Release v0.0.60

BBT Workflow v0.0.60

🐳 Published Docker Images

Immutable digests (preferred for trust)

Tags can move; these digests cannot. Signatures and provenance refer to these references.

• ghcr.io/burgan-tech/vnext/execution@sha256:0bef00e399b98e950053a6527189deb87816a42771915bc5dd238eb40a64492e
• ghcr.io/burgan-tech/vnext/orchestrator@sha256:56643cd18a608f6ae49bfc41af765646a70560d7c325f879405e7fe02aa19014
• ghcr.io/burgan-tech/vnext/init@sha256:681410b6cdb8b7bce1e21d5ef7ee7941552b72b050ef1663199b7f9952c8e924
• ghcr.io/burgan-tech/vnext/inbox@sha256:737c078c0903237a3ad7dafb7a8c4064a19f895357c8dd21cf128a052cc3177e
• ghcr.io/burgan-tech/vnext/outbox@sha256:e03de2c216598ea7e61cfd7cf201b48f778ccd11f760b2e3902b07ab1415f8a7
• ghcr.io/burgan-tech/vnext/db-migrator@sha256:37a23a5be8d72fee0772b096c42ba338a9709ccbea2eeae0c96d02df4936f748

Tags (mutable, convenience)

docker pull ghcr.io/burgan-tech/vnext/execution:0.0.60
docker pull ghcr.io/burgan-tech/vnext/orchestrator:0.0.60
docker pull ghcr.io/burgan-tech/vnext/init:0.0.60
docker pull ghcr.io/burgan-tech/vnext/inbox:0.0.60
docker pull ghcr.io/burgan-tech/vnext/outbox:0.0.60
docker pull ghcr.io/burgan-tech/vnext/db-migrator:0.0.60

🔐 Supply Chain

• OCI provenance & SBOM: pushed with the image (BuildKit provenance: mode=max, sbom: true).
• GitHub build provenance: artifact attestation for this workflow run (identity, repo, workflow ref).
• Cosign signature: each image signed by digest with keyless OIDC.

Verify Cosign signature (digest)

# Execution
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/execution@sha256:0bef00e399b98e950053a6527189deb87816a42771915bc5dd238eb40a64492e

# Orchestrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/orchestrator@sha256:56643cd18a608f6ae49bfc41af765646a70560d7c325f879405e7fe02aa19014

# Init
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/init@sha256:681410b6cdb8b7bce1e21d5ef7ee7941552b72b050ef1663199b7f9952c8e924

# Inbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/inbox@sha256:737c078c0903237a3ad7dafb7a8c4064a19f895357c8dd21cf128a052cc3177e

# Outbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/outbox@sha256:e03de2c216598ea7e61cfd7cf201b48f778ccd11f760b2e3902b07ab1415f8a7

# DbMigrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/db-migrator@sha256:37a23a5be8d72fee0772b096c42ba338a9709ccbea2eeae0c96d02df4936f748

Verify GitHub build provenance attestation

gh attestation verify oci://ghcr.io/burgan-tech/vnext/execution@sha256:0bef00e399b98e950053a6527189deb87816a42771915bc5dd238eb40a64492e    --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/orchestrator@sha256:56643cd18a608f6ae49bfc41af765646a70560d7c325f879405e7fe02aa19014  --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/init@sha256:681410b6cdb8b7bce1e21d5ef7ee7941552b72b050ef1663199b7f9952c8e924          --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/inbox@sha256:737c078c0903237a3ad7dafb7a8c4064a19f895357c8dd21cf128a052cc3177e        --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/outbox@sha256:e03de2c216598ea7e61cfd7cf201b48f778ccd11f760b2e3902b07ab1415f8a7      --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/db-migrator@sha256:37a23a5be8d72fee0772b096c42ba338a9709ccbea2eeae0c96d02df4936f748  --repo burgan-tech/vnext

🚀 Quick Start

Using Docker Compose:

version: '3.8'
services:
  execution:
    image: ghcr.io/burgan-tech/vnext/execution:0.0.60
    ports:
      - "5001:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
  orchestrator:
    image: ghcr.io/burgan-tech/vnext/orchestrator:0.0.60
    ports:
      - "5002:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - execution
  init:
    image: ghcr.io/burgan-tech/vnext/init:0.0.60
    ports:
      - "3005:3000"
    environment:
      - VNEXT_APP_URL=http://vnext-app:4201
      - PACKAGE_API_PORT=3005
      - DEFAULT_REGISTRY=https://registry.npmjs.org/
    depends_on:
      - orchestrator
  inbox:
    image: ghcr.io/burgan-tech/vnext/inbox:0.0.60
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator
  outbox:
    image: ghcr.io/burgan-tech/vnext/outbox:0.0.60
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator

🏷️ Available Tags

• v0.0.60 - This release
• latest - Latest stable release
• release-v0.0 - Branch-specific build

---

🤖 Built from branch: release-v0.0
📝 Commit: 26c47b7
⏰ Build run: 70

What's Changed

• Add role-based state aliases with localized labels by @yilmaztayfun in #708
• feat(functions): enforce FunctionScope on function invocation by @yilmaztayfun in #709
• feat(scripting): sandboxed, component-referenced custom C# script helpers (#710) by @yilmaztayfun in #713
• fix(instances): remove EF compiled queries, fix key uniqueness check by @yilmaztayfun in #716
• Disable production Swagger and improve function/mapping error logging by @yilmaztayfun in #724
• Claude/transition pipeline async design by @yilmaztayfun in #725
• v0.0.60 by @yilmaztayfun in #726

Full Changelog: v0.0.59...v0.0.60