Repository navigation
Security
- Move tokio to 1.54.1 for RUSTSEC-2026-0384, a race in
tokio::time::Interval(#247)
Added
- Rerun a finished playbook run from a task, reusing the tasks that passed. Available from the run page,
cruxand the API (#242) - Team workspaces with shareable team-scoped pages, and starred and active teams in the rail (#244)
Changed
- Run pods deliver and fetch evidence over a run-scoped token, and pod executors can rerun a playbook from a task (#243)
- Scope turn pods upload their pack and transcript on a pod token. The drop-box ingest route and its TokenReview auth are removed (#246)
Upgrade notes
- The controller applies migrations 0056 and 0057 on start. 0057 renames
run_tokenstopod_tokens. - Roll the controller and the loop/engine image together: contract 1.18.0 replaces the drop-box ingest variables with
CRUCIBLE_POD_TOKEN(#243, #246). - The controller no longer takes
--turn-service-account/CONTROLLER_TURN_SERVICE_ACCOUNTor--spoke-service-accounts/CONTROLLER_SPOKE_SERVICE_ACCOUNTS. Drop them from deployments; the flags are rejected at startup (#246).
Full Changelog: v0.5.0...v0.5.1