v0.7.0

What's Changed

• chore(deps): update upstream networkoptimizer by @renovate[bot] in #76
• chore(deps): update security actions by @renovate[bot] in #78
• chore(deps): update docker/dockerfile docker tag to v1.25 by @renovate[bot] in #80
• chore(deps): update github actions (major) by @renovate[bot] in #81
• chore(deps): update balena actions by @renovate[bot] in #79
• chore(deps): update golang image by @renovate[bot] in #77

Full Changelog: v0.6.0...v0.7.0

What's Changed

• chore(deps): update upstream networkoptimizer by @renovate[bot] in #76
• chore(deps): update security actions by @renovate[bot] in #78
• chore(deps): update docker/dockerfile docker tag to v1.25 by @renovate[bot] in #80
• chore(deps): update github actions (major) by @renovate[bot] in #81
• chore(deps): update balena actions by @renovate[bot] in #79
• chore(deps): update golang image by @renovate[bot] in #77

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• chore(deps): update balena actions to v2.3.0 by @renovate[bot] in #74
• chore(deps): update upstream networkoptimizer to v1.20.4 by @renovate[bot] in #73
• chore(deps): update pre-commit hooks to v10.5.0 by @renovate[bot] in #75

Full Changelog: v0.5.0...v0.6.0

What's Changed

• chore(deps): update balena actions to v2.3.0 by @renovate[bot] in #74
• chore(deps): update upstream networkoptimizer to v1.20.4 by @renovate[bot] in #73
• chore(deps): update pre-commit hooks to v10.5.0 by @renovate[bot] in #75

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• chore(deps): update pre-commit hook pre-commit/mirrors-eslint to v10.4.1 by @renovate[bot] in #61
• chore(deps): update balena-io/deploy-to-balena-action action to v2.2.12 by @renovate[bot] in #60
• ci: remove StepSecurity harden-runner from all workflows by @schubydoo in #62
• chore(deps): update golang image by @renovate[bot] in #64
• chore(deps): update upstream networkoptimizer to v1.19.2 by @renovate[bot] in #63
• chore(deps): update balena actions to v2.2.13 by @renovate[bot] in #70
• chore(deps): update upstream networkoptimizer to v1.19.5 by @renovate[bot] in #65
• chore(deps): update debian:bookworm-slim docker digest to 96e378d by @renovate[bot] in #66
• chore(deps): update github actions to v6.0.3 by @renovate[bot] in #71
• chore(deps): update dotnet images by @renovate[bot] in #67
• chore(deps): update golang image by @renovate[bot] in #68
• chore: stop Renovate PRs auto-requesting code-owner review by @schubydoo in #72
• chore(deps): update security actions by @renovate[bot] in #69

Full Changelog: v0.4.1...v0.5.0

What's Changed

• chore(deps): update pre-commit hook pre-commit/mirrors-eslint to v10.4.1 by @renovate[bot] in #61
• chore(deps): update balena-io/deploy-to-balena-action action to v2.2.12 by @renovate[bot] in #60
• ci: remove StepSecurity harden-runner from all workflows by @schubydoo in #62
• chore(deps): update golang image by @renovate[bot] in #64
• chore(deps): update upstream networkoptimizer to v1.19.2 by @renovate[bot] in #63
• chore(deps): update balena actions to v2.2.13 by @renovate[bot] in #70
• chore(deps): update upstream networkoptimizer to v1.19.5 by @renovate[bot] in #65
• chore(deps): update debian:bookworm-slim docker digest to 96e378d by @renovate[bot] in #66
• chore(deps): update github actions to v6.0.3 by @renovate[bot] in #71
• chore(deps): update dotnet images by @renovate[bot] in #67
• chore(deps): update golang image by @renovate[bot] in #68
• chore: stop Renovate PRs auto-requesting code-owner review by @schubydoo in #72
• chore(deps): update security actions by @renovate[bot] in #69

Full Changelog: v0.4.1...v0.5.0

v0.4.1

What's Changed

• chore(deps): update docker/setup-qemu-action digest to 0611638 by @renovate[bot] in #59
• chore(deps): update dependency ozark-connect/networkoptimizer to v1.17.18 by @renovate[bot] in #58

Full Changelog: v0.4.0...v0.4.1

What's Changed

• chore(deps): update docker/setup-qemu-action digest to 0611638 by @renovate[bot] in #59
• chore(deps): update dependency ozark-connect/networkoptimizer to v1.17.18 by @renovate[bot] in #58

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #45
• Retry apt install up to 3x in iperf-build stage (fixes flaky GHCR publish) by @schubydoo in #46
• Revert PR #45: StepSecurity action-mirror rewrite by @schubydoo in #48
• Cross-compile iperf3 in Dockerfile.ghcr to avoid QEMU emulation by @schubydoo in #47
• Cross-compile Go stages in Dockerfile.ghcr to avoid QEMU by @schubydoo in #49
• chore(deps): pin debian docker tag to 0104b33 by @renovate[bot] in #50
• Bump tonistiigi/binfmt to v10.2.1 and let Renovate track it by @schubydoo in #51
• Dockerfile optimizations: merge Go stages, simplify runtime, use COPY --chmod by @schubydoo in #52
• Add Dockerfile drift-check CI by @schubydoo in #53
• chore(deps): update security actions by @renovate[bot] in #57
• chore(deps): update dotnet images by @renovate[bot] in #56
• chore(deps): update docker actions by @renovate[bot] in #55
• chore(deps): update dependency ozark-connect/networkoptimizer to v1.17.5 by @renovate[bot] in #54

New Contributors

• @stepsecurity-app[bot] made their first contribution in #45

Full Changelog: v0.3.0...v0.4.0

What's Changed

• [StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #45
• Retry apt install up to 3x in iperf-build stage (fixes flaky GHCR publish) by @schubydoo in #46
• Revert PR #45: StepSecurity action-mirror rewrite by @schubydoo in #48
• Cross-compile iperf3 in Dockerfile.ghcr to avoid QEMU emulation by @schubydoo in #47
• Cross-compile Go stages in Dockerfile.ghcr to avoid QEMU by @schubydoo in #49
• chore(deps): pin debian docker tag to 0104b33 by @renovate[bot] in #50
• Bump tonistiigi/binfmt to v10.2.1 and let Renovate track it by @schubydoo in #51
• Dockerfile optimizations: merge Go stages, simplify runtime, use COPY --chmod by @schubydoo in #52
• Add Dockerfile drift-check CI by @schubydoo in #53
• chore(deps): update security actions by @renovate[bot] in #57
• chore(deps): update dotnet images by @renovate[bot] in #56
• chore(deps): update docker actions by @renovate[bot] in #55
• chore(deps): update dependency ozark-connect/networkoptimizer to v1.17.5 by @renovate[bot] in #54

New Contributors

• @stepsecurity-app[bot] made their first contribution in #45

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• Cross-build .NET stage on BUILDPLATFORM to fix GHCR arm/v7 by @schubydoo in #32
• chore(deps): update dependency esnet/iperf to v3.21 by @renovate[bot] in #33
• Map Renovate updates to Change-type trailers; cover Dockerfile.ghcr by @schubydoo in #35
• Make release.yml manually triggered; range-scan Change-type trailers by @schubydoo in #38
• chore(deps): update dependency esnet/iperf to v3.21 by @renovate[bot] in #37
• chore(deps): update dependency ozark-connect/networkoptimizer to v1.16.10 by @renovate[bot] in #36
• chore(workflows): Add Dockerfile.template to trivyignore for speedtest by @schubydoo in #39
• chore(deps): update docker/dockerfile docker tag to v1.24 by @renovate[bot] in #26
• Fix upstream repo URL typo: OzarkConnect -> Ozark-Connect by @schubydoo in #40
• Pin Docker base images by digest via Renovate (Scorecard PinnedDependencies) by @schubydoo in #41
• chore(deps): pin dependencies by @renovate[bot] in #42
• chore(deps): pin dependencies by @renovate[bot] in #43
• chore(deps): pin golang docker tag to 91eda97 by @renovate[bot] in #44

Full Changelog: v0.2.2...v0.3.0

What's Changed

• Cross-build .NET stage on BUILDPLATFORM to fix GHCR arm/v7 by @schubydoo in #32
• chore(deps): update dependency esnet/iperf to v3.21 by @renovate[bot] in #33
• Map Renovate updates to Change-type trailers; cover Dockerfile.ghcr by @schubydoo in #35
• Make release.yml manually triggered; range-scan Change-type trailers by @schubydoo in #38
• chore(deps): update dependency esnet/iperf to v3.21 by @renovate[bot] in #37
• chore(deps): update dependency ozark-connect/networkoptimizer to v1.16.10 by @renovate[bot] in #36
• chore(workflows): Add Dockerfile.template to trivyignore for speedtest by @schubydoo in #39
• chore(deps): update docker/dockerfile docker tag to v1.24 by @renovate[bot] in #26
• Fix upstream repo URL typo: OzarkConnect -> Ozark-Connect by @schubydoo in #40
• Pin Docker base images by digest via Renovate (Scorecard PinnedDependencies) by @schubydoo in #41
• chore(deps): pin dependencies by @renovate[bot] in #42
• chore(deps): pin dependencies by @renovate[bot] in #43
• chore(deps): pin golang docker tag to 91eda97 by @renovate[bot] in #44

Full Changelog: v0.2.2...v0.3.0

v0.2.2

What's Changed

• Renovate: track pre-commit, group harden-runner, modernize match rules by @schubydoo in #22
• Drop package-lock.json handling from release.yml by @schubydoo in #23
• Pin older QEMU for GHCR multi-arch build (.NET arm/v7 SIGABRT) by @schubydoo in #24
• chore(config): migrate Renovate config by @renovate[bot] in #25
• chore(deps): update golang docker tag to v1.26 by @renovate[bot] in #27
• chore(deps): update pre-commit hooks by @renovate[bot] in #28
• chore(deps): update github actions (major) by @renovate[bot] in #29
• chore(deps): update github/codeql-action action to v4 by @renovate[bot] in #30
• chore(deps): update pre-commit hooks (major) by @renovate[bot] in #31
• Add HEALTHCHECK to speedtest container by @schubydoo in #16

New Contributors

• @renovate[bot] made their first contribution in #25

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• Fix prod deploy trigger: tag push, not release event by @schubydoo in #4
• Add security policy, code owners, PR template, and README credits by @schubydoo in #6
• Add Renovate for automated dependency updates by @schubydoo in #7
• Promote to sw.block and move balena.yml to repo root by @schubydoo in #8
• Optimize Dockerfile builds for better layer caching by @schubydoo in #9
• Add full CI/CD pipeline and supply-chain security by @schubydoo in #10
• Fix post-launch workflow and build failures by @schubydoo in #12
• Renovate cleanup + Trivy Code Scanning category fix by @schubydoo in #13
• Add build-validation workflow as a reliable PR gate by @schubydoo in #14
• [StepSecurity] Apply security best practices by @step-security-bot in #15
• Harden CI: release.yml token scope + balena API host allowlist by @schubydoo in #17
• Use javascript-typescript CodeQL language by @schubydoo in #18
• Add actions language to CodeQL matrix by @schubydoo in #19
• Add workflow_dispatch trigger to CodeQL by @schubydoo in #20
• Use WORKDIR instead of RUN cd for iperf3 build by @schubydoo in #21

New Contributors

• @step-security-bot made their first contribution in #15

Full Changelog: v0.2.0...v0.2.1

v0.2.0

First multi-arch source-built balena port.

Highlights

• Builds for amd64, arm64, and armv7 from upstream source pinned at v1.15.10
• Configuration via balena fleet/device variables (no compose env blocks)
• start.sh wrappers apply upstream-parity defaults and map friendly env names to .NET dotted forms
• Tini wraps both entrypoints for clean signal propagation

Validated end-to-end on arm64 test fleet

• Local WAN speedtest: ~900 Mbps (890.6 down / 941.6 up)
• Gateway WAN speedtest via UniFi SSH: ~2.1 Gbps (2122.4 down / 2135.8 up)
• Binary version stamping confirmed (1.15.10)
• Hash-based gateway binary self-update working (mismatch detected → upload → verify)

Notes

• amd64 and armv7 builds passed CI; runtime untested but use the identical Dockerfile path
• Operators must set APP_PASSWORD, HOST_IP, HOST_NAME via balena variables