v0.2.2

Security / CI hardening (SonarCloud)

• Close Sonar SECURITY findings PG-01…PG-08: publish input-injection hardening, e2e secret-via-env + sha256 example hash, job-scoped permissions (ci/e2e), Scorecard permissions (read-only top-level, job-scoped writes for publish), HTTPS curl pins, version_diff.py path bounding, Dockerfile COPY for local artifacts
• Meta-tests under hack/test/sonar_pg_* guard the patterns

Documentation

• Keep press Bildmarke; remove logo candidates (BRAND-2)
• OpenSpec: sonar-security-remediation-2026-07

Install: xpkg.upbound.io/platformrelay/provider-gridscale:v0.2.2
GHCR: ghcr.io/platformrelay/provider-gridscale:v0.2.2

v0.2.1

Bug Fixes

• Bump golang.org/x/text to v0.39.0 (GO-2026-5970)

Documentation / supply chain

• Kollect-style README badges and docs refresh
• Top-level workflow permissions: for Scorecard Token-Permissions
• Original logo candidates (BRAND-2 — pick pending; shipping icon unchanged)

Install: xpkg.upbound.io/platformrelay/provider-gridscale:v0.2.1
GHCR: ghcr.io/platformrelay/provider-gridscale:v0.2.1

v0.2.0

0.2.0 - 2026-07-17

Bug Fixes

• config: Make loadbalancer status Computed to stop perpetual diff (LB-1) c38e52b

• config: Mark upstream-missed S3/console credentials sensitive (U-1) 8ae7376

• ci: Restore green main — filesystem CRD generate + metadatafix lint d8433f5

CI/CD

• publish: Self-diagnosing D-020-FU verify + name dispatch watch-points 60b9e8f

• publish: Append extensions before cosign sign (D-020-FU) 2e15c3e

• security: Least-privilege GITHUB_TOKEN on ci.yml + e2e.yaml (SEC-H1/2/3) 68f8d66

• checks: Wire check-docs into check-diff; document GOTOOLCHAIN base d21087f

• docs: Add check-api-docs sync gate (E4-S01) 58f1103

Documentation

• coordination: D-020-FU fixed (2e15c3e) — ready for signed v0.2.0 dispatch acbfb48

• coordination: 2026-07-17 handover — U-1/LB-1 landed, upstream PRs, D-020-FU b4782dd

• api: Sync CRD reference after U-1 sensitivity fix 9e6ca3c

• decisions: Apply operator answers D-018/019/020 + track sweep findings 949d1de

• inbox: Surface upstream U-1 sensitive-flag security finding f9895b8

• audit: 07-16b re-audit disposition + ROADMAP refresh ca9d3aa

• coordination: Finalize wrap tip references a1748f3

• coordination: Wrap — CI green, handoff, board, inbox 8976f55

• api: Sync Filesystem description after metadata stub d275897

• coordination: Session wrap — handoff, board, backlog, inbox c9eff5b

• security: Assurance case + refresh supply-chain posture (E6-S05) 3edc5f0

• examples: Sync curated index + ApplicationImport (E4-S02) fdbf300

• api: Regenerate CRD reference for sync gate (E4-S01) 2384fe4

• readme: Prefer v0.1.1 package tag in install hint bcc0ba0

• readme: Point Marketplace badge at v0.1.1 f4cfe59

• readme: Marketplace badge + datasource limitations (E3-S04/E8) c15a328

v0.1.1

Marketplace polish (icon/readme extensions). Package digest is unsigned (see D-020); prefer v0.2.0.

v0.1.0

Initial stable provider release. See CHANGELOG.md for details.

v0.1.0-alpha.1

Pre-release alpha cut.