Munitor 0.3.3

Published to the CircleCI orb registry as kof22/munitor@0.3.3 on 2026-10-11.

Fixes

• Atomic release versions (allocate_version, new): on main, build_and_test reserves vX.Y.Z through the GitHub refs API before the version is baked into the jar or image. A version already owned by another commit moves to the next patch; tags are never moved. This fixes version collisions when two merges to main ran close together (Website-Backend 0.1.24 and 0.1.32).
• Immutable image tags (guard_image_tags, new): every image carries the org.opencontainers.image.revision label, and the push refuses to overwrite a version tag that belongs to a different commit or lacks the label. Registry errors fail closed.
• update_cd_repo: on main, verifies that vX.Y.Z points at the building commit before bumping GitOps, and records the source commit in the GitOps commit body.
• github_release: targets CIRCLE_SHA1 instead of main, and refuses when the tag points elsewhere.
• Generator: cd_path is rendered only when cd.path is set, fixing Unexpected argument(s): cd_path for manifests pinned to older orb versions.

No new orb parameters; generated pipelines remain compatible.

Assets

• munitor-0.3.3.orb.yml: the packed orb source exactly as published to the CircleCI registry (retrieved from the registry by version).
• SHA256SUMS: checksum of the orb source. Verify with sha256sum -c SHA256SUMS.

Pull requests: #22, #23.