Skip to content

v1.6.0 — Alpine 3.24, Governance Expansion & Tuesday Dependabot Schedule

Latest
Latest

Choose a tag to compare

View all tags
@hapheus hapheus released this 26 Oct 15:32
· 1 commit to main since this release
v1.6.0
7874c10
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Highlights

This release introduces an upgraded Alpine Linux 3.24 base image, configures Dependabot weekly update schedules to Tuesdays, expands project governance in CODEOWNERS, and hardens GitHub Actions workflow token permissions.

🛡️ Governance & Security

  • Expanded CODEOWNERS: Added @kuenstlichedummheit-sys (Felix) and @majorungustl (Gustav) to repository governance and security oversight alongside @hapheus and @MustermenschAlex (#49).
  • Workflow Hardening: Restricted top-level workflow token permissions to contents: read across all GitHub Actions workflows (#44).

📦 Base Image & Dependencies

  • Alpine Linux 3.24: Upgraded Docker base container to Alpine 3.24 with pinned SHA256 digest (#47).
  • Dependabot Schedule: Configured weekly maintenance runs to Tuesday across all package ecosystems (github-actions, uv, docker) (#46).

🔄 Compatibility Contract

  • 100% backward compatible drop-in replacement.
  • Unchanged port listeners (8118, 9050, 8080), environment variables (TORPROXY_*), and REST control API endpoints.
Assets 2
Loading