Skip to content

Release v1.0.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Jun 00:25
v1.0.7
26ea64d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bifrost v1.0.7

This release tightens the new Solution authoring model so local development stays attached to a specific Solution install instead of accidentally writing into the shared/global workspace.

What's Changed

  • Added the bifrost solution create workflow for new Solution workspaces: it writes bifrost.solution.yaml, creates the empty remote install, and binds the workspace in local .env.
  • Kept bifrost solution init as a transparent alias for the same create-and-bind flow.
  • Added bifrost solution bind --solution <id-or-unique-slug> for cloned workspaces or existing installs; it binds local .env without creating anything remotely.
  • Made bifrost solution start require a bound install and pass the bound Solution/org context through local data-plane calls, so tables/configs/files/workflows resolve inside the intended Solution scope.
  • Bumped the Bifrost Claude/Codex plugin manifests to 1.0.7.
  • Stabilized the standalone v2 app bootstrap test that was racing the intentionally failing dynamic import path.

Documentation

Verification

  • Local release check passed: clean tree, no existing v1.0.7 tag, on main, and backend unit tests passed (5081 passed, 2 skipped).
  • Tag CI passed for v1.0.7: client unit tests, backend unit tests, lint/type check, both E2E shards, image build/push/sign/attest, and release creation.

Docker Images

API:

docker pull ghcr.io/gobifrost/bifrost-api:v1.0.7

Client:

docker pull ghcr.io/gobifrost/bifrost-client:v1.0.7

Type Stubs for IDEs

Download bifrost.pyi from the assets below and place it in your workspace directory for IDE autocomplete and type checking support.

See DISTRIBUTION.md for instructions.

Signed artifacts (Sigstore / cosign — keyless)

Each release asset has a matching .sigstore bundle (Sigstore's
self-contained signature + certificate + Rekor inclusion proof,
produced via keyless OIDC — no maintainer-held keys involved).

Verify with cosign (>= v2.4):

cosign verify-blob \
  --bundle bifrost-v1.0.7-source.tar.gz.sigstore \
  --certificate-identity-regexp 'https://github\.com/gobifrost/bifrost/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  bifrost-v1.0.7-source.tar.gz

A SLSA build-provenance attestation is also published and verifiable via:

gh attestation verify bifrost-v1.0.7-source.tar.gz \
  --owner gobifrost
Assets 5
Loading