Grounded v0.2.2
Image
ghcr.io/ncecere/grounded:v0.2.2
ghcr.io/ncecere/grounded@sha256:7e6e44faed623890fbb020a100fd2505c589848de9be5b10d874f96f41dd5fb2
Deploy by digest. Verify the signature (keyless, GitHub Actions OIDC):
cosign verify ghcr.io/ncecere/grounded@sha256:7e6e44faed623890fbb020a100fd2505c589848de9be5b10d874f96f41dd5fb2 \
--certificate-identity-regexp '^https://github.com/ncecere/grounded/\.github/workflows/.+@refs/tags/v0.2.2$' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comThe OCR sidecar (optional, components/ocr-tesseract), signed the same way:
ghcr.io/ncecere/grounded-ocr:v0.2.2
ghcr.io/ncecere/grounded-ocr@sha256:226e51f2b4b100c130394acdf26e1c218a96c8b0e3b0f988e76532147ce9fa29
Release assets
grounded-v0.2.2-<os>-<arch>.sbom.spdx.json: the image's SBOM (SPDX JSON) for each platform, as attached to the image.grounded-v0.2.2.digest.txt: the image reference by digest.checksums.txt: SHA-256 of the files above (sha256sum -c checksums.txt).
The SBOM and build provenance are also attached to the image as attestations, which the signature covers:
docker buildx imagetools inspect ghcr.io/ncecere/grounded@sha256:7e6e44faed623890fbb020a100fd2505c589848de9be5b10d874f96f41dd5fb2 --format '{{ json .SBOM }}'.
Grounded v0.2.2
A small-fixes release after v0.2.1: no new features, no database migrations. The full list is in the changelog.
Fixes
- SystemOne connections test correctly. Admin → Connections → Test (and
grounded doctor) asked a SystemOne service for/models, which it doesn't serve, and reported a working connection as failing. A SystemOne connection is now tested with a small SystemOne request; OpenAI-compatible gateways are still tested withGET /models. - Withdraw a domain request. The person who asked, or a team admin or owner, can withdraw a pending request from Data sources → Crawl domains (
DELETE /v1/teams/{team}/domain-requests/{requestId}, audited ascrawl.domain_withdraw). - The admin Overview's Features card no longer squeezes the Evaluations description into a narrow column beside its switch.
- Team initials come from the first two words ("IT Help Desk" is IH, not ID).
- Components: the evaluation score chart labels 0%, 50% and 100%; the score has an accessible tooltip; small lists drop the Columns menu until a column is hidden; list search boxes show their label; single-choice filters no longer show a duplicate chip; menus open inside the page's landmarks; a citation card's "Show source" is a built-in action; the team spend tables hide less important columns on phones; Enter in a combobox never submits the surrounding form.
- Local development: Docker Compose services restart with Docker,
make deps-upalso starts the OCR sidecar when it's configured, andmake dev-upadds the fake model gateway.
Upgrading from v0.2.1
A rolling upgrade with no migrations. Change every ?ref=v0.2.1 in your overlay to ?ref=v0.2.2 and pin the new digests of ghcr.io/ncecere/grounded and, if you run OCR, ghcr.io/ncecere/grounded-ocr. The connection test response gains probe and systemOneModel (additive).
Verifying the images is as for v0.2.0, with the tag v0.2.2.