terragucci 0.4.2

One audit trail across your projects, CDK Terrain synth, chat notices, cost estimates, and fixes for large estates.

• terragucci audit writes every approval, apply, policy override and refused wave across your projects to one record in your bucket (#551).
• synth runs cdktn synth before the jobs read the roots; CDK Terrain is on cdktn 0.24.0, and a pull request plans only the stacks whose synthesized output changed (#575, #576).
• notify posts a waiting, refused or failed wave to Slack or Teams; cost puts a monthly estimate per root in the plan note.
• A wave applies at most parallelism roots at once, its roots share one provider cache, and plan and drift download each provider once per stage (#594). parallelism defaults to 4 (#596).
• An approval that already applied no longer refuses the next wave (#572); neither does a policy override that already applied (#589).
• reconcile carries the control repo's reports into each project (#597).
• The Terraform image is 1.14.9, so terraform query imports generate config. Rollouts read an empty Forgejo repo; an import that also updates a resource is named in the report; trust.json fails closed without "schema": 1.

What is new: https://intentius.io/terragucci/reference/whats-new/

Images: ghcr.io/intentius/terragucci-{tofu,terraform,terragrunt,choudoufu}:0.4.2-*, pinned by digest in the package.