-
Onebox v8.3.3
StableRelease / build-and-release (push) Successful in 18m1sjkunz released this
2026-09-05 00:19:25 +00:00 | 253 commits to main since this release2026-09-05 - 8.3.3
Fixes
- preserve service image identity through deployments and upgrades (services)
- Derive and persist imageDigest from digest-pinned image references and validate explicit SHA256 digests before runtime side effects.
- Pull and create containers with digest-bound runtime image references while preserving the stored image name.
- Clear stale digests when mutable images, registries, or forced pulls change without a new digest, and restore the prior image tuple on failed replacements.
- Keep Cloudly WorkloadInit approval secret-file mappings reserved after cutover metadata is retired.
- normalize service runtime image references to repo digests (services)
- Build Docker runtime image references as repository@digest by stripping mutable tags while preserving the stored service image name.
- Normalize digest-pinned images with registries and ports to satisfy Docker RepoDigest pull and inspect lookups.
- Add coverage for Docker client request paths using normalized digest references.
- bump appstore dependency and pin cutover approval fixture (appstore)
- Update @serve.zone/appstore from 2.5.0 to 2.7.0.
- Use a v2.5.0 catalog fixture for Cloudly secrets v2 cutover approvals so pinned hashes remain deterministic.
Downloads
- preserve service image identity through deployments and upgrades (services)
-
Onebox v8.3.2
StableRelease / build-and-release (push) Successful in 15m23s2026-09-04 22:41:37 +00:00 | 257 commits to main since this release2026-09-04 - 8.3.2
Fixes
- allow route restoration for services without cutover metadata (services)
- Only enforce held-service route suppression when cloudlySecretsV2Cutover metadata exists.
- Add service start lifecycle coverage for ordinary, promoted, held, and route-suppressed starts.
- Verify cutover retirement leaves services startable with routes restored.
Downloads
- allow route restoration for services without cutover metadata (services)
-
Onebox v8.3.1
StableRelease / build-and-release (push) Successful in 15m5s2026-09-04 21:50:52 +00:00 | 259 commits to main since this release2026-09-04 - 8.3.1
Fixes
- upgrade Corestore runtime pin to 6.3.1 (corestore)
- Require the 6.3.1 Corestore digest for fresh deployments and diagnostic read access grants
- Allow completed Corestore platform replay from 6.3.0 to 6.3.1 while requiring current consumers to be stopped
- Accept Cloudly secrets v2 cleanup tuples that include the new Corestore image
Downloads
- upgrade Corestore runtime pin to 6.3.1 (corestore)
-
Onebox v8.3.0
StableRelease / build-and-release (push) Successful in 14m49s2026-09-04 21:31:40 +00:00 | 261 commits to main since this release2026-09-04 - 8.3.0
Features
- archive completed Cloudly Secrets v2 cutovers on startup (migrations)
- Add an irreversible 0.12.0 startup migration that writes CloudlySecretsV2CutoverArchive records before removing completed cutover state from service documents.
- Validate every service before writing and fail closed for in-flight cutovers, pending intents, unreadable operations, or archive conflicts.
- Register irreversible migration steps without down handlers so rewinds crossing them are refused without changing data or the ledger.
- Update CLI help, documentation, and tests for cutover retirement and rewind behavior.
Fixes
- harden cutover retirement validation before service updates (cloudly-secrets-v2-cutover-retirement)
- Block retirement when a promoted Cloudly Secrets v2 cutover still carries a pendingIntent property, including null values.
- Reject replay against incomplete or conflicting cutover archive provenance before modifying services.
- Update cutover tests for staged production settlement access.
Downloads
- archive completed Cloudly Secrets v2 cutovers on startup (migrations)
-
Onebox v8.2.6
StableRelease / build-and-release (push) Successful in 14m40s2026-09-04 16:25:34 +00:00 | 264 commits to main since this release2026-09-04 - 8.2.6
Fixes
- refresh verification runtime environment before restart (cloudly-secrets-v2-cutover)
- Allow verify-once service mutations during cutover verification.
- Recompose the verification runtime from current environment variables while preserving the target image tuple.
- Permit unchanged target identity replay during verify-once rollback without allowing old-image rollback.
Downloads
- refresh verification runtime environment before restart (cloudly-secrets-v2-cutover)
-
Onebox v8.2.5
StableRelease / build-and-release (push) Successful in 14m28s2026-09-04 12:56:26 +00:00 | 266 commits to main since this release2026-09-04 - 8.2.5
Fixes
- allow cutover environment repair after failed verify (database)
- Allows stopped services with a pending verify-cutover intent to re-arm templated app-store environment declarations.
- Continues to reject running services and non-verify cutover intents during repair.
Downloads
- allow cutover environment repair after failed verify (database)
-
Onebox v8.2.4
StableRelease / build-and-release (push) Successful in 14m23s2026-09-04 12:26:28 +00:00 | 268 commits to main since this release2026-09-04 - 8.2.4
Fixes
- re-arm platform templates during service upgrades (service-template-env)
- Prefer platform-owned App Store template declarations over stored public environment literals while preserving operator overrides for non-templated values.
- Keep service-intrinsic templates frozen to preserve install-time validation semantics.
- Add an offline migration repair command to re-arm previously frozen templated environment values for stopped cutover services.
- Behaviour change: an app template whose public declaration references an absent optional launcher-environment secret now fails its upgrade during validation instead of deploying a stale literal.
Downloads
- re-arm platform templates during service upgrades (service-template-env)
-
Onebox v8.2.3
StableRelease / build-and-release (push) Successful in 14m37s2026-09-04 10:18:03 +00:00 | 271 commits to main since this release2026-09-04 - 8.2.3
Fixes
- skip rehearsal-only inspect during production keyring preparation (cloudly-secrets-v2-cutover)
- Removes the redundant inspect command from the production prepare path to avoid AUTHORIZATION_INVALID after a production binding is written.
- Updates cutover test expectations to validate blocked replay behavior through keyring-check only.
Downloads
- skip rehearsal-only inspect during production keyring preparation (cloudly-secrets-v2-cutover)
-
Onebox v8.2.2
StableRelease / build-and-release (push) Successful in 14m39s2026-09-04 09:12:25 +00:00 | 273 commits to main since this release2026-09-04 - 8.2.2
Fixes
- settle production cutovers with recorded provisioned Mongo credentials (cloudly-secrets-v2-cutover)
- Builds the production settlement Mongo environment from the platform provision for the service's recorded database resource.
- Rejects production settlement when the provisioned database identity differs from the recorded resource.
- Updates cutover tests to cover recorded database binding and mismatched provision refusal.
Downloads
- settle production cutovers with recorded provisioned Mongo credentials (cloudly-secrets-v2-cutover)
-
Onebox v8.2.1
StableRelease / build-and-release (push) Successful in 14m38s2026-09-04 07:54:40 +00:00 | 275 commits to main since this release2026-09-04 - 8.2.1
Fixes
- report MongoDB descriptor inconsistencies safely (settlement-mongo)
- Replace the generic settlement MongoDB consistency error with field-level mismatch names while withholding secret values.
- Report multiple MongoDB URL/environment disagreements together and include the relevant environment key names.
- Add tests covering safe error messages for database, credential, password, and scheme mismatches.
- handle malformed MongoDB credential encoding in settlement validation (settlement-secrets)
- Safely compares percent-encoded MongoDB username and password fields without throwing URIError on malformed sequences.
- Adds regression coverage to preserve descriptive validation errors for malformed credentials.
Downloads
- report MongoDB descriptor inconsistencies safely (settlement-mongo)