v0.4.0

What's Changed

• fix(oc-runner): verify TLS for token request and log runner IP on login failure by @DerekRoberts in #62
• fix(security): pass inputs to scripts through env by @DerekRoberts in #63
• ci: probe GitHub runner reachability to OpenShift API and router by @DerekRoberts in #55
• feat(oc-runner): fail fast with a clear message when the runner IP is blocked by @DerekRoberts in #65
• feat(crunchy): optional values_file, override inputs and TLS passthrough route by @DerekRoberts in #67
• chore: move workstation scripts to bcgov/devops-scripts by @DerekRoberts in #66
• docs(route-tls): add a workflow_dispatch example by @DerekRoberts in #68
• feat(crunchy): stop after helm when dry_run is set by @DerekRoberts in #70
• test(oc-runner): cover commands failures and verbose mode by @DerekRoberts in #71
• feat(route-tls): record dry_run on the workflow summary by @DerekRoberts in #72
• feat(route-tls): sate dry run in logs, verify route access by @DerekRoberts in #73
• feat(route-tls): fail the apply unless the live certificate matches by @DerekRoberts in #74
• fix(crunchy): deploy the bundled chart unless a repository is set by @DerekRoberts in #75
• chore: Configure Renovate by @renovate[bot] in #83
• chore(deps): update dependency bcgov/renovate-config to v2026 by @renovate[bot] in #85
• chore(deps): update github actions by @renovate[bot] in #84
• refactor(ci): drop action-get-pr from the deployer workflow by @DerekRoberts in #77
• chore(deps): update github actions to v8.0.1, v7.0.1 (major) by @renovate[bot] in #87
• docs(route-tls): document standalone workflow architecture and secret upload by @DerekRoberts in #88
• docs: add AGENTS.md with repository facts by @DerekRoberts in #79
• feat(route-tls): fail when another route already owns the host by @DerekRoberts in #82
• chore(deps): update github actions to 13, 26.04 (major) by @renovate[bot] in #90
• fix(deployer): fail on non-AlreadyExists errors with overwrite: false by @DerekRoberts in #89
• feat(crunchy): harden crunchy action defaults, scripts, and output contracts by @DerekRoberts in #92
• ci(probe): record runner reachability and add a weekly IP-health report by @DerekRoberts in #93
• feat(route-tls): check CA chain order and print each check by @DerekRoberts in #94
• test(route-tls): generate a real CA chain and failing variants in CI by @DerekRoberts in #96
• docs(agents): README usage examples follow quickstart-openshift by @DerekRoberts in #97
• fix(ci): stop PR close runs cancelling the push-to-main run by @DerekRoberts in #98
• fix(ci): skip Test Route TLS unless its paths change by @DerekRoberts in #102
• docs: point READMEs at actions-openshift instead of retired repos by @DerekRoberts in #104
• fix(oc-runner): only report a timeout when the timeout input fired by @DerekRoberts in #103
• feat(cert-expiry): read-only TLS certificate expiry check action by @DerekRoberts in #108
• feat(image-import): import a GHCR image into the namespace ImageStream by @DerekRoberts in #100
• fix(oc-runner): titled annotation and blocked output when the runner IP is blocked by @DerekRoberts in #109
• feat(pg-upgrade): verified PostgreSQL/PostGIS major upgrades by @DerekRoberts in #106

New Contributors

• @renovate[bot] made their first contribution in #83

Full Changelog: v0.3.2...v0.4.0