Release v0.0.71

BBT Workflow v0.0.71

🐳 Published Docker Images

Immutable digests (preferred for trust)

Tags can move; these digests cannot. Signatures and provenance refer to these references.

• ghcr.io/burgan-tech/vnext/execution@sha256:02c464cf3ceaa51d7777c097529a98814e30623cbcc9065d1931279c3d6e3376
• ghcr.io/burgan-tech/vnext/orchestrator@sha256:9bd08168a4a08efe01a5058da476542a0cd5a4c3284565a99ce2b0eb5cda6474
• ghcr.io/burgan-tech/vnext/init@sha256:38909d1000fd18a6a7061f7804f163e991258559f888c40f7dd41291aeab695d
• ghcr.io/burgan-tech/vnext/inbox@sha256:d86025cbc482a4335e55c12d07ec6f26e433abb1eb4aadba5e64c994616c873d
• ghcr.io/burgan-tech/vnext/outbox@sha256:3a321f6f2ccb0cf6f6e0a16e75aa676fa4a29563dab18d296ba4a2f05491ad8a
• ghcr.io/burgan-tech/vnext/db-migrator@sha256:d1e3cbbc70a26577190a2166c221dfe83b288aab5d2c7b83cee4d6ad7443081b

Tags (mutable, convenience)

docker pull ghcr.io/burgan-tech/vnext/execution:0.0.71
docker pull ghcr.io/burgan-tech/vnext/orchestrator:0.0.71
docker pull ghcr.io/burgan-tech/vnext/init:0.0.71
docker pull ghcr.io/burgan-tech/vnext/inbox:0.0.71
docker pull ghcr.io/burgan-tech/vnext/outbox:0.0.71
docker pull ghcr.io/burgan-tech/vnext/db-migrator:0.0.71

🔐 Supply Chain

• OCI provenance & SBOM: pushed with the image (BuildKit provenance: mode=max, sbom: true).
• GitHub build provenance: artifact attestation for this workflow run (identity, repo, workflow ref).
• Cosign signature: each image signed by digest with keyless OIDC.

Verify Cosign signature (digest)

# Execution
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/execution@sha256:02c464cf3ceaa51d7777c097529a98814e30623cbcc9065d1931279c3d6e3376

# Orchestrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/orchestrator@sha256:9bd08168a4a08efe01a5058da476542a0cd5a4c3284565a99ce2b0eb5cda6474

# Init
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/init@sha256:38909d1000fd18a6a7061f7804f163e991258559f888c40f7dd41291aeab695d

# Inbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/inbox@sha256:d86025cbc482a4335e55c12d07ec6f26e433abb1eb4aadba5e64c994616c873d

# Outbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/outbox@sha256:3a321f6f2ccb0cf6f6e0a16e75aa676fa4a29563dab18d296ba4a2f05491ad8a

# DbMigrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/db-migrator@sha256:d1e3cbbc70a26577190a2166c221dfe83b288aab5d2c7b83cee4d6ad7443081b

Verify GitHub build provenance attestation

gh attestation verify oci://ghcr.io/burgan-tech/vnext/execution@sha256:02c464cf3ceaa51d7777c097529a98814e30623cbcc9065d1931279c3d6e3376    --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/orchestrator@sha256:9bd08168a4a08efe01a5058da476542a0cd5a4c3284565a99ce2b0eb5cda6474  --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/init@sha256:38909d1000fd18a6a7061f7804f163e991258559f888c40f7dd41291aeab695d          --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/inbox@sha256:d86025cbc482a4335e55c12d07ec6f26e433abb1eb4aadba5e64c994616c873d        --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/outbox@sha256:3a321f6f2ccb0cf6f6e0a16e75aa676fa4a29563dab18d296ba4a2f05491ad8a      --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/db-migrator@sha256:d1e3cbbc70a26577190a2166c221dfe83b288aab5d2c7b83cee4d6ad7443081b  --repo burgan-tech/vnext

🚀 Quick Start

Using Docker Compose:

version: '3.8'
services:
  execution:
    image: ghcr.io/burgan-tech/vnext/execution:0.0.71
    ports:
      - "5001:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
  orchestrator:
    image: ghcr.io/burgan-tech/vnext/orchestrator:0.0.71
    ports:
      - "5002:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - execution
  init:
    image: ghcr.io/burgan-tech/vnext/init:0.0.71
    ports:
      - "3005:3000"
    environment:
      - VNEXT_APP_URL=http://vnext-app:4201
      - PACKAGE_API_PORT=3005
      - DEFAULT_REGISTRY=https://registry.npmjs.org/
    depends_on:
      - orchestrator
  inbox:
    image: ghcr.io/burgan-tech/vnext/inbox:0.0.71
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator
  outbox:
    image: ghcr.io/burgan-tech/vnext/outbox:0.0.71
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator

🏷️ Available Tags

• v0.0.71 - This release
• latest - Latest stable release
• release-v0.0 - Branch-specific build

---

🤖 Built from branch: release-v0.0
📝 Commit: 27ad409
⏰ Build run: 82

What's Changed

• Harden workflow resilience, terminal propagation, and distributed locking by @yilmaztayfun in #820
• feat(functions): add master function returning instance master schema by @yilmaztayfun in #822
• feat(tasks): add GetInstanceTask trigger task type (#806) by @yilmaztayfun in #823
• Fix GetInstance invoker encoding and error handling by @yilmaztayfun in #824
• feat(cacheaside): keyMapping (compute key / bypass) + GetInstanceData… by @yldz-eren in #814
• feat: add full form-urlencoded payload support by @yilmaztayfun in #826
• Change Interaction by @tsimsekburgan in #827
• feat: user-controlled Content-Type, 202 Accepted for async ops, and clearer script errors by @yilmaztayfun in #828
• v0.0.71 by @yilmaztayfun in #829

Full Changelog: v0.0.70...v0.0.71