v0.10.0

GraphNest v0.10.0

Compatibility: pre-1.0 pilot; Kubernetes 1.25 or newer. Migrations 038 and
039 keep one active v1 and two active v2 graph generations (published and
SCIP-derived) per repository and need a drained rollout: pause graph, SCIP
and index writers, migrate, deploy, then resume writers, as
docs/graph-storage.md describes. Reverting the binary alone is not a rollback.
Repositories indexed before this release need their SCIP index uploaded again
for the current indexed commit. No configuration changes are required. Adds
the graphnest command-line tool, which imports an existing CodeGraph index,
verifies it against the commit and publishes it as a v2 graph generation.
Security: images include SBOMs, provenance, and GitHub attestations. The
graphnest binaries ship with SHA-256 checksums, a dependency inventory and
build provenance attestations; server images do not link its SQLite reader.

Immutable artifacts

• ghcr.io/balcsida/graphnest/application@sha256:5c763f6d68716d047c4f77c8fbef577d3e566afad5bb2e1186d177a6764e8417
• ghcr.io/balcsida/graphnest/node@sha256:124296729e9cee13eb293942a279a67b284fc3073c8fd2b2cf1eac96c0bebd89
• oci://ghcr.io/balcsida/graphnest/charts/graphnest:0.10.0@sha256:442127acc6f9bf4fbe6407e6ae1f1b351633c374eb0ce133c8d20704d441be7e

Verification

gh attestation verify "oci://ghcr.io/balcsida/graphnest/application@sha256:5c763f6d68716d047c4f77c8fbef577d3e566afad5bb2e1186d177a6764e8417" --repo "balcsida/graphnest"
gh attestation verify "oci://ghcr.io/balcsida/graphnest/node@sha256:124296729e9cee13eb293942a279a67b284fc3073c8fd2b2cf1eac96c0bebd89" --repo "balcsida/graphnest"
gh attestation verify "graphnest-0.10.0.tgz" --repo "balcsida/graphnest"

Command-line tool

The graphnest command imports a local CodeGraph index without installing CodeGraph. Download the binary for your platform and graphnest_0.10.0_checksums.txt from the release assets, then verify and run it:

sha256sum -c --ignore-missing graphnest_0.10.0_checksums.txt
gh attestation verify graphnest_0.10.0_<os>_<arch> --repo "balcsida/graphnest"
chmod +x graphnest_0.10.0_<os>_<arch>
./graphnest_0.10.0_<os>_<arch> doctor

What's Changed

• ci(release): smoke-test only the amd64 images by @balcsida in #140
• fix(graph): build graph generations from SCIP uploads by @balcsida in #141
• feat(cli): import CodeGraph indexes with the graphnest command by @balcsida in #143
• feat(graphimport): complete the CodeGraph importer with freshness verification by @balcsida in #144
• feat(cli): publish imported CodeGraph generations by @balcsida in #145
• feat(cli): import reports, doctor, release binaries and the Stage 2 gate by @balcsida in #146
• fix(scip): report a pending index upload as retryable by @balcsida in #142
• chore(release): prepare v0.10.0 by @balcsida in #148

Full Changelog: v0.9.2...v0.10.0