Skip to content

Release v0.0.66

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Jun 20:15
v0.0.66
516442b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

BBT Workflow v0.0.66

🐳 Published Docker Images

Immutable digests (preferred for trust)

Tags can move; these digests cannot. Signatures and provenance refer to these references.

  • ghcr.io/burgan-tech/vnext/execution@sha256:b6ff37dff13f412bbfbe5243e7e0b14a4e2d2acba08d8519ef6f2dde6c2688e6
  • ghcr.io/burgan-tech/vnext/orchestrator@sha256:b4d2beb712c163b34ac63fabcd56ff4c2fa8f72cd2a8a1e69ac4a4dff4fc303b
  • ghcr.io/burgan-tech/vnext/init@sha256:e9911a939bce8a5deb71c90897f8bba6dfa1c2a8a8ca5b744310dc42b08f6591
  • ghcr.io/burgan-tech/vnext/inbox@sha256:08d1346eef0ffe2317a53960998994ae1d162c6ffde72c5daa938c0173b97094
  • ghcr.io/burgan-tech/vnext/outbox@sha256:d1c85672e0e01702c6f0c93fa6d133813db7d0339e0f8db9c999d6d8c7dec047
  • ghcr.io/burgan-tech/vnext/db-migrator@sha256:61cde53b26c7ac11909e374b1c6d91ed98ad79498eb59d3e626dd6b7c13e7aac

Tags (mutable, convenience)

docker pull ghcr.io/burgan-tech/vnext/execution:0.0.66
docker pull ghcr.io/burgan-tech/vnext/orchestrator:0.0.66
docker pull ghcr.io/burgan-tech/vnext/init:0.0.66
docker pull ghcr.io/burgan-tech/vnext/inbox:0.0.66
docker pull ghcr.io/burgan-tech/vnext/outbox:0.0.66
docker pull ghcr.io/burgan-tech/vnext/db-migrator:0.0.66

🔐 Supply Chain

  • OCI provenance & SBOM: pushed with the image (BuildKit provenance: mode=max, sbom: true).
  • GitHub build provenance: artifact attestation for this workflow run (identity, repo, workflow ref).
  • Cosign signature: each image signed by digest with keyless OIDC.

Verify Cosign signature (digest)

# Execution
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/execution@sha256:b6ff37dff13f412bbfbe5243e7e0b14a4e2d2acba08d8519ef6f2dde6c2688e6

# Orchestrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/orchestrator@sha256:b4d2beb712c163b34ac63fabcd56ff4c2fa8f72cd2a8a1e69ac4a4dff4fc303b

# Init
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/init@sha256:e9911a939bce8a5deb71c90897f8bba6dfa1c2a8a8ca5b744310dc42b08f6591

# Inbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/inbox@sha256:08d1346eef0ffe2317a53960998994ae1d162c6ffde72c5daa938c0173b97094

# Outbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/outbox@sha256:d1c85672e0e01702c6f0c93fa6d133813db7d0339e0f8db9c999d6d8c7dec047

# DbMigrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/db-migrator@sha256:61cde53b26c7ac11909e374b1c6d91ed98ad79498eb59d3e626dd6b7c13e7aac

Verify GitHub build provenance attestation

gh attestation verify oci://ghcr.io/burgan-tech/vnext/execution@sha256:b6ff37dff13f412bbfbe5243e7e0b14a4e2d2acba08d8519ef6f2dde6c2688e6    --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/orchestrator@sha256:b4d2beb712c163b34ac63fabcd56ff4c2fa8f72cd2a8a1e69ac4a4dff4fc303b  --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/init@sha256:e9911a939bce8a5deb71c90897f8bba6dfa1c2a8a8ca5b744310dc42b08f6591          --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/inbox@sha256:08d1346eef0ffe2317a53960998994ae1d162c6ffde72c5daa938c0173b97094        --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/outbox@sha256:d1c85672e0e01702c6f0c93fa6d133813db7d0339e0f8db9c999d6d8c7dec047      --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/db-migrator@sha256:61cde53b26c7ac11909e374b1c6d91ed98ad79498eb59d3e626dd6b7c13e7aac  --repo burgan-tech/vnext

🚀 Quick Start

Using Docker Compose:

version: '3.8'
services:
  execution:
    image: ghcr.io/burgan-tech/vnext/execution:0.0.66
    ports:
      - "5001:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
  orchestrator:
    image: ghcr.io/burgan-tech/vnext/orchestrator:0.0.66
    ports:
      - "5002:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - execution
  init:
    image: ghcr.io/burgan-tech/vnext/init:0.0.66
    ports:
      - "3005:3000"
    environment:
      - VNEXT_APP_URL=http://vnext-app:4201
      - PACKAGE_API_PORT=3005
      - DEFAULT_REGISTRY=https://registry.npmjs.org/
    depends_on:
      - orchestrator
  inbox:
    image: ghcr.io/burgan-tech/vnext/inbox:0.0.66
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator
  outbox:
    image: ghcr.io/burgan-tech/vnext/outbox:0.0.66
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator

🏷️ Available Tags

  • v0.0.66 - This release
  • latest - Latest stable release
  • release-v0.0 - Branch-specific build

🤖 Built from branch: release-v0.0
📝 Commit: 516442b
⏰ Build run: 76

What's Changed

  • fix(chain-reaper): open read-only UoW in flow-key discovery scope by @yilmaztayfun in #764
  • feat(observability): propagate root instance ID through nested subflow chains by @yilmaztayfun in #770
  • fix(extensions): isolate parallel extension fetches in separate DI scopes by @yilmaztayfun in #772
  • fix(middleware): replace EnableBuffering with MemoryStream in RawRequestBodyBufferingMiddleware by @yilmaztayfun in #774
  • Add state-level notification dispatch after transition settle by @yilmaztayfun in #777
  • v0.0.66 by @yilmaztayfun in #778

Full Changelog: v0.0.65...v0.0.66

Contributors

yilmaztayfun
Assets 2
Loading