v0.183.328
·
12 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Orchestration Engine v0.183.328
This patch updates platform Jackson to 2.22.3 and the isolated WebAuthn/logging Jackson runtime to 3.2.3, and consumes the officially published distributed-cache-runtime 5.7.5. Both Jackson generations remain separate; packaged checks reject old versions, duplicates, overlapping namespaces and foreign multi-release classes. Authentication, API authorization, database policy and certificate behavior are unchanged.
Immutable artifact and source
- Source:
ad43f4b6790c359e248710a39bca2f776d70be62. - Signed PR #64 was normally merged after all required checks; its merge tree exactly matches the tested source tree.
cattle.jar: 87,690,742 bytes; SHA-256184fb3d4a2b026560e1e60d7b444f693f79bff6c8220cc9354c1284012f6a683.- The published WAR is the actual artifact from official build/security run 36818926539, not a local rebuild.
- Embedded Cache 5.7.5 source:
a9aea563870201462dc24f778a06279a08ed5841; JAR SHA-2560f536a9c7bcd00f2369586fb6ca1606f7e45f3225e24795d10d38397051c8715.
Executed validation
- Actual unit results: 256 suites, 1,104 tests, zero failures/errors/skips. All six BodyParser and eight WebAuthnConfiguration cases passed, including the seven new JSON/CBOR/credential-storage regressions.
- Actual WAR inventory: 191 embedded JAR hashes checked; CycloneDX inventory contains 204 components.
- Source secret findings: 0. Actual artifact Critical/High findings: 0. Build-image Critical/High findings: 0; 198 Medium and 22 Low findings remain recorded. This is not an all-severity zero claim.
- Custom Java CodeQL run 36818926652 passed. Its actual SARIF retains three severity-4 cookie findings and one severity-5 lock finding; Critical/High and unresolved rule metadata are zero, not all findings.
- The exact CI WAR completed standalone JDK 25.0.3 startup against isolated H2, with no network or platform data volumes, and exited 0.
These component results do not establish full MariaDB integration, OIDC/TOTP/Passkey browser login, the whole role/resource matrix or acceptance of a Server image. Server consumption and QA are separate. Failed Server496 run 36812661669 and previous releases remain historical records; no older tag is overwritten.