v1.8.0

1.8.0 (2026-07-13)

Features

• action: add composite action entrypoint (eb60e04)
• action: add shared shell helpers for the composite action (8662c0b)
• action: download and verify the attested aeroflare-ci binary (0821f3e)
• action: publish a JSON Schema for .aeroflare-ci.yaml (5e2c89d)
• action: validate action modes and build the aeroflare-ci argv (734058c)
• add cmdutil.Factory, error sentinels, and test helpers (0f697da)
• add install and install-release tasks with PREFIX support (37743ee)
• add pkg/iostreams to replace package-level print helpers (8dbd7a1)
• bake version into binary via ldflags instead of embedded JSON (9e86ef7)
• cache: add Group for querying several upstream caches as one (a5638f4)
• ci action (c4ff07a)
• ci: accept a list of upstream caches in config and inputs (b84c144)
• ci: accept http(s):// scheme in cache registry (964b474)
• ci: add aeroflare-ci command entry point (aefd515)
• ci: add plain CI reporter (bc1f103)
• ci: build installables and scrape store paths (ef15661)
• ci: load config file and merge inline inputs (9ed791d)
• ci: make --upstream-cache repeatable (756de43)
• ci: orchestrate builds and multi-cache pushes (1a3976c)
• ci: parse cache specs and resolve per-host tokens (156f5fe)
• ci: proxy-accelerated build, prepare-once, push-to-all pipeline (1541297)
• ci: reject build entries that are mis-indented action inputs (98dfd4a)
• ci: resolve signing key from env material or path (5532037)
• ci: route builds through proxy and dedup store paths (a28ef6e)
• ci: skip build outputs already served by an upstream cache (a37ef02)
• oci: add a go-containerregistry auth seam (0c01f9f)
• print build date in aeroflare version output (15ce46e)
• push: add prepare-once / push-to-many engine split (93f3b26)

Bug Fixes

• action scripts and ci pipeline in order to provide a better user experience (d78ce38)
• action: split upstream-cache into one flag per entry (519eb9d)
• bind --cache-url against root's flags, not the invoked subcommand's (8273f41)
• ci: push the CI credential as a password, not a bearer token (c2f1780)
• ci: scope proxy lifetime to the build phase only (1625362)
• ci: stop reporting a filtered closure as the full closure (6309ab8)
• ci: upload only paths absent from every upstream cache (b5655ac)
• correct dotfile depth-check and tar-write atomicity in script/build.go (675c7e2)
• extract aeroflare-ci from the bin/ path inside release archives (c435e38)
• keep the "no value found" context when auth get fails to resolve a field (72e1384)
• restore the global viper binding so --cache-url and AEROFLARE_* work again (2c41e38)
• restore usage output on flag and argument errors (4bbb66a)
• return an error from GetRegistryAndRepository instead of exiting the process (5fb8c01)
• show usage on argument errors for auth get, set, and remove (d4c0117)