-
Onebox v8.2.6
StableRelease / build-and-release (push) Successful in 14m40sjkunz released this
2026-09-04 16:25:34 +00:00 | 90 commits to main since this release2026-09-04 - 8.2.6
Fixes
- refresh verification runtime environment before restart (cloudly-secrets-v2-cutover)
- Allow verify-once service mutations during cutover verification.
- Recompose the verification runtime from current environment variables while preserving the target image tuple.
- Permit unchanged target identity replay during verify-once rollback without allowing old-image rollback.
Downloads
- refresh verification runtime environment before restart (cloudly-secrets-v2-cutover)
-
Onebox v8.2.5
StableRelease / build-and-release (push) Successful in 14m28s2026-09-04 12:56:26 +00:00 | 92 commits to main since this release2026-09-04 - 8.2.5
Fixes
- allow cutover environment repair after failed verify (database)
- Allows stopped services with a pending verify-cutover intent to re-arm templated app-store environment declarations.
- Continues to reject running services and non-verify cutover intents during repair.
Downloads
- allow cutover environment repair after failed verify (database)
-
Onebox v8.2.4
StableRelease / build-and-release (push) Successful in 14m23s2026-09-04 12:26:28 +00:00 | 94 commits to main since this release2026-09-04 - 8.2.4
Fixes
- re-arm platform templates during service upgrades (service-template-env)
- Prefer platform-owned App Store template declarations over stored public environment literals while preserving operator overrides for non-templated values.
- Keep service-intrinsic templates frozen to preserve install-time validation semantics.
- Add an offline migration repair command to re-arm previously frozen templated environment values for stopped cutover services.
- Behaviour change: an app template whose public declaration references an absent optional launcher-environment secret now fails its upgrade during validation instead of deploying a stale literal.
Downloads
- re-arm platform templates during service upgrades (service-template-env)
-
Onebox v8.2.3
StableRelease / build-and-release (push) Successful in 14m37s2026-09-04 10:18:03 +00:00 | 97 commits to main since this release2026-09-04 - 8.2.3
Fixes
- skip rehearsal-only inspect during production keyring preparation (cloudly-secrets-v2-cutover)
- Removes the redundant inspect command from the production prepare path to avoid AUTHORIZATION_INVALID after a production binding is written.
- Updates cutover test expectations to validate blocked replay behavior through keyring-check only.
Downloads
- skip rehearsal-only inspect during production keyring preparation (cloudly-secrets-v2-cutover)
-
Onebox v8.2.2
StableRelease / build-and-release (push) Successful in 14m39s2026-09-04 09:12:25 +00:00 | 99 commits to main since this release2026-09-04 - 8.2.2
Fixes
- settle production cutovers with recorded provisioned Mongo credentials (cloudly-secrets-v2-cutover)
- Builds the production settlement Mongo environment from the platform provision for the service's recorded database resource.
- Rejects production settlement when the provisioned database identity differs from the recorded resource.
- Updates cutover tests to cover recorded database binding and mismatched provision refusal.
Downloads
- settle production cutovers with recorded provisioned Mongo credentials (cloudly-secrets-v2-cutover)
-
Onebox v8.2.1
StableRelease / build-and-release (push) Successful in 14m38s2026-09-04 07:54:40 +00:00 | 101 commits to main since this release2026-09-04 - 8.2.1
Fixes
- report MongoDB descriptor inconsistencies safely (settlement-mongo)
- Replace the generic settlement MongoDB consistency error with field-level mismatch names while withholding secret values.
- Report multiple MongoDB URL/environment disagreements together and include the relevant environment key names.
- Add tests covering safe error messages for database, credential, password, and scheme mismatches.
- handle malformed MongoDB credential encoding in settlement validation (settlement-secrets)
- Safely compares percent-encoded MongoDB username and password fields without throwing URIError on malformed sequences.
- Adds regression coverage to preserve descriptive validation errors for malformed credentials.
Downloads
- report MongoDB descriptor inconsistencies safely (settlement-mongo)
-
Onebox v8.2.0
StableRelease / build-and-release (push) Successful in 52m25s2026-09-04 06:00:32 +00:00 | 104 commits to main since this release2026-09-04 - 8.2.0
Features
- add offline cutover backup repair migration command (cli)
- Adds migration repair-cutover-backup to restore cleared Cloudly cutover backup identities when startup validation prevents the daemon from running
- Initializes offline maintenance for the repair and shuts it down after completion
- Documents the new migration command in CLI help
Downloads
- add offline cutover backup repair migration command (cli)
-
Onebox v8.1.1
StableRelease / build-and-release (push) Successful in 34m13s2026-09-04 03:48:57 +00:00 | 106 commits to main since this release2026-09-04 - 8.1.1
Fixes
- preserve and repair superseded backup identities (cloudly-secrets-v2-cutover)
- Keep pinned schema-5 supersession backups when retiring rehearsals so operations remain backup-verified.
- Add a repair-superseded-backup command that restores a cleared backup from the supersession audit for damaged held operations.
- Add regression coverage for repairing wrongly cleared superseded backups.
Downloads
- preserve and repair superseded backup identities (cloudly-secrets-v2-cutover)
-
Onebox v8.1.0
StableRelease / build-and-release (push) Successful in 17m6s2026-09-03 19:42:18 +00:00 | 108 commits to main since this release2026-09-03 - 8.1.0
Fixes
- settle production during keyring preparation (cloudly-secrets-v2-cutover)
- Run schema-5 production settlement at the start of prepare-keyring before Cloudly reads production data.
- Make production settlement stage-aware so keyring preparation and execution use their own operation fences.
- Keep execution settlement as an idempotent backstop for operations that reach execution unsettled.
- Add regression coverage for keyring-prepare fence preservation and settlement idempotency.
- allow rehearsal retirement to supersede stale keyring prepare intent (cloudly-secrets-v2-cutover)
- Clear stale prepare-keyring intents before starting rehearsal retirement when the failed prepare persisted no production state.
- Add regression coverage for retiring a rehearsal wedged by a failed prepare-keyring intent.
Features
- add rehearsal retirement for fresh cutover baselines (cloudly-secrets-v2-cutover)
- Add a retire-rehearsal CLI action that returns rehearsed cutover operations to held for re-baselining
- Record retired rehearsal identities and retirement evidence while clearing stale backup, scratch, run id, and rehearsal receipt state
- Refuse retirement after downstream production, keyring, or settlement steps and re-prove scratch absence before discarding allocation references
- Document the re-baselining workflow and add coverage for retirement, refusal, and fresh backup re-entry
- add ledger-backed startup migration rewind (migrations)
- Run startup migrations through a strict data-version migration ledger.
- Add
migration rewind <data-version>to revert startup migration steps above a target so they rerun on next boot. - Refuse forward rewind targets and document the supported rewind workflow.
Downloads
- settle production during keyring preparation (cloudly-secrets-v2-cutover)
-
Onebox v8.0.2
StableRelease / build-and-release (push) Successful in 14m34s2026-09-03 12:43:15 +00:00 | 113 commits to main since this release2026-09-03 - 8.0.2
Fixes
- validate full diagnostics envelope for blocked cutover outputs (cloudly-secrets-v2-cutover)
- Apply the diagnostics schema to every CUTOVER_BLOCKED command instead of only inspect.
- Reject legacy short blocker envelopes in safe Cloudly output validation.
Downloads
- validate full diagnostics envelope for blocked cutover outputs (cloudly-secrets-v2-cutover)