Repository navigation
v0.35.0
0.35.0 (2026-10-21)
⚠ BREAKING CHANGES
- phase: trim the Manager surface nothing uses (#892)
- api: drop unreferenced methods and the two SetPath cul-de-sacs (#889)
- pkg: drop dead symbols across phase, coci, lint and utils (#888)
- phase: remove the NoWait and Force globals nothing read (#886)
- cmd: remove the --fapolicyd flag and config key nothing read (#885)
- release: assemble the provider artifact with oras-go (#645)
- tofu: converge a cluster through the cargoship_cluster resource (#618)
Features
- docs: generate a provider reference from the tofu schemas (#644) (a7da3dd)
- package: import an OCI Image Layout as a native package (#876) (c5b99d3)
- phase: write fapolicyd allow rules for a package's executables (#875) (935faf6)
- tofu: converge a cluster through the cargoship_cluster resource (#618) (60f7ae1)
- tofu: define profiles and per-host overrides in the configuration (#622) (cd058b4)
- tofu: override package values and route phase logs to tofu (#643) (e922ae2)
- tofu: remove a single host from a cluster (#646) (364af84)
Bug Fixes
- cmd: remove the --fapolicyd flag and config key nothing read (#885) (dc0ea26)
- config: drop the config sections nothing reads (#879) (54143c4)
- distro: release the etcd membership before deleting an upstream controller (#864) (82f6ef6)
- phase: drain a node by the name the cluster calls it (#868) (8bb9c8c)
- phase: prune the upload manifest when a stale upload is removed (#863) (079af70)
- phase: remove the NoWait and Force globals nothing read (#886) (d97e7e6)
Refactoring
- action: report what a constructor cannot build, and name the read-only run (#617) (7cbd141)
- api: drop unreferenced methods and the two SetPath cul-de-sacs (#889) (08afc79)
- cmd: drop unreachable logging plumbing and two inert flags (#887) (a0139a8)
- drop four unused helpers from cmd and pkg/utils (#883) (6bc7f33)
- internal: drop the unused split package (#884) (a1d7ef9)
- node: drop the status helpers nothing calls (#882) (15170f2)
- phase: share the node restart steps four phases each carried (#890) (5c6a535)
- phase: trim the Manager surface nothing uses (#892) (921daa1)
- pkg: drop dead symbols across phase, coci, lint and utils (#888) (36f48af)
- pkg: drop two constructors nothing calls (#881) (9d03ced)
- release: assemble the provider artifact with oras-go (#645) (2270546)
Documentation
- config: name every setting in the sample config (#878) (3a1ef1e)
- example: add a terragrunt layout and guide for the provider (#621) (f0ff407)
- stop advertising cloud KMS key references on sign (#877) (ab5c211)
CI/CD
Build
- deps: bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16 (#874) (122b4e2)
- deps: bump github.com/zarf-dev/zarf from 0.87.0 to 0.88.0 (#872) (237c3d8)
- deps: bump https://github.com/astral-sh/ruff-pre-commit from v0.17.0 to 0.17.1 (#869) (f7d2ea5)
- deps: bump https://github.com/golangci/golangci-lint from v2.14.0 to 2.15.0 (#870) (466581a)
- deps: bump oras.land/oras-go/v2 from 2.6.3 to 2.6.4 (#871) (dc1c159)
Changelog
- 122b4e2 build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16 (#874)
- 237c3d8 build(deps): bump github.com/zarf-dev/zarf from 0.87.0 to 0.88.0 (#872)
- f7d2ea5 build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.17.0 to 0.17.1 (#869)
- 466581a build(deps): bump https://github.com/golangci/golangci-lint from v2.14.0 to 2.15.0 (#870)
- dc1c159 build(deps): bump oras.land/oras-go/v2 from 2.6.3 to 2.6.4 (#871)
- 835ffe1 chore(main): release 0.35.0 (#873)
- f1698f7 ci(go): update from 1.27.2 to 1.27.3 (#893)
- 3a1ef1e docs(config): name every setting in the sample config (#878)
- f0ff407 docs(example): add a terragrunt layout and guide for the provider (#621)
- ab5c211 docs: stop advertising cloud KMS key references on sign (#877)
- a7da3dd feat(docs): generate a provider reference from the tofu schemas (#644)
- c5b99d3 feat(package): import an OCI Image Layout as a native package (#876)
- 935faf6 feat(phase): write fapolicyd allow rules for a package's executables (#875)
- 60f7ae1 feat(tofu)!: converge a cluster through the cargoship_cluster resource (#618)
- cd058b4 feat(tofu): define profiles and per-host overrides in the configuration (#622)
- e922ae2 feat(tofu): override package values and route phase logs to tofu (#643)
- 364af84 feat(tofu): remove a single host from a cluster (#646)
- dc0ea26 fix(cmd)!: remove the --fapolicyd flag and config key nothing read (#885)
- 54143c4 fix(config): drop the config sections nothing reads (#879)
- 82f6ef6 fix(distro): release the etcd membership before deleting an upstream controller (#864)
- d97e7e6 fix(phase)!: remove the NoWait and Force globals nothing read (#886)
- 8bb9c8c fix(phase): drain a node by the name the cluster calls it (#868)
- 079af70 fix(phase): prune the upload manifest when a stale upload is removed (#863)
- 7cbd141 refactor(action): report what a constructor cannot build, and name the read-only run (#617)
- 08afc79 refactor(api)!: drop unreferenced methods and the two SetPath cul-de-sacs (#889)
- a0139a8 refactor(cmd): drop unreachable logging plumbing and two inert flags (#887)
- a1d7ef9 refactor(internal): drop the unused split package (#884)
- 15170f2 refactor(node): drop the status helpers nothing calls (#882)
- 921daa1 refactor(phase)!: trim the Manager surface nothing uses (#892)
- 5c6a535 refactor(phase): share the node restart steps four phases each carried (#890)
- 36f48af refactor(pkg)!: drop dead symbols across phase, coci, lint and utils (#888)
- 9d03ced refactor(pkg): drop two constructors nothing calls (#881)
- 2270546 refactor(release)!: assemble the provider artifact with oras-go (#645)
- 6bc7f33 refactor: drop four unused helpers from cmd and pkg/utils (#883)
- 1e3354b test(e2e): drive the OpenTofu provider against containers and microvms (#839)
Verify release artifacts with Cosign
Release archives and container images are signed with Cosign.
Find the public key at cosign.pub
Verify a binary archive:
cosign verify-blob --key cosign.pub --bundle cargoship_Linux_x86_64.tar.gz.sigstore.json cargoship_Linux_x86_64.tar.gzVerify a image tag:
cosign verify --key cosign.pub ghcr.io/colonel-byte/cargoship:v0.35.0