v0.3.0-rc.15

The fifteenth pre-release of 0.3.0, published as a GitHub pre-release and not marked latest. See CHANGELOG.md, [0.3.0-rc.15].

What an operator must do

• Upgrade every workstation that changes this deployment. Every command that changes a site now refuses one last applied by a newer paisans, so once any operator applies with rc.15, an older paisans is refused on those sites until it upgrades. site admit and site evict refuse a host a newer paisans claimed in the same way. A build of develop still passes on a host a release candidate set up.
• Expect the deployment lease on more commands. With --execute, these commands now hold the lease and are refused while another command holds it: site add, site prepare, site remove, app remove, gateway move, mesh rekey, prune, storage init, storage add, storage rotate-key, secrets rotate, oidc client create and operator register. Each takes --break-lease, and --yes where it had none.
• Engagement app linked to a Matrix homeserver: set gated: true when you deploy paisans-engagement-service#15 or later, so the bot's "Read" links keep working. validate warns until it is set.
• Engagement app with bot_localpart left unset: the next apply moves the bot from @digest-bot to @community-bot, and the service starts new rooms from the new account. Set bot_localpart: digest-bot to keep the old account. The bot's display name is now bot_display_name, Community Bot by default.
• Nothing to do for the rest. deployment apply without --site leaves alone a site with nothing to do. site admit sets up relay forwarding only on the relay, and site evict removes it. dns prune removes a sender DMARC policy that nothing sends mail from any more.

Everything in [0.3.0-rc.1] to [0.3.0-rc.14] still applies.

🤖 Generated with Claude Code

What's Changed

• Develop is 0.3.0-dev by @josephquigley in #551
• fix: a relay dialled on its public_address forwards, and ufw lets it relay the mesh by @josephquigley in #552
• fix: forward only on the relay, so apply stops refusing other dialled sites by @josephquigley in #553
• fix: a build of develop meets requires_toolkit of its own pre-releases by @josephquigley in #554
• feat: name the engagement bot community-bot and let a deployment name it by @josephquigley in #555
• fix: dns prune removes a sender DMARC policy nothing sends mail from by @josephquigley in #557
• feat: deployment apply leaves alone a site with nothing to do by @josephquigley in #556
• feat: gate the engagement app's web digest, leaving unsubscribe open by @josephquigley in #559
• feat: commands that change a site refuse sites a newer paisans last applied by @josephquigley in #558
• feat: every command that changes sites holds the deployment lease by @josephquigley in #560
• fix: run the gate before an app's handles on a gated hostname by @josephquigley in #561
• Release 0.3.0-rc.15 by @josephquigley in #562

Full Changelog: v0.3.0-rc.14...v0.3.0-rc.15