Repository navigation
v9.0.0
9.0.0 (2026-10-27)
Features
BREAKING CHANGES
-
Remove spec.ui from new publications. Explicitly apply the verified release CRD before upgrading workloads: helm show crds ./release-chart.tgz > release-crds.yaml; kubectl apply -f release-crds.yaml. Helm rollback leaves this CRD installed; full schema rollback explicitly applies the previous verified release CRD. Follow docs/ui-admission-upgrade.md and verify the live rule and product readiness.
-
test: align installed admission and release migration checks
Part of #443. Select the actual consumer-approved image signer from the released CD workflow, retain signature/absence guards before fixture schema changes, and check both protocols against the delivered policy. Preserve the appearance negative control and full signed historical rollback coverage. Correct the source helper mode, documentation link/indentation, and reviewed historical-schema guidance.
-
chore: Apply megalinter fixes
-
test: preserve released admission schema capture bytes
Part of #443. Keep the signed v8 schema capture as raw test input, with its original checksum and real API-server validation unchanged. Preserve the formatter changes to ordinary JSON reports and tables after comparing parsed values, recording raw and formatted report digests. No formatter or admission check is disabled.
- test: preserve status semantics through workload rollouts
Part of #443. Keep complete stored status observations and exact equality across the CRD-only step. During real workload revisions, compare all status content while requiring valid nondecreasing condition transition timestamps and current-generation readiness. Add 56 behavioral controls that reproduce the prior false rejection and reject lost or changed status, altered specifications, replaced identities and malformed or backwards clocks.
- test: preserve phase-ordered UI migration status