Skip to content

Munitor 0.3.4

Choose a tag to compare

View all tags
@KofTwentyTwo KofTwentyTwo released this 12 Oct 11:20
· 11 commits to develop since this release
Immutable release. Only release title and notes can be modified.
v0.3.4
This tag was signed with the committer’s verified signature.
KofTwentyTwo James Maes
SSH Key Fingerprint: Ya4DHaMDprTAQ8bamR76dpgY7ae4xV5efyU/cOT0Fq0
Verified
Learn about vigilant mode.
687944e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Published to the CircleCI orb registry as kof22/munitor@0.3.4 on 2026-10-12.

Changes

  • Signed GitOps commits: update_cd_repo creates the CD-repository commit with the GraphQL createCommitOnBranch mutation instead of pushing a local commit. GitHub signs API-created commits, so the GitOps repository can require signed commits on its branch with no bypass actor. Concurrent bumps retry against the refreshed head through expectedHeadOid. The commit is authored by the GITHUB_TOKEN identity, and the source repository and commit stay in the commit body. ci_git_email/ci_git_name are kept for compatibility but no longer apply (#29).
  • CI: circleci/orb-tools is pinned to 12.5.0, and a test job runs the script, template and BATS suites on every branch.
  • Snapshots (#26): only develop publishes dev:snapshot; feature branches publish the immutable dev:<sha> tag only.
  • Generator (#27): the documented org key no longer produces an "Unknown key" warning.

No new or removed orb parameters.

Assets

  • munitor-0.3.4.orb.yml: the packed orb source exactly as published to the CircleCI registry.
  • SHA256SUMS: verify with sha256sum -c SHA256SUMS.

Pull requests: #29, #30.

Assets 5
Loading