Skip to content

PastureStack Server v1.6.564

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Nov 14:47
Immutable release. Only release title and notes can be modified.
v1.6.564
0ce4a6f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Server v1.6.564

Published image: ghcr.io/pasturestack/server:v1.6.564@sha256:884c94832cc507b25585437002dc49c7312d122ee527bb6ff941744c86705213.

Source commit: 0ce4a6fdfc00ceba8fc71bcd78af9148454f3bad.

The release workflow passed its source, security, startup and restart checks before publishing this image. Deployment-specific acceptance is separate and is not claimed by these build results.

Verified component inputs

  • Engine v0.183.365: producer 10e674d32de9c5d6ad63867a1b76d080ac76af48; tag 259ef59e8110fab71488d5dbd8c9affda4279217; tree e059d0a55c8ae20e3465a5e27c58a56bbcb892b4.
  • cattle.jar SHA256 46df4e5bc38da7f6eae1d9a8d68e1d45cfc87c9cc63a405973c3a057b6b03047 (88237445 bytes); SBOM 01d2fd79b93c7fd1b5ea72da9247b0fca483c6e5f757918d250e2d3347b5e02c.
  • Original Security 41295587271 attempt 1; CodeQL 41295587190 / 41295591698; 3891 tests in 418 suites, zero failure/error, 1 existing skips.
  • Exactly19 new methods: volume/pool13, Domain1, PlanService1, private-wire4;76 original required methods retained for95 total. Focused22 is not19 new methods. Wire-mock18 and prior Image6/External8/preview7/Index8 remain inherited.
  • C03: 432 inputs / 1396 HTTP tuples / 1397 rows; source fingerprint fdf53022efdab0e56edb292da037216be051643770565c090424124be8b115ea. HTTP classification delta0; substantive Member cleanup delta retained.
  • Five packaged role schemas unchanged from364. JDBC3.5.11 SHA256 42604178b9e57ec08ee0035079961516f086e455d0141f0b22c6eff29fb2fff4; all four reported CVEs absent in original artifact/SBOM/raw scans including ignored entries.89 version-only POMs; runtime dependency coordinates unchanged.
  • Web 1.6.204 / bridge 0.2.6: producer 64caa55d0b0768de1633549b54a169ddb62c9194; tag da24369ea12455d38f7dc63aef906eed5e38ffea; tree 6e76dbe42f665335df51ccc8ee2852be4fcdda8d.
  • Web archive 8a8280c201cf59f2d1e6dbf648c5ddd14dd3129b5d738ce7af37d2c1b9738f4e; lock bef45a7e181b5630c71c255efa96728bcf5efa5c044a1e931462bdd7fb207d32; runtime SBOM 195e7be0cd8f936b33c4ccd07a39e1e72db9e9cb38095e41608c36ba3b9e7faa.
  • Web original CI: 1122 Ember /0fail;5 new source cases (browser4/bridge-core1),22 inherited203;35 collaboration and1 QUnit/96 parameter combinations. These are not new business groups.
  • Bridge026 ZIP 091379b24f6651d54d49e463be5fa4d4bb60dae1551d857251ad06de5ea37f63. Fresh exact026 source/SBOM; unchanged025 dependency/install/SDK evidence carried, no new026 handshake claim. No extra Server runtime bridge.
  • All12 Engine and13 Web assets passed actual anonymous SHA/length readback against exact public metadata. Web archive provenance and runtime-SBOM attestations passed. No native Engine SLSA attestation is inferred.

Catalog0.20.17 / Compose0.14.40 and other pins/base image, VEX statements and
vendor decisions remain unchanged. Source preparation rebuilds no component.
The original Server publisher must pass its source/build/restart/merged-image
and browser scans/native attestation gates. Core, External/Alias, Member,
Catalog, roles/Keys/cross-ID, cleanup and weak-model runtime remain pending.
Four AI opt-ins remain independently default-off. Server563 results do not
become Server564 PASS. Full243 coverage is incomplete.

Assets 38
Loading