v0.8.0 — Pulumi CLI 3.256.0

What's changed

• Pulumi CLI 3.255.0 → 3.256.0 — pinned version and per-arch SHA256 checksums updated everywhere (Makefile, template Dockerfile, kit specs, install scripts, docs) (#14)
• Release pins moved to v0.8.0: KIT_REF, sandbox.image, and doc examples reference the v0.8.0 artifacts (#15)

Full changelog: v0.7.0...v0.8.0

v0.7.0 — kubectl + Helm, one-flag sandbox kit, apt mirrors

Requires Docker Sandboxes (sbx) 0.38.0+.

Changes since v0.6.1

• kubectl 1.36.3 + Helm 4.2.3 (#10): pinned and verified against each vendor's published checksums, on both architectures. Cluster API endpoints and chart registries stay out of the egress allow-list on purpose; add yours per docs/network.md.
• One-flag sandbox kit (#9): ghcr.io/dirien/infrastructure-sandbox-kit is a kind: sandbox kit that pins the template image and carries the network rules, the Pulumi credential, setup and agent instructions. sbx run --kit ghcr.io/dirien/infrastructure-sandbox-kit:v0.7.0 infrastructure-sandbox . is the whole invocation.
• Ubuntu + Docker apt mirrors allowed (#7): plain apt-get update && apt-get install works inside the sandbox.
• ShellCheck gate (#6): all provisioning scripts pass a pinned ShellCheck v0.11.0 with four optional checks; CI enforces it on every scripts change. The arch-to-checksum case statements now refuse unverified installs on unknown arches.
• my-claude-apm-setup v0.6.2 (#8): adds the shellcheck-configuration skill; 34 skills materialize into the agent home.

Artifacts

• Sandbox kit (one flag): ghcr.io/dirien/infrastructure-sandbox-kit:v0.7.0
• Mixin kit: ghcr.io/dirien/infrastructure-kit:v0.7.0
• Template image: ghcr.io/dirien/infrastructure-sandbox:v0.7.0 (multi-arch: amd64 + arm64)

All four kit artifacts validated with sbx kit validate (sbx 0.38.0) before pushing.

sbx run --kit ghcr.io/dirien/infrastructure-sandbox-kit:v0.7.0 infrastructure-sandbox .

v0.6.1 — kit-spec v2, pinned APM CLI, multi-arch template

Requires Docker Sandboxes (sbx) 0.38.0+ — this release migrates the kit to the v2 spec schema.

Changes since v0.5.0

• Kit-spec v2 (#3): permissions.network.allow, a declarative credentials[] block for the Pulumi token, setup.install/setup.startup, agentInstructions, and a requires.agent: claude pin. The v2 loader is strict; v1 kits load via a legacy path.
• APM CLI pinned + verified (#4, #5): provisioning no longer installs "latest" apm — the CLI is fetched per-arch from GitHub releases at a pinned version (0.28.0) and checked against the published SHA256. Unpinned-latest broke every fresh install when apm 0.27 changed dependency resolution.
• Humanizer skill moved to its owner (#5): the skill is vendored inside my-claude-apm-setup v0.6.1; the kit just materializes the setup.
• Multi-arch template images (#4): tag and dispatch builds default to linux/amd64,linux/arm64, so the published template runs on Apple Silicon (previous tags were amd64-only and failed with "failed to run sandbox container" on arm64 hosts).

Artifacts

• Kit: ghcr.io/dirien/infrastructure-kit:v0.6.1 (validated with sbx 0.38.0)
• Template image: ghcr.io/dirien/infrastructure-sandbox:v0.6.1 (multi-arch, published by the build-image workflow)

sbx run --template ghcr.io/dirien/infrastructure-sandbox:v0.6.1 --kit ghcr.io/dirien/infrastructure-kit:v0.6.1 claude .

v0.5.0 — Pulumi, Terraform & code-intelligence skills

What's new

• my-claude-apm-setup bumped to v0.6.0 — the agent home now materializes 33 skills, newly including:
  • the eight official Pulumi skills from pulumi/agent-skills (pulumi/ plugin): package-usage, provider-upgrade, pulumi-automation-api, pulumi-best-practices, pulumi-component, pulumi-debug-failed-operation, pulumi-esc, pulumi-overview
  • antonbabenko/terraform-skill (Terraform/OpenTofu authoring, review, debugging)
  • its companion code-intelligence plugin from antonbabenko/agent-plugins
• context7 MCP server dropped from the kit (upstream change in v0.5.0 of the APM setup line).
• KIT_REF pinned to v0.5.0 for reproducible zero-build runs; README examples refreshed.

Artifacts

• Template image: ghcr.io/dirien/infrastructure-sandbox:v0.5.0 (built by the Build template image workflow)
• Kit: ghcr.io/dirien/infrastructure-kit:v0.5.0 (published by the Publish kit workflow)

Upgrading an existing sandbox

Kits/templates apply at create time only — sbx rm <sandbox> and recreate on the new version, or refresh the APM setup in place:

ISK_APM_SETUP_REF=v0.6.0 ISK_FORCE=1 ~/.local/share/infrastructure-sandbox-kit/scripts/provision.sh

v0.4.0

What's Changed

• chore: bump my-claude-apm-setup to v0.5.0, drop context7 MCP by @dirien in #1

New Contributors

• @dirien made their first contribution in #1

Full Changelog: v0.3.0...v0.4.0