You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Upgrade notes
Releases need an NPM_TOKEN secret: the release gate fails without it (RELEASING.md).
Added
npx @dshakes/halo: the release workflow's new npm job repackages the verified release archives as @dshakes/halo (a Node launcher) and one @dshakes/halo-<os>-<arch> package per platform, published with npm provenance. CI builds the packages from the snapshot release and runs halo version through them. Releases now need an NPM_TOKEN secret (RELEASING.md).
Documentation
README capability table, docs site and diagrams cover v0.5.0: admin credentials, scoped RBAC, external signing keys and FIPS, the OpenAPI document, promotion PRs, notifiers, the Helm ops kit, fleet sizing and compliance mapping. New guide for the Terraform and OpenTofu provider (dshakes/halos, separate repository). The release-pipeline, trust-zones, security-boundaries and architecture diagrams show key URIs (file, AWS KMS, external signer) instead of a fixed ed25519 key.
