v0.10.2

Fugaro v0.10.2

Install:

• Homebrew: brew install dimipaun/tap/fugaro
• Go: go install github.com/dimipaun/fugaro/cmd/fugaro@v0.10.2
• Or download an archive below and verify it against checksums.txt (see docs/release.md).

Highlights

• fugaro watch --keep and --keep-count now cover failed runs. Before, a longer window kept successes on screen for longer but a failed run still left the list after three minutes, so raising the window made a failure less visible than a success.
• A run is no longer falsely refused by the workflow guard. The guard that keeps agents out of .github/workflows now drops an unreadable base on its own instead of dropping every base, so a run is not blamed for a workflow file that a base branch it merged in already carried. A run's own workflow edit is still refused when both bases are in play, and a test pins that.
• fugaro plan graph refuses what it used to guess at. A document from a schema version this build does not read is refused, --done "" is refused, and a refusal names the file you passed rather than the path written inside it.
• The security page says what the credentials service's account can do. Its database role can read and write the whole installation database, including the stop switches and the policy, because database access by role has no path scope; the service's audit trail also records the one refusal it used to leave unrecorded.

For operators

1. Per machine — upgrade the CLI on every machine that runs Fugaro: brew upgrade dimipaun/tap/fugaro.
2. Per repo checkout — run fugaro upgrade, which pins the plugin to this release and refreshes the repository's job images.
3. Nothing in your cloud project changes by upgrading alone.

Known limits

• A graft file written by an agent can still get past the workflow guard's file list. Git honours a graft file even with replace objects switched off; GitHub's missing workflows permission still stops the push, and the guard closes this in the next patch.
• The release script's signal test fails on macOS. It passes in CI on Linux; it only affects someone running the script's own tests on a Mac.
• The credentials service stays dormant until an owner opts in, and its live checks (94 to 96 and 99) have not been run.

Changelog

• release notes: v0.10.2 highlights and end-user summary (#984)
• website: the fugaro.dev redesign (home reorganised, ornaments removed, Why GCP under Project) (#983)
• console: the Part C WSL tests follow Part D's distribution-name rule (#982)
• 0.10.2: the workflow guard's bounds drop one at a time, with the two-bound refusal pinned (#975)
• console L5b: the Spend screen's by-person view, from runs stats --json (#956)
• console on Windows via WSL, Part D: paths (T-D1…T-D6) (#979)
• mobile P4.1 T4: the ledger, the restart and the dedupe (#980)
• console on Windows, Part E: the credential boundary (#976)
• console: 0.10.2 review cleanups — a heading in one text run, corpora the CLI could print, and comments that say what the code does (#978)
• mobile P4.1 T2a: the outbound signature — a reply and a heartbeat are signed before they land (#977)
• 0.10.2: the credentials service's cleanups from the 0.10.1 reviews (#974)
• watch: --keep and --keep-count reach failed runs (0.10.2, #950) (#971)
• plan graph: refuse a foreign schema_version in Analyze, name the caller's path, and refuse --done "" (#973)
• mobile-release: on a failed identity read also print the token's account login and the variable NAMES EAS returns (never values) (#970)
• mobile-release: the mask step prints eas env:exec's own error text when the read fails (#969)
• console: the console releases from its own console-vX.Y.Z tag (#966)
• website: the v0.10.1 summary carries no backticks (the changelog page prints them literally) (#968)

Base images

Published by the images workflow for this tag:

• ghcr.io/dimipaun/fugaro-history:0.10.2 and ghcr.io/dimipaun/fugaro-history:0 (the sweeper and history job's image)
• ghcr.io/dimipaun/fugaro-base:0.10.2 and ghcr.io/dimipaun/fugaro-base:0 (one index for linux/amd64 and linux/arm64; per-architecture tags 0.10.2-amd64 and 0.10.2-arm64)
• ghcr.io/dimipaun/fugaro-credentials:0.10.2 and ghcr.io/dimipaun/fugaro-credentials:0 (the credentials service's image, linux/amd64; signed, with the nightly-immune 0.10.2-pinned tag fugaro update --provision-credentials resolves and verifies)

The images workflow then pulls each one with no login and fails if it is not public or lacks linux/amd64 (and, for fugaro-base, linux/arm64); each image's digest is in that run's summary.

The Terraform modules, the schemas and the plugin are versioned by this same tag.