v0.11.0

What's Changed

• chore: pin vertra 0.10.0 in the catalog template by @github-actions[bot] in #205
• feat: rename Vertra to Vennir by @rburns629 in #206

Full Changelog: v0.10.0...v0.11.0

v0.10.0

What's Changed

• chore: pin vertra 0.9.0 in the catalog template by @github-actions[bot] in #203
• feat(catalog): per-team build Environments (buildEnvironments) by @rburns629 in #204

Full Changelog: v0.9.0...v0.10.0

v0.9.0

What's Changed

• docs: the repository map says a scheduler pass is two transactions by @rburns629 in #80
• chore: pin vertra 0.8.0 in the catalog template by @github-actions[bot] in #81
• fix(console): a bot belongs to the one team that made it by @rburns629 in #82
• fix(console): a catalog release registers products only in the teams it names by @rburns629 in #83
• fix(console): products are registered by the catalog or an admin, not a team's maintainers by @rburns629 in #84
• fix(gateway): a request's path can't stop traffic from being recorded by @rburns629 in #86
• fix(kernel): steps held by a cap or key don't keep others from being claimed by @rburns629 in #87
• fix(console): a chat model's key and the console's cloud identity go only where they were given for by @rburns629 in #88
• fix(helm): the console may run only its image scans and catalog verifications as Jobs by @rburns629 in #89
• fix(helm): the kernel's processes sign in to the bundled Postgres as a role of their own by @rburns629 in #90
• fix(cli): the AWS catalog publish role trusts a job of its Environment only on main by @rburns629 in #91
• fix(console): numeric settings are checked when it starts by @rburns629 in #93
• fix(console): audit retention keeps what isn't copied yet, and isn't mistaken for tampering by @rburns629 in #94
• fix(console): single sign-on linking an existing account makes it the only way in by @rburns629 in #95
• fix(console): purging a team deletes its single sign-on mappings and schedules by @rburns629 in #96
• fix(gateway): callers are checked as at the console: admin-set single sign-on, ordering bots, purged teams by @rburns629 in #97
• fix(kernel): a cancelled execution's tasks can't be retried, and a failed one's waiting tasks aren't in the queue by @rburns629 in #98
• fix(helm): the policies' kept lists are written as JSON strings, so an apostrophe can't break an upgrade by @rburns629 in #99
• fix(console): single sign-on's session is taken only by the tab that started the sign-in by @rburns629 in #92
• fix(console): a bot's run isn't approved by whoever made the bot something to act with by @rburns629 in #85
• fix(console): a run's approvers are worked out before the kernel has it by @rburns629 in #100
• fix(console): no bot's keyless identity may overlap another bot's by @rburns629 in #101
• fix: an API may only use an in-cluster backend in its own team's namespace by @rburns629 in #102
• fix(helm): a Group purger's members are held to the purge guard too by @rburns629 in #103
• fix: the gateway's token fence bounds audience and lifetime, and -api is reserved for APIs by @rburns629 in #104
• fix(helm): a step's container is held to what the executor builds, and hardened per container by @rburns629 in #105
• fix(helm): the sleeper may only suspend, resume and reschedule its CronJobs (H-7) by @rburns629 in #106
• docs: what a platform namespace shared with a team gives up (H-9) by @rburns629 in #107
• fix(helm): the bundled databases' passwords are kept with their volumes (H-10) by @rburns629 in #108
• fix(gateway): a path naming no API served here is counted under api="-" (G-7) by @rburns629 in #109
• fix(gateway): a rotated-out session key stops working within a minute, on both listeners (G-8) by @rburns629 in #110
• fix(gateway): what an API's OpenAPI document doesn't declare isn't forwarded (G-5) by @rburns629 in #111
• fix(console): a schedule due in the hour the clocks repeat runs once (D-4) by @rburns629 in #112
• fix(console): one console at a time makes each delivery pass (C-6) by @rburns629 in #113
• fix(console): the resource recorder pages past runs that haven't finished (D-6) by @rburns629 in #114
• fix(cli): destroy keeps only what's in the state (L-3) by @rburns629 in #116
• fix(ci): the proto check covers the kernel's generated code too (X-3) by @rburns629 in #117
• fix(cli): the aws check asks the region chosen, not only its list (M-2) by @rburns629 in #121
• fix(catalog-template): http-check's token goes only to the URL it was given (T-1) by @rburns629 in #129
• fix(cli): no AWS install keeps the account's GitHub OIDC provider in its state, so its destroy can't delete it from under others (M-3) by @rburns629 in #118
• fix(cli): a location group the gcp check can't read isn't a refusal (M-1) by @rburns629 in #119
• fix(cli): the cost screen prices the platform nodes its requests need, not always one (M-5) by @rburns629 in #120
• fix(cli): a catalog release pins each product to the signed image of its own commit, and :latest moves only once signed (T-6) by @rburns629 in #123
• fix(console): the first admin's password is never printed, so no log keeps it (L-2) by @rburns629 in #124
• fix(ci): the release scans what it pushes, can't half-publish a version, and only runs on main's tags (X-1, X-5, X-6) by @rburns629 in #125
• fix(catalog-template): the gcp samples install pyasn1 0.6.5 or later by @rburns629 in #134
• fix(catalog-template): gitleaks and Semgrep gate publishing, and the README says which checks main's ruleset requires (T-5) by @rburns629 in #126
• test(cli): the fake tofu answers a bare state list, as Forget now asks by @rburns629 in #135
• fix(console): each person may ask the chat agent 30 questions an hour and 200 a day, and bots none (D-5) by @rburns629 in #115
• fix(cli): the AWS catalog grant compares the reader's role before changing it, and leaves another reader's alone unless --replace (M-4) by @rburns629 in #122
• fix(catalog-template): a retried create waits for what it found to be ready (T-3) by @rburns629 in #130
• fix(catalog-template): s3-bucket is tagged as it's made, and a retry finishes its setup (T-4) by @rburns629 in #131
• fix(catalog-template): app-hosting deploys the team's images, as the team's runtime account (T-7) by @rburns629 in #132
• fix(cli): every chart vertra installs is checked by its SHA-256 first, and kind's registry runs by digest (L-4) by @rburns629 in #127
• fix(ci): Go code gets Semgrep's Go rules and govulncheck (X-2) by @rburns629 in #128
• fix(kernel,console,catalog-template): a sample's cleanup deletes only what it made for the team its run is for (T-2) by @rburns629 in #133
• test(console): the stuck-run test starts the recorder's cursor from the oldest by @rburns629 in #136
• docs: the v* tag ruleset is in place, and vertra checks the charts it installs by @rburns629 in #137
• fix(console): the database pool is at least two connections by @rburns629 in #138
• fix(cli): the console's AWS audit copy is create-only by IAM, not only by its own request (M-6) by @rburns629 in #139
• fix(cli): Secrets vertra writes are applied server-side, so no plaintext copy lands in their last-applied annotation (L-7) by @rburns629 in #146
• fix(cli): the cost screen leaves out the Postgres Pod a managed database doesn't run, and names what it doesn't price (M-8) by @rburns629 in #150
• fix(console): a check that couldn't start shows a plain sentence, not the platform's error (C-8) by @rburns629 in #140
• fix(console): a scan's verdict is recorded only by the reconcile whose Job it still is, and a failed one outlives its image (D-8, D-9) by @rburns629 in #142
• fix(cli): a catalog's schemas resolve only references within themselves, never a file or URL (L-10) by @rburns629 in #148
• fix(helm): the gateway's image can be pinned by digest, as the console's can (H-14) by @rburns629 in https://github.com/rbur...

v0.8.0

What's Changed

• fix: from the r7 run, build-image's tag lookup for an image in a folder, and what holds completion lag on GKE by @rburns629 in #74
• chore: pin vertra 0.7.0 in the catalog template by @github-actions[bot] in #73
• feat: the samples say their clouds by @rburns629 in #75
• fix: a pass records what finished, and commits it, before it dispatches by @rburns629 in #76
• fix: policy-controller checks a step's Pod, not its Job, so dispatch never waits on it by @rburns629 in #77
• feat: the Admin page's image sources say added sources don't run where signed images are required by @rburns629 in #78
• docs: keep Google's query API for Observe's alerts on GKE by @rburns629 in #79

New Contributors

• @github-actions[bot] made their first contribution in #73

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• chore(deps): Bump github.com/pb33f/libopenapi from 0.41.6 to 0.41.7 in /cli in the cli-go group by @dependabot[bot] in #57
• chore(deps): Bump github.com/pb33f/libopenapi from 0.41.6 to 0.41.7 in /gateway in the gateway-go group by @dependabot[bot] in #58
• chore(deps): Bump the console-npm group across 1 directory with 5 updates by @dependabot[bot] in #59
• perf on a cloud cluster; the billed proof run's results and findings by @rburns629 in #60
• fix(cli): a generated admin password is saved to a file, never printed by @rburns629 in #61
• fix(cli): catalog create works from a release, and past what stopped it in the billed run by @rburns629 in #62
• fix: from the billed run, apply's screen, ESO's absence and a TLS restart by @rburns629 in #63
• fix: from the billed run, the gateway's problems, who may call, readiness's submitter and a refused SecretStore by @rburns629 in #64
• fix: from the billed run, an alert for steps with no node, and why a step's container never finished by @rburns629 in #65
• fix: from the billed run, the gcp samples' retries and grants, the SBOM's subject, volumes in the cost, and the template's pin by @rburns629 in #66
• feat: a product says which clouds' installs it's for by @rburns629 in #67
• fix: the gcp samples write a result when signing in fails or a wait ends, and don't retry a build that failed by @rburns629 in #68
• fix: a step waiting for a node isn't read again until its Pod changes by @rburns629 in #69
• perf: an admin's Teams page reads every other team in one call by @rburns629 in #70
• fix: gcp/build-image waits on the build an earlier attempt left running by @rburns629 in #71
• feat: Observe's alerts on GKE's managed Prometheus by @rburns629 in #72

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• Update CLA.md by @r0bett in #31
• fix(ci): the CLA bot's commit message without an unfilled placeholder by @rburns629 in #32
• chore(deps-dev): Bump @types/node from 24.13.3 to 26.6.5 in /console/frontend by @dependabot[bot] in #23
• chore(deps): Bump the console-npm group across 1 directory with 13 updates by @dependabot[bot] in #30
• chore(deps-dev): Bump @types/node from 22.20.1 to 26.6.5 in /console by @dependabot[bot] in #22
• feat(console): help everywhere, the Ask panel, the collapsed sidebar (boards 13a–13d) by @rburns629 in #35
• feat(console): the redesigned Teams pages (boards 10a–10d) by @rburns629 in #33
• feat(console): the redesigned APIs and Observe pages (boards 11a–11f) by @rburns629 in #36
• feat(console): the redesigned Runs pages (boards 9f–9i) by @rburns629 in #34
• feat(console): the redesigned Admin page (boards 12a–12i) by @rburns629 in #37
• feat(console): the redesigned Home, Catalog, Cart, Compose and Products (boards 9a–9e) by @rburns629 in #38
• feat(console): Ask Vertra about a failed run, from its failure card by @rburns629 in #39
• feat(console): what the redesigned pages left out, group 1 by @rburns629 in #40
• fix: the review's security and data-loss findings (curl injection, Compose drafts, What runs made, the audit copy) by @rburns629 in #41
• fix(console): the review's wrong-information and lost-state findings by @rburns629 in #42
• fix(console): the Teams pages ask for less, and a few at a time by @rburns629 in #43
• feat: the four gaps the guides found (API access, Can't serve, keyless bots, editing schedules) by @rburns629 in #44
• feat: Observe shows the install's alerts, from any Prometheus by @rburns629 in #45
• fix(console): the series alerts measure start at zero, so a first burst fires by @rburns629 in #46
• feat(console): what the redesigned pages left out, group 2 by @rburns629 in #47
• feat: what the redesigned pages left out, group 3 by @rburns629 in #48
• feat(samples): aws's caller-identity signs in to AWS with its product token by @rburns629 in #49
• fix: Postgres restarting no longer crashes the console or stalls the scheduler by @rburns629 in #50
• perf: phase 3, readers in the driver, and what it found by @rburns629 in #51
• feat: per-team usage, on Observe's Usage tab and the Teams page by @rburns629 in #52
• docs(todo): per-team usage is built by @rburns629 in #53
• perf: a create that timed out but happened, seen for real, and adopted by @rburns629 in #54
• fix(make): pkill and pgrep no longer match their own shell on Linux by @rburns629 in #55
• fix(console): one registry blip no longer refuses a tag for a minute by @rburns629 in #56

New Contributors

• @r0bett made their first contribution in #31
• @rburns629 made their first contribution in #32

Full Changelog: v0.5.2...v0.6.0

v0.5.2

Full Changelog: v0.5.1...v0.5.2

v0.5.1

Full Changelog: v0.5.0...v0.5.1

v0.5.0

Full Changelog: v0.4.0...v0.5.0

v0.4.0

Full Changelog: v0.3.2...v0.4.0