Skip to content

v0.35.0

Choose a tag to compare

@colonel-byte-release-please colonel-byte-release-please released this 21 Oct 12:02
835ffe1

0.35.0 (2026-10-21)

⚠ BREAKING CHANGES

  • phase: trim the Manager surface nothing uses (#892)
  • api: drop unreferenced methods and the two SetPath cul-de-sacs (#889)
  • pkg: drop dead symbols across phase, coci, lint and utils (#888)
  • phase: remove the NoWait and Force globals nothing read (#886)
  • cmd: remove the --fapolicyd flag and config key nothing read (#885)
  • release: assemble the provider artifact with oras-go (#645)
  • tofu: converge a cluster through the cargoship_cluster resource (#618)

Features

  • docs: generate a provider reference from the tofu schemas (#644) (a7da3dd)
  • package: import an OCI Image Layout as a native package (#876) (c5b99d3)
  • phase: write fapolicyd allow rules for a package's executables (#875) (935faf6)
  • tofu: converge a cluster through the cargoship_cluster resource (#618) (60f7ae1)
  • tofu: define profiles and per-host overrides in the configuration (#622) (cd058b4)
  • tofu: override package values and route phase logs to tofu (#643) (e922ae2)
  • tofu: remove a single host from a cluster (#646) (364af84)

Bug Fixes

  • cmd: remove the --fapolicyd flag and config key nothing read (#885) (dc0ea26)
  • config: drop the config sections nothing reads (#879) (54143c4)
  • distro: release the etcd membership before deleting an upstream controller (#864) (82f6ef6)
  • phase: drain a node by the name the cluster calls it (#868) (8bb9c8c)
  • phase: prune the upload manifest when a stale upload is removed (#863) (079af70)
  • phase: remove the NoWait and Force globals nothing read (#886) (d97e7e6)

Refactoring

  • action: report what a constructor cannot build, and name the read-only run (#617) (7cbd141)
  • api: drop unreferenced methods and the two SetPath cul-de-sacs (#889) (08afc79)
  • cmd: drop unreachable logging plumbing and two inert flags (#887) (a0139a8)
  • drop four unused helpers from cmd and pkg/utils (#883) (6bc7f33)
  • internal: drop the unused split package (#884) (a1d7ef9)
  • node: drop the status helpers nothing calls (#882) (15170f2)
  • phase: share the node restart steps four phases each carried (#890) (5c6a535)
  • phase: trim the Manager surface nothing uses (#892) (921daa1)
  • pkg: drop dead symbols across phase, coci, lint and utils (#888) (36f48af)
  • pkg: drop two constructors nothing calls (#881) (9d03ced)
  • release: assemble the provider artifact with oras-go (#645) (2270546)

Documentation

  • config: name every setting in the sample config (#878) (3a1ef1e)
  • example: add a terragrunt layout and guide for the provider (#621) (f0ff407)
  • stop advertising cloud KMS key references on sign (#877) (ab5c211)

CI/CD

Build

Changelog

  • 122b4e2 build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16 (#874)
  • 237c3d8 build(deps): bump github.com/zarf-dev/zarf from 0.87.0 to 0.88.0 (#872)
  • f7d2ea5 build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.17.0 to 0.17.1 (#869)
  • 466581a build(deps): bump https://github.com/golangci/golangci-lint from v2.14.0 to 2.15.0 (#870)
  • dc1c159 build(deps): bump oras.land/oras-go/v2 from 2.6.3 to 2.6.4 (#871)
  • 835ffe1 chore(main): release 0.35.0 (#873)
  • f1698f7 ci(go): update from 1.27.2 to 1.27.3 (#893)
  • 3a1ef1e docs(config): name every setting in the sample config (#878)
  • f0ff407 docs(example): add a terragrunt layout and guide for the provider (#621)
  • ab5c211 docs: stop advertising cloud KMS key references on sign (#877)
  • a7da3dd feat(docs): generate a provider reference from the tofu schemas (#644)
  • c5b99d3 feat(package): import an OCI Image Layout as a native package (#876)
  • 935faf6 feat(phase): write fapolicyd allow rules for a package's executables (#875)
  • 60f7ae1 feat(tofu)!: converge a cluster through the cargoship_cluster resource (#618)
  • cd058b4 feat(tofu): define profiles and per-host overrides in the configuration (#622)
  • e922ae2 feat(tofu): override package values and route phase logs to tofu (#643)
  • 364af84 feat(tofu): remove a single host from a cluster (#646)
  • dc0ea26 fix(cmd)!: remove the --fapolicyd flag and config key nothing read (#885)
  • 54143c4 fix(config): drop the config sections nothing reads (#879)
  • 82f6ef6 fix(distro): release the etcd membership before deleting an upstream controller (#864)
  • d97e7e6 fix(phase)!: remove the NoWait and Force globals nothing read (#886)
  • 8bb9c8c fix(phase): drain a node by the name the cluster calls it (#868)
  • 079af70 fix(phase): prune the upload manifest when a stale upload is removed (#863)
  • 7cbd141 refactor(action): report what a constructor cannot build, and name the read-only run (#617)
  • 08afc79 refactor(api)!: drop unreferenced methods and the two SetPath cul-de-sacs (#889)
  • a0139a8 refactor(cmd): drop unreachable logging plumbing and two inert flags (#887)
  • a1d7ef9 refactor(internal): drop the unused split package (#884)
  • 15170f2 refactor(node): drop the status helpers nothing calls (#882)
  • 921daa1 refactor(phase)!: trim the Manager surface nothing uses (#892)
  • 5c6a535 refactor(phase): share the node restart steps four phases each carried (#890)
  • 36f48af refactor(pkg)!: drop dead symbols across phase, coci, lint and utils (#888)
  • 9d03ced refactor(pkg): drop two constructors nothing calls (#881)
  • 2270546 refactor(release)!: assemble the provider artifact with oras-go (#645)
  • 6bc7f33 refactor: drop four unused helpers from cmd and pkg/utils (#883)
  • 1e3354b test(e2e): drive the OpenTofu provider against containers and microvms (#839)

Verify release artifacts with Cosign

Release archives and container images are signed with Cosign.

Find the public key at cosign.pub

Verify a binary archive:

cosign verify-blob --key cosign.pub --bundle cargoship_Linux_x86_64.tar.gz.sigstore.json cargoship_Linux_x86_64.tar.gz

Verify a image tag:

cosign verify --key cosign.pub ghcr.io/colonel-byte/cargoship:v0.35.0