withCould not find constraint ... in the list of packages. - Warm the Deno dependency cache before the build and verify it against the graph
deno inforesolves.deno installanddeno cacheboth exit 0 when a download fails, so the cache contents are checked explicitly rather than the exit code. - Verify the built binaries and retry the build once. v8.7.2 raced
deno compile's parallel npm downloads against snapshot creation on a cold cache: the x64 compile finished in 9 s instead of 48 s, its embedded tree had nocloudflare/5.2.0while arm64's did, tsdeno reported success, and the binary died at startup. The build now asserts both targets embedcloudflare/5.2.0and that their embedded package sets are identical, and rebuilds once from the now-warm cache if they are not.
Downloads
- Make the release binary build independent of Deno's download host and fail loudly on a degraded compile (ci)
-
Onebox v8.6.0
StableRelease / build-and-release (push) Successful in 20m21s2026-09-08 06:30:47 +00:00 | 63 commits to main since this release2026-09-08 - 8.6.0
Features
- add stdin-based service secret updates (service-secrets)
- Add service set-secret --stdin for bounded single-line secret ingress through the CLI and control socket.
- Persist the selected key in encrypted service secrets, remove any public environment copy, and preserve other secrets during service replacement.
- Validate secret keys and values while keeping the reserved WorkloadInit approval key on its dedicated flow.
- support Cloudly 1.1.10 upgrades (appstore)
- Bump @serve.zone/appstore from 2.8.0 to 2.9.0
- Update Cloudly upgrade coverage to preserve owner-managed secrets, including the admin account credential
Fixes
- update pnpm package manager to 12.2.1 (package)
- Updates packageManager metadata from pnpm 12.1.0 to 12.2.1.
Downloads
- add stdin-based service secret updates (service-secrets)
-
Onebox v8.5.0
StableRelease / build-and-release (push) Successful in 23m55s2026-09-07 21:27:06 +00:00 | 67 commits to main since this release2026-09-07 - 8.5.0
Fixes
- update pnpm to 12.1.0 and pin Node.js type definitions (deps)
- Updates packageManager from pnpm@11.25.0 to pnpm@12.1.0
- Pins @types/node to 26.4.0 for reproducible type definitions
Features
- bump appstore to 2.8.0 and cover Cloudly 1.1.9 upgrades (appstore)
- Updates @serve.zone/appstore from 2.7.0 to 2.8.0.
- Adds upgrade coverage for Cloudly 1.1.9 preserving existing domains and owner-managed secret inputs.
- Verifies Cloudly upgrades fail closed when required secret values are missing.
Downloads
- update pnpm to 12.1.0 and pin Node.js type definitions (deps)
-
Onebox v8.4.3
StableRelease / build-and-release (push) Successful in 32m33s2026-09-05 11:08:56 +00:00 | 70 commits to main since this release2026-09-05 - 8.4.3
Fixes
- republish external gateway routes when services resume running (services)
- Include route enabledness in external gateway route change detection so transitions back to running trigger route syncs.
- Avoid gateway metadata writes when services remain disabled across stopped or failed states.
Downloads
- republish external gateway routes when services resume running (services)
-
Onebox v8.4.2
StableRelease / build-and-release (push) Successful in 30m11s2026-09-05 09:41:01 +00:00 | 72 commits to main since this release2026-09-05 - 8.4.2
Fixes
- migrate legacy platform secrets during startup (platform-secrets)
- Add a data 0.14.0 startup migration that atomically moves legacy platform credential copies from public service env vars into encrypted service secret bundles.
- Remove legacy secret reconciliation from platform service manager initialization.
- Preserve workload-init approval custody and runtime identity while handling conflicts and concurrent updates safely.
- Add regression coverage for idempotence, rollback, startup ledger behavior, and approval recovery.
Downloads
- migrate legacy platform secrets during startup (platform-secrets)
-
Onebox v8.4.1
StableRelease / build-and-release (push) Successful in 29m27s2026-09-05 08:15:47 +00:00 | 74 commits to main since this release2026-09-05 - 8.4.1
Maintenance
- Reissue the WorkloadInit approval runtime as a patch release after the 8.4.0 binary publication was blocked by a CI test timeout. Runtime behavior and test limits are unchanged.
Downloads
-
Onebox v8.3.3
StableRelease / build-and-release (push) Successful in 18m1s2026-09-05 00:19:25 +00:00 | 79 commits to main since this release2026-09-05 - 8.3.3
Fixes
- preserve service image identity through deployments and upgrades (services)
- Derive and persist imageDigest from digest-pinned image references and validate explicit SHA256 digests before runtime side effects.
- Pull and create containers with digest-bound runtime image references while preserving the stored image name.
- Clear stale digests when mutable images, registries, or forced pulls change without a new digest, and restore the prior image tuple on failed replacements.
- Keep Cloudly WorkloadInit approval secret-file mappings reserved after cutover metadata is retired.
- normalize service runtime image references to repo digests (services)
- Build Docker runtime image references as repository@digest by stripping mutable tags while preserving the stored service image name.
- Normalize digest-pinned images with registries and ports to satisfy Docker RepoDigest pull and inspect lookups.
- Add coverage for Docker client request paths using normalized digest references.
- bump appstore dependency and pin cutover approval fixture (appstore)
- Update @serve.zone/appstore from 2.5.0 to 2.7.0.
- Use a v2.5.0 catalog fixture for Cloudly secrets v2 cutover approvals so pinned hashes remain deterministic.
Downloads
- preserve service image identity through deployments and upgrades (services)
-
Onebox v8.3.2
StableRelease / build-and-release (push) Successful in 15m23s2026-09-04 22:41:37 +00:00 | 83 commits to main since this release2026-09-04 - 8.3.2
Fixes
- allow route restoration for services without cutover metadata (services)
- Only enforce held-service route suppression when cloudlySecretsV2Cutover metadata exists.
- Add service start lifecycle coverage for ordinary, promoted, held, and route-suppressed starts.
- Verify cutover retirement leaves services startable with routes restored.
Downloads
- allow route restoration for services without cutover metadata (services)
-
Onebox v8.3.1
StableRelease / build-and-release (push) Successful in 15m5s2026-09-04 21:50:52 +00:00 | 85 commits to main since this release2026-09-04 - 8.3.1
Fixes
- upgrade Corestore runtime pin to 6.3.1 (corestore)
- Require the 6.3.1 Corestore digest for fresh deployments and diagnostic read access grants
- Allow completed Corestore platform replay from 6.3.0 to 6.3.1 while requiring current consumers to be stopped
- Accept Cloudly secrets v2 cleanup tuples that include the new Corestore image
Downloads
- upgrade Corestore runtime pin to 6.3.1 (corestore)
-
Onebox v8.3.0
StableRelease / build-and-release (push) Successful in 14m49s2026-09-04 21:31:40 +00:00 | 87 commits to main since this release2026-09-04 - 8.3.0
Features
- archive completed Cloudly Secrets v2 cutovers on startup (migrations)
- Add an irreversible 0.12.0 startup migration that writes CloudlySecretsV2CutoverArchive records before removing completed cutover state from service documents.
- Validate every service before writing and fail closed for in-flight cutovers, pending intents, unreadable operations, or archive conflicts.
- Register irreversible migration steps without down handlers so rewinds crossing them are refused without changing data or the ledger.
- Update CLI help, documentation, and tests for cutover retirement and rewind behavior.
Fixes
- harden cutover retirement validation before service updates (cloudly-secrets-v2-cutover-retirement)
- Block retirement when a promoted Cloudly Secrets v2 cutover still carries a pendingIntent property, including null values.
- Reject replay against incomplete or conflicting cutover archive provenance before modifying services.
- Update cutover tests for staged production settlement access.
Downloads
- archive completed Cloudly Secrets v2 cutovers on startup (migrations)