Skip to content

Release v0.0.62

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Jun 23:52
v0.0.62
63ce38a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

BBT Workflow v0.0.62

🐳 Published Docker Images

Immutable digests (preferred for trust)

Tags can move; these digests cannot. Signatures and provenance refer to these references.

  • ghcr.io/burgan-tech/vnext/execution@sha256:a25ccb5b246c81eb1e91f49cc51bef896694212ddf9f2d6440559b45711c3e14
  • ghcr.io/burgan-tech/vnext/orchestrator@sha256:07878826595adf13da6dc8dc078cc908e9d1a70917e3141e69fc16353c776911
  • ghcr.io/burgan-tech/vnext/init@sha256:a9da6a52072f4493c48a1ffb9ff6cba62ec0e62717ff7d829eab76f9b8cb281e
  • ghcr.io/burgan-tech/vnext/inbox@sha256:3ebec457c9dc52c7e6276f9d800d3aa18ad437c7e8a86c492e401a79b3f32cca
  • ghcr.io/burgan-tech/vnext/outbox@sha256:539549135d72a0e093c25e377c6c26ec30583eeaa96fdccea6f595e296746952
  • ghcr.io/burgan-tech/vnext/db-migrator@sha256:f4f466732ccb83ed02806441b7d4ac50b72308bc544a481d4a85e9e7d45a5642

Tags (mutable, convenience)

docker pull ghcr.io/burgan-tech/vnext/execution:0.0.62
docker pull ghcr.io/burgan-tech/vnext/orchestrator:0.0.62
docker pull ghcr.io/burgan-tech/vnext/init:0.0.62
docker pull ghcr.io/burgan-tech/vnext/inbox:0.0.62
docker pull ghcr.io/burgan-tech/vnext/outbox:0.0.62
docker pull ghcr.io/burgan-tech/vnext/db-migrator:0.0.62

🔐 Supply Chain

  • OCI provenance & SBOM: pushed with the image (BuildKit provenance: mode=max, sbom: true).
  • GitHub build provenance: artifact attestation for this workflow run (identity, repo, workflow ref).
  • Cosign signature: each image signed by digest with keyless OIDC.

Verify Cosign signature (digest)

# Execution
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/execution@sha256:a25ccb5b246c81eb1e91f49cc51bef896694212ddf9f2d6440559b45711c3e14

# Orchestrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/orchestrator@sha256:07878826595adf13da6dc8dc078cc908e9d1a70917e3141e69fc16353c776911

# Init
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/init@sha256:a9da6a52072f4493c48a1ffb9ff6cba62ec0e62717ff7d829eab76f9b8cb281e

# Inbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/inbox@sha256:3ebec457c9dc52c7e6276f9d800d3aa18ad437c7e8a86c492e401a79b3f32cca

# Outbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/outbox@sha256:539549135d72a0e093c25e377c6c26ec30583eeaa96fdccea6f595e296746952

# DbMigrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/db-migrator@sha256:f4f466732ccb83ed02806441b7d4ac50b72308bc544a481d4a85e9e7d45a5642

Verify GitHub build provenance attestation

gh attestation verify oci://ghcr.io/burgan-tech/vnext/execution@sha256:a25ccb5b246c81eb1e91f49cc51bef896694212ddf9f2d6440559b45711c3e14    --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/orchestrator@sha256:07878826595adf13da6dc8dc078cc908e9d1a70917e3141e69fc16353c776911  --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/init@sha256:a9da6a52072f4493c48a1ffb9ff6cba62ec0e62717ff7d829eab76f9b8cb281e          --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/inbox@sha256:3ebec457c9dc52c7e6276f9d800d3aa18ad437c7e8a86c492e401a79b3f32cca        --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/outbox@sha256:539549135d72a0e093c25e377c6c26ec30583eeaa96fdccea6f595e296746952      --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/db-migrator@sha256:f4f466732ccb83ed02806441b7d4ac50b72308bc544a481d4a85e9e7d45a5642  --repo burgan-tech/vnext

🚀 Quick Start

Using Docker Compose:

version: '3.8'
services:
  execution:
    image: ghcr.io/burgan-tech/vnext/execution:0.0.62
    ports:
      - "5001:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
  orchestrator:
    image: ghcr.io/burgan-tech/vnext/orchestrator:0.0.62
    ports:
      - "5002:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - execution
  init:
    image: ghcr.io/burgan-tech/vnext/init:0.0.62
    ports:
      - "3005:3000"
    environment:
      - VNEXT_APP_URL=http://vnext-app:4201
      - PACKAGE_API_PORT=3005
      - DEFAULT_REGISTRY=https://registry.npmjs.org/
    depends_on:
      - orchestrator
  inbox:
    image: ghcr.io/burgan-tech/vnext/inbox:0.0.62
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator
  outbox:
    image: ghcr.io/burgan-tech/vnext/outbox:0.0.62
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator

🏷️ Available Tags

  • v0.0.62 - This release
  • latest - Latest stable release
  • release-v0.0 - Branch-specific build

🤖 Built from branch: release-v0.0
📝 Commit: 63ce38a
⏰ Build run: 72

What's Changed

  • fix(init): rewrite only source-domain references during domain replacement (#729) by @yilmaztayfun in #731
  • fix(pipeline): release chain ownership when resting in Busy-subtype state by @yilmaztayfun in #732
  • fix(pipeline): release chain ownership when resting in Busy-subtype state by @yilmaztayfun in #734
  • fix(init): rewrite only source-domain references during domain replacement by @yilmaztayfun in #733
  • feat(mcp): vnext-runtime MCP server + Component Discovery API (#333) by @yilmaztayfun in #735
  • feat(authorization): treat deny-only role grant sets as blacklists by @yilmaztayfun in #737
  • fix(scripting): SoapTask mapping CS0012 + default System.Security escaping by @yilmaztayfun in #739
  • feat(tasks): configurable HTTP Content-Type and byte-exact body for signing by @yilmaztayfun in #743
  • [enhancement] Add direct Dapr-enqueue continuation mode with outbox fallback by @yilmaztayfun in #745
  • [enhancement] Add direct Dapr-enqueue continuation mode with outbox fallback by @yilmaztayfun in #746
  • feat(longpoll): declarative long-poll termination on state entry (#717) by @yilmaztayfun in #747
  • feat(functions): forward output ScriptResponse headers/status in multi-task functions by @yilmaztayfun in #749
  • v0.0.62 by @yilmaztayfun in #750

Full Changelog: v0.0.61...v0.0.62

Contributors

yilmaztayfun
Assets 2
Loading