opendevops v0.1.2

v0.1.2 expands production deployment options while keeping the local executor and SQLite as the
defaults. It adds a production-capable remote executor topology, shared Postgres state, additional
LLM providers, external secret backends, and policy-gated cloud mutations.

Highlights

• Production-capable remote executor: requests route to dedicated
  staging/prod × ro/rw services. Signed decision tokens bind the environment, channel, and
  SSH host; executor pods reject identity mismatches before execution. ssh_run now uses the
  remote executor, so the agent process no longer needs the SSH key.
• Postgres control-plane storage: capability grants and dashboard chat can share a Postgres
  backend for multi-replica deployments. SQLite remains the default for local and single-replica
  installations.
• More model providers: provider configuration now supports Anthropic, OpenAI,
  OpenAI-compatible endpoints, Azure OpenAI, Google, and Amazon Bedrock, with optional dependency
  groups for non-default providers.
• External secret sources: {{secret:NAME}} values can come from environment variables,
  mounted files such as CSI volumes, or HashiCorp Vault KV v2.
• Curated cloud write policies: new AWS, Google Cloud, and Azure write packs allow dry-run
  operations and escalate non-dry-run mutations through the existing typed capability-grant flow.
• Dashboard grant wizard: the change-control UI now guides operators through proposal,
  approval, and activation, with clearer role gating, limits, and proposal details.

Upgrade notes

• Remote-executor deployments must replace the single executor.url setting with the complete
  executor.urls[environment][channel] map and set
  OPENDEVOPS_EXECUTOR_ENV/OPENDEVOPS_EXECUTOR_CHANNEL on every executor service.
• Cloud write packs require distinct credential_env_rw identities. Configure least-privilege
  write credentials or remove the write-pack files in read-only deployments.
• Postgres is opt-in through control_plane.backend: postgres and database_url_env. This release
  does not automatically migrate existing SQLite state.
• Install the relevant optional dependency group before selecting a non-Anthropic model provider:
  models-openai, models-google, or models-bedrock.

Install

uv tool install "opendevops[checkpoint,ssh]==0.1.2"

Deploy

curl -fLO \
  https://github.com/skundu42/opendevops/releases/download/v0.1.2/opendevops-deploy-0.1.2.tar.gz
tar -xzf opendevops-deploy-0.1.2.tar.gz
cd opendevops-0.1.2
cp .env.example .env

The deployment bundle pins ghcr.io/skundu42/opendevops:0.1.2 and supports linux/amd64 and
linux/arm64.

Full changelog: v0.1.1...v0.1.2