Release v0.0.76

BBT Workflow v0.0.76

🐳 Published Docker Images

Immutable digests (preferred for trust)

Tags can move; these digests cannot. Signatures and provenance refer to these references.

• ghcr.io/burgan-tech/vnext/execution@sha256:7d5bb87863e9e2cb8dd43d9e3e094ec858b2732e25bcb3342e42528149a68df1
• ghcr.io/burgan-tech/vnext/orchestrator@sha256:834103998fe75b4859987421501467a595ac069caa10e181648d69ab404aeb98
• ghcr.io/burgan-tech/vnext/init@sha256:72a91e3b494dafe485953c7e00b1b5ac209ce14153af9e68f764da041283ac01
• ghcr.io/burgan-tech/vnext/inbox@sha256:669ba9dc92f8c3f301ac7053f44b76c6dc4e1ebd7798b4a0f429cdf5acdbdf6c
• ghcr.io/burgan-tech/vnext/outbox@sha256:228737fc708008080004d736930681932597a10cac2d052098de2b23cf18788c
• ghcr.io/burgan-tech/vnext/db-migrator@sha256:dd5d4547c2ef486aee1a62d057278f771ee7980c2882a563b0849381ae8559e1

Tags (mutable, convenience)

docker pull ghcr.io/burgan-tech/vnext/execution:0.0.76
docker pull ghcr.io/burgan-tech/vnext/orchestrator:0.0.76
docker pull ghcr.io/burgan-tech/vnext/init:0.0.76
docker pull ghcr.io/burgan-tech/vnext/inbox:0.0.76
docker pull ghcr.io/burgan-tech/vnext/outbox:0.0.76
docker pull ghcr.io/burgan-tech/vnext/db-migrator:0.0.76

🔐 Supply Chain

• OCI provenance & SBOM: pushed with the image (BuildKit provenance: mode=max, sbom: true).
• GitHub build provenance: artifact attestation for this workflow run (identity, repo, workflow ref).
• Cosign signature: each image signed by digest with keyless OIDC.

Verify Cosign signature (digest)

# Execution
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/execution@sha256:7d5bb87863e9e2cb8dd43d9e3e094ec858b2732e25bcb3342e42528149a68df1

# Orchestrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/orchestrator@sha256:834103998fe75b4859987421501467a595ac069caa10e181648d69ab404aeb98

# Init
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/init@sha256:72a91e3b494dafe485953c7e00b1b5ac209ce14153af9e68f764da041283ac01

# Inbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/inbox@sha256:669ba9dc92f8c3f301ac7053f44b76c6dc4e1ebd7798b4a0f429cdf5acdbdf6c

# Outbox
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/outbox@sha256:228737fc708008080004d736930681932597a10cac2d052098de2b23cf18788c

# DbMigrator
cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "https://github.com/burgan-tech/vnext/.github/workflows/build-and-publish-images.yml@.*" \
  ghcr.io/burgan-tech/vnext/db-migrator@sha256:dd5d4547c2ef486aee1a62d057278f771ee7980c2882a563b0849381ae8559e1

Verify GitHub build provenance attestation

gh attestation verify oci://ghcr.io/burgan-tech/vnext/execution@sha256:7d5bb87863e9e2cb8dd43d9e3e094ec858b2732e25bcb3342e42528149a68df1    --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/orchestrator@sha256:834103998fe75b4859987421501467a595ac069caa10e181648d69ab404aeb98  --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/init@sha256:72a91e3b494dafe485953c7e00b1b5ac209ce14153af9e68f764da041283ac01          --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/inbox@sha256:669ba9dc92f8c3f301ac7053f44b76c6dc4e1ebd7798b4a0f429cdf5acdbdf6c        --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/outbox@sha256:228737fc708008080004d736930681932597a10cac2d052098de2b23cf18788c      --repo burgan-tech/vnext
gh attestation verify oci://ghcr.io/burgan-tech/vnext/db-migrator@sha256:dd5d4547c2ef486aee1a62d057278f771ee7980c2882a563b0849381ae8559e1  --repo burgan-tech/vnext

🚀 Quick Start

Using Docker Compose:

version: '3.8'
services:
  execution:
    image: ghcr.io/burgan-tech/vnext/execution:0.0.76
    ports:
      - "5001:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
  orchestrator:
    image: ghcr.io/burgan-tech/vnext/orchestrator:0.0.76
    ports:
      - "5002:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - execution
  init:
    image: ghcr.io/burgan-tech/vnext/init:0.0.76
    ports:
      - "3005:3000"
    environment:
      - VNEXT_APP_URL=http://vnext-app:4201
      - PACKAGE_API_PORT=3005
      - DEFAULT_REGISTRY=https://registry.npmjs.org/
    depends_on:
      - orchestrator
  inbox:
    image: ghcr.io/burgan-tech/vnext/inbox:0.0.76
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator
  outbox:
    image: ghcr.io/burgan-tech/vnext/outbox:0.0.76
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
    depends_on:
      - orchestrator

🏷️ Available Tags

• v0.0.76 - This release
• latest - Latest stable release
• release-v0.0 - Branch-specific build

---

🤖 Built from branch: release-v0.0
📝 Commit: 32876ff
⏰ Build run: 87

What's Changed

• refactor(instances): treat wizard states like normal states in State/View functions by @yilmaztayfun in #838
• fix(transitions): normalize request headers case-insensitively by @yilmaztayfun in #841
• feat(functions): varyKey cache-key helper + config-driven vary-by by @yldz-eren in #839
• fix(resource-lock): idempotent release, automatic terminal cleanup, a… by @yldz-eren in #840
• fix(events): accept content-type-less and octet-stream event bodies by @yilmaztayfun in #843
• feat(tasks): add Dapr Conversation (AI/LLM) task type (#334) by @yilmaztayfun in #844
• fix(subflow): retryable 503 + per-subInstance lock key for terminal-outcome propagation by @yilmaztayfun in #845
• refactor(workflow): consolidate flow-level functionCache under a config object by @yilmaztayfun in #846
• fix(functions): preserve author Content-Type without charset suffix by @yilmaztayfun in #847
• Fix/init mappings support for publish by @enginkopan in #848
• v0.0.76 by @yilmaztayfun in #849

Full Changelog: v0.0.75...v0.0.76