Release v0.12.0

What's Changed

• server: display agents on admin page by @max-privatevoid in #64
• rpc: make client-cert auth optional when a client CA is configured by @amaanq in #65
• build(deps): bump nixpkgs from f44f778 to 4100e83 by @dependabot[bot] in #54
• rpc: default client cert auth to optional by @amaanq in #67
• runner: fix feature-aware agent scheduling by @amaanq in #68
• server: restrict binary cache serving by @NotAShelf in #62
• nix: expose packages for every linux system by @amaanq in #72
• nix: drop perl from the agent build and token rendering by @amaanq in #73
• style: format tree with nix fmt by @amaanq in #74
• agent: fall back to system CA roots when tls.ca_file is unset by @amaanq in #75
• agent: batch log forwarding and freeze the outcome at child exit by @amaanq in #71
• evaluator: handle nixosConfigurations expressions by @amaanq in #76
• agent: cap per-build parallelism with a cores setting by @amaanq in #77
• agent: default to system roots when circus+tls has no [agent.tls] by @amaanq in #78
• Add push-forward control and centralize role-based authorization by @NotAShelf in #79
• Add sandboxed/rootless mode by @atagen in #80
• server: harden queue_bump errors; dedup the permission predicate by @amaanq in #83
• common: allow queue_runner.workers to be 0 by @max-privatevoid in #84
• queue-runner: capability-preserving builder selection by @amaanq in #86
• ci: fix vm-tests path filter for module changes by @amaanq in #87
• nix: make server unit requires conditional for split deployments by @plumj-am in #85
• ci: add merge_group trigger to all check workflows by @amaanq in #88
• ci: pre-build packages once for VM tests to share via cache by @amaanq in #89
• ci: include Rust sources in cache key so build-packages actually shares by @amaanq in #91
• nix: add statically linked musl agent package by @amaanq in #90
• queue-runner: tighten capability-scheduling edges by @amaanq in #93
• server: split webhook handlers by forge provider by @faukah in #94
• workflows: nix: build circus-admin and circus-agent-static, add S3 cache and Capability Scheduling tests by @faukah in #95
• Disable log timestamps in systemd units configured via NixOS modules by @max-privatevoid in #66
• queue-runner: match venue capabilities against the will-build closure by @amaanq in #92
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #96
• server: defer binary cache features to Harmonia by @NotAShelf in #82
• server: treat blank build filter params as absent by @amaanq in #103
• nix: add harmonia cargo vendor hash by @amaanq in #105
• dashboard: sort admin agents in place by @amaanq in #104
• various: ephemeral distributed build agents by @NotAShelf in #102
• Merge next branch into main by @NotAShelf in #112

New Contributors

• @atagen made their first contribution in #80
• @faukah made their first contribution in #94

Full Changelog: v0.11.0...v0.12.0