0.36.0

v0.36.0

5 changes · 4 New Features, 1 Chore · 23 points.

New Feature

• RADD-1128 Release pipeline on GitHub Actions: images to ghcr.io, GitHub releases with notes, SBOMs and vulnerability reports; Forgejo stops building
  A version tag builds on the Forgejo runner and publishes to the Forgejo registry; the release, its notes, SBOM and vulnerability assets are created through the Forgejo releases API by scripts/release_notes.py, release_assets.py and sbom_page.py. The deploy repo pulls from that registry with a read token and…
  ci github release · 5 pts · bfce09a6
• RADD-1129 GitHub connector module: webhook-driven commit and PR links, CI state, release sweep, and an API backfill
  The tracker's Version control tab, CI chips and release sweep are fed only by the Forgejo connector (spec 111). Once development lives on GitHub none of it fires. A GitHub connector with the same contract is both the missing piece of the move and the integration the September research asked to justify with demand…
  connectors github vcs · 8 pts · 76e10446
• RADD-1128 Release pipeline on GitHub Actions: images to ghcr.io, GitHub releases with notes, SBOMs and vulnerability reports; Forgejo stops building
  A version tag builds on the Forgejo runner and publishes to the Forgejo registry; the release, its notes, SBOM and vulnerability assets are created through the Forgejo releases API by scripts/release_notes.py, release_assets.py and sbom_page.py. The deploy repo pulls from that registry with a read token and…
  ci github release · 5 pts · 09de3eed
• RADD-1127 PR and main checks on GitHub Actions: pytest, ruff, tsc, vite, plugin builds, JS tests and the Chromium smoke
  No hosted check has ever run on a pull request. Forgejo executes the target branch's workflows for a fork PR and the only runner holds release credentials, so check.yaml was prepared in the September audit but never landed (ledger row C1, RADD-1120). A contributor's PR is validated by a maintainer pulling the head…
  ci github · 2 pts · 434d354a

Chore

• RADD-1125 Publishing model: full history to github.com/radd-hq/radd as a Forgejo push mirror, not an orphan commit
  What was wrong. docs/publishing.md prescribed a single squashed initial commit for the public repository because the history carried material that could not be published (an AD export with about a thousand real people, a real-content Jira sample, the origin organisation's name and hosts, a service secret). On 11 Sep…
  docs release · 3 pts · d04d0122

Changes from v0.35.0 to v0.36.0.

Pages

• SBOM 0.36.0

---

Mirrored from project.radd-hq.com on 2026-09-12. Documentation is written there; this copy is regenerated by scripts/publish_wiki.py and hand edits do not survive it.