Skip to content

Release v1.1.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Jul 16:27
v1.1.0
598b853
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bifrost v1.1.0

v1.1.0 makes local Solution development substantially more predictable, with local-first workflow resolution, coordinated authentication refresh, safer process lifecycle management, and clearer setup for protected workflow endpoints. This release contains 12 commits since v1.0.8.

Features

  • Added setup status and API-key generation for non-public Solution workflow endpoints (#455).
  • Added entity-centric access information and a dedicated Access tab to Solution Detail (#456).
  • Added --host and --public-url controls to bifrost solution start for external development proxies and browser-visible origins (#457).
  • Resolved workflow names, path::function references, and manifest UUIDs against local Solution files before considering an upstream workflow (#467).

Reliability

  • Coordinated concurrent authentication refreshes across the Solution proxy, local SDK workflows, environment credentials, and subsequent CLI processes (#474).
  • Added deterministic Vite readiness and port checks, concise npm failures, and reliable process-tree teardown on POSIX and Windows (#470).
  • Refreshed expired Solution development credentials and added a clear session-expired recovery state (#458).
  • Repointed scaffolded SDK download dependencies when starting against a different bound Bifrost instance (#471).
  • Reactivated orphaned workflows when they are replaced (#452).

Developer Experience

  • Made Solution commands locate the workspace root from nested directories, preserve null global org scope, fail loudly on vendoring errors, and confirm capture operations (#468).
  • Surfaced local workflow import errors and ambiguous references instead of silently running a deployed copy (#467).
  • Made the installable web SDK header responsive on narrow screens (#453).

Contributors

None in this release — solo-maintained cycle. Verified with the release contributor scan across all 12 landed PRs.

Fixed CVEs

None in this release. No landed commit or PR in the v1.0.8..v1.1.0 range identified a CVE, GHSA, or PYSEC advisory as fixed.

Breaking Changes

  • bifrost solution start no longer silently proxies a deployed Solution workflow when a local manifest UUID or local source import fails. Fix the local reference or import error; upstream fallback is available only when the Solution descriptor explicitly enables global_repo_access (#467).

Docker Images

API:

docker pull ghcr.io/gobifrost/bifrost-api:v1.1.0

Client:

docker pull ghcr.io/gobifrost/bifrost-client:v1.1.0

Type Stubs for IDEs

No standalone type-stub asset is included in v1.1.0. The release workflow found no stubs/bifrost.pyi or stubs/DISTRIBUTION.md files in this tag.

Signed artifacts (Sigstore / cosign — keyless)

Each release asset has a matching .sigstore bundle containing its keyless signature, certificate, and Rekor inclusion proof.

Verify the source tarball with cosign (>= v2.4):

cosign verify-blob \
  --bundle bifrost-v1.1.0-source.tar.gz.sigstore \
  --certificate-identity-regexp 'https://github\.com/gobifrost/bifrost/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  bifrost-v1.1.0-source.tar.gz

A SLSA build-provenance attestation is also published and verifiable with:

gh attestation verify bifrost-v1.1.0-source.tar.gz \
  --owner gobifrost
Assets 5
Loading