0.2.0-rc.2

Images

Image	Digest
ghcr.io/lockdep/stackradar-server:0.2.0-rc.2	sha256:1ca434401fd1f829bd560207d9fe9212d227521b93c6e03b49aeed5abbb45d8c
ghcr.io/lockdep/stackradar-client:0.2.0-rc.2	sha256:ba119d019898ee4a2ddfdb8561da23f12084fef862fb389c2bed168386265d54

Built for linux/amd64 and linux/arm64, signed with cosign (keyless). Verify with:

cosign verify \
  --certificate-identity-regexp '^https://github.com/lockdep/stackradar/.github/workflows/publish.yaml@refs/tags/v0.2.0-rc.2$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/lockdep/stackradar-server:0.2.0-rc.2

The attached stackradar-*-0.2.0-rc.2.cdx.json files are CycloneDX SBOMs of each image; checksums.txt lists the digests and the files' hashes.

Schema migrations

This release applies new migrations at start-up (MIGRATE_ON_START). Take a backup first (upgrading.md); a migrated database does not roll back by setting the previous tag.

Server:

• 0028_sync_state_progress.sql

Upgrading

• Helm: helm upgrade stackradar oci://ghcr.io/lockdep/helm-charts/stackradar -n stackradar -f my-values.yaml --set server.image.tag=0.2.0-rc.2,client.image.tag=0.2.0-rc.2 until the chart's appVersion moves to 0.2.0-rc.2.
• Docker Compose: docker compose pull && docker compose up -d, or STACKRADAR_TAG=0.2.0-rc.2 docker compose up -d to pin it.

---

What's Changed

Enhancements 🚀

• Show each feed's progress in the fresh-install banner (migration) by @mariusjor in #46
• Add a System tab to the admin page: versions, config, schema state by @mariusjor in #50
• Make the admin Overview a pipeline: scanner to KEV, one tile per stage by @mariusjor in #51
• Add the admin page's actions: retry, run a sync now, collect, rescan by @mariusjor in #52
• Group the admin tabs and manage platform admins from the Users tab by @mariusjor in #53

Bug Fixes 🐛

• Keep the hourly OSV sync from resetting a bootstrap in progress by @mariusjor in #47
• Show the community edition an admin page without the tenant surface by @mariusjor in #49

Other Changes

• Restructure the README and redraw the architecture figure by @mariusjor in #45
• Add fresh-local.sh: the quickstart on images built from the checkout by @mariusjor in #48

Full Changelog: v0.2.0-rc.1...v0.2.0-rc.2

0.2.0-rc.1

Images

Image	Digest
ghcr.io/lockdep/stackradar-server:0.2.0-rc.1	sha256:dbff62731ffd301e58913f2da0b85dce4914ef45d6e99dc852b86b6834cf5b59
ghcr.io/lockdep/stackradar-client:0.2.0-rc.1	sha256:48f78c689136429cb9ffbfa46756ec0b68de160c358b6ed032c9e5c96d706a62

Built for linux/amd64 and linux/arm64, signed with cosign (keyless). Verify with:

cosign verify \
  --certificate-identity-regexp '^https://github.com/lockdep/stackradar/.github/workflows/publish.yaml@refs/tags/v0.2.0-rc.1$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/lockdep/stackradar-server:0.2.0-rc.1

The attached stackradar-*-0.2.0-rc.1.cdx.json files are CycloneDX SBOMs of each image; checksums.txt lists the digests and the files' hashes.

Schema migrations

None since v0.1.0. This release rolls back by setting the previous tag.

Upgrading

• Helm: helm upgrade stackradar oci://ghcr.io/lockdep/helm-charts/stackradar -n stackradar -f my-values.yaml --set server.image.tag=0.2.0-rc.1,client.image.tag=0.2.0-rc.1 until the chart's appVersion moves to 0.2.0-rc.1.
• Docker Compose: docker compose pull && docker compose up -d, or STACKRADAR_TAG=0.2.0-rc.1 docker compose up -d to pin it.

---

What's Changed

Dependency Updates 🤖

• Bump @primer/primitives from 11.9.0 to 11.10.0 in /client by @dependabot[bot] in #39
• Bump react-icons from 5.5.0 to 5.7.0 in /client by @dependabot[bot] in #38
• Bump knip from 6.40.0 to 6.41.0 in /client by @dependabot[bot] in #37
• Bump posthog-js from 1.415.1 to 1.438.7 in /client by @dependabot[bot] in #32
• Bump semver and @types/semver in /server by @dependabot[bot] in #29
• Bump drizzle-orm from 0.45.2 to 0.45.4 in /server by @dependabot[bot] in #31
• Bump drizzle-kit from 0.31.8 to 0.31.11 in /server by @dependabot[bot] in #33
• Bump express from 5.2.1 to 5.3.0 in /server by @dependabot[bot] in #34
• Bump typescript-eslint from 8.71.0 to 8.71.1 in /server by @dependabot[bot] in #36
• Bump actions/setup-node from 4 to 7 by @dependabot[bot] in #30

Other Changes

• Document branch, commit and pull request conventions by @mariusjor in #27
• Forbid agent attribution lines in commits and pull requests by @mariusjor in #28
• Score the repository with OpenSSF Scorecard on every merge by @mariusjor in #40
• Upgrade eslint-config-next to 16.4.0 and satisfy its new hooks rules by @mariusjor in #41
• Vendor the OSV schema with the Raspberry Pi OS ecosystem by @mariusjor in #42
• Pin every workflow action by commit SHA and drop the syft curl|sh by @mariusjor in #43
• Clear the vulnerable transitive dependencies from both lockfiles by @mariusjor in #44

New Contributors

• @mariusjor made their first contribution in #27

Full Changelog: v0.1.0...v0.2.0-rc.1

0.1.0

Images

Image	Digest
ghcr.io/lockdep/stackradar-server:0.1.0	sha256:a6c8604d3beb611b7e4ce9199c0be66de738e3eea2f56bb4cc05bb610bde9a3f
ghcr.io/lockdep/stackradar-client:0.1.0	sha256:4bd03719ed4ed96dfe744cce624063abe016756df309a71218c54f056520c7f2

Built for linux/amd64 and linux/arm64, signed with cosign (keyless). Verify with:

cosign verify \
  --certificate-identity-regexp '^https://github.com/lockdep/stackradar/.github/workflows/publish.yaml@refs/tags/v0.1.0$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/lockdep/stackradar-server:0.1.0

The attached stackradar-*-0.1.0.cdx.json files are CycloneDX SBOMs of each image; checksums.txt lists the digests and the files' hashes.

Schema migrations

First release: a new install applies the whole migration chain on first start.

Upgrading

• Helm: helm upgrade stackradar oci://ghcr.io/lockdep/helm-charts/stackradar -n stackradar -f my-values.yaml --set server.image.tag=0.1.0,client.image.tag=0.1.0 until the chart's appVersion moves to 0.1.0.
• Docker Compose: docker compose pull && docker compose up -d, or STACKRADAR_TAG=0.1.0 docker compose up -d to pin it.

---

Full Changelog: https://github.com/lockdep/stackradar/commits/v0.1.0