Skip to content

v0.183.327

Choose a tag to compare

View all tags
@chen21019 chen21019 released this 30 Sep 10:44
Immutable release. Only release title and notes can be modified.
v0.183.327
dce2f24
This commit was signed with the committer’s verified signature.
chen21019 Cheng-Chen, Chen
SSH Key Fingerprint: nF0fDZ8EQGL+GjPXONcQ9qd4VseNYmcscqwvax867AE
Verified
Learn about vigilant mode.

Orchestration Engine 0.183.327

Fixes Certificate name/description partial updates that omitted cert, and the shared deletion guard for alternate v2 load-balancer certificate references. Explicit null certificate input is rejected by the shared schema with 422 / NotNullable before the certificate filter; non-null empty or malformed input is rejected with 422 / InvalidFormat. The focused filter unit tests do not cover the preceding schema validation. Referenced default/alternate certificates still return 405 / InvalidAction. Authorization, private-key masking, v1/v2 schema contracts, authentication and account teardown behavior are preserved.

Source: dce2f2473ffea1510fe10676a771eb1fe5d0b161. PR #60 is normally merged; the squash commit has the identical source tree. The release uses the exact candidate built by the successful security release gate, not a rebuilt or overwritten artifact.

Official CI run 36701559252 passed build, all configured Maven unit tests, packaging, artifact checks and security gates. CodeQL run 36701559287 also passed. The two focused API filter classes pass 17 tests; restoring the old code reproduces the omitted-field and alternate-reference regressions. Artifact and Dapper High/Critical findings are zero; this does not claim zero findings at other severities.

The published executable WAR (cattle.jar) was SHA256-verified and successfully started to completion (--exit, exit 0) with JDK 25.0.3 in a bounded, network-isolated H2/MySQL-mode container. No platform volumes, ports or production database were used. This is artifact startup evidence, not a MariaDB/PostgreSQL integration suite or full Server/browser/role acceptance. Those independent checks remain required for the assembled Server.

The Dapper builder retains its base snapshot and direct tool pins, and exact-pins the official signed Ubuntu OpenSSL security fix 3.5.5-1ubuntu3.6. No vulnerability exemption or gate relaxation was introduced.

Artifact SHA256: c6d4c3003a19db19d1be73e69aa52358a0a4166bf726cbefe7e2ab9ed5664b56. Standalone SHA256 and CycloneDX SBOM assets are attached. No database migration is required. Retain the previous immutable Server image and named volumes for rollback; Engine 0.183.326 reintroduces both certificate bugs.

Assets 6
Loading