ImageSilo v0.1.0-rc.3

Highlights

• GHCR releases now publish both the immutable version tag and the mutable latest tag.
• latest is created from the same verified native linux/amd64 and linux/arm64 digests as the version manifest.
• Release workflows are serialized globally, and rerunning an older release will not roll latest back when a newer release tag exists.
• Includes the setup, security, resource-boundary, proxy-IP, storage-integrity, UI reliability, and lightweight image-delivery improvements introduced in v0.1.0-rc.2.
• Image delivery remains stream-based with ETag revalidation and operating-system page caching. IMAGESILO_DELIVERY_CONCURRENCY=0 is the unlimited default; values 1 through 4096 enable an application-level cap.

Container images

docker pull ghcr.io/willxup/imagesilo:v0.1.0-rc.3
docker pull ghcr.io/willxup/imagesilo:latest

Both tags resolve to:

• Platforms: linux/amd64, linux/arm64
• Manifest digest: sha256:ae39a172c8a464a48ffc10959d8b8f985fd412851404bca4edc563ce661d98ca
• amd64 digest: sha256:6280ad479ff327857c3a90ca8d162425f59ac2ca42166ad87018a4e2061d0f9d
• arm64 digest: sha256:7a5d267d00133b95b158bc4fab8353ce99cb78899d972d9ea915844b381009f9

Production deployments should still prefer the immutable version tag or manifest digest. Use latest when automatically following the newest published ImageSilo release is desired.

Verification

• Commit: 95a86187823b1e6c33cb6e2ce523c53f1acc9bee
• Main Verify: https://github.com/Willxup/imagesilo/actions/runs/30617660455
• Automated release: https://github.com/Willxup/imagesilo/actions/runs/30618059947

ImageSilo v0.1.0-rc.2

Highlights

• Hardened first-run setup with a one-time bootstrap token that is emitted only for uninitialized instances and cleared after successful initialization.
• Serialized credential changes and per-image mutations, bounded image processing at concurrency 1, and staged uploads to disk before decoding.
• Added Nginx Proxy Manager client-IP validation, GIF preflight limits, managed-file integrity checks, tighter SQLite permissions, and HTTP timeouts.
• Kept image delivery lightweight with an in-memory metadata index, file streaming, ETag revalidation, and the operating-system page cache rather than a full-image Go cache.
• Added configurable delivery concurrency: IMAGESILO_DELIVERY_CONCURRENCY=0 means unlimited and is now the default; values 1 through 4096 enable an application-level cap.
• Improved administrator UI resilience, accessibility, pagination, session expiry handling, browser-storage safeguards, and bilingual documentation.
• Hardened the release pipeline with native linux/amd64 and linux/arm64 smoke tests, immutable platform tags, revision checks, and a digest-pinned multi-platform manifest.

Container image

docker pull ghcr.io/willxup/imagesilo:v0.1.0-rc.2

Platforms: linux/amd64, linux/arm64

Manifest digest: sha256:9b225c56a294f0faba693067b2ce08f81534ef2b318c93ac9e341a10b8086703

Upgrade notes

• Existing initialized deployments are not required to run setup again.
• Existing explicit IMAGESILO_DELIVERY_CONCURRENCY values remain effective. Remove the override or set it to 0 to use the new unlimited default.
• Fresh deployments obtain the bootstrap token from docker compose logs -f and enter it on the setup page.

Verification

• Commit: 1e8b93b6a81fe240ffaadde2193a001d915b2a14
• Automated release run: https://github.com/Willxup/imagesilo/actions/runs/30611430227

ImageSilo v0.1.0-rc.1

Full Changelog: https://github.com/Willxup/imagesilo/commits/v0.1.0-rc.1