Skip to content

WolfStack v24.39.1

Choose a tag to compare

@github-actions github-actions released this 12 Jun 11:12
· 63 commits to master since this release

v24.39.1: top-bar cluster + node switcher — hop nodes from any page

Community request (piranha): the read-only scope pill in the header
becomes two dropdowns — cluster + node. Switching the node keeps you on
the current page (re-check the same setting across the fleet); changing
the cluster jumps to that cluster's first node. Node API calls already
route through apiUrl()'s proxy, so switching here re-targets the whole
page automatically — no backend change.

  • Fleet only (>=2 WolfStack nodes): single-node installs keep the original
    read-only pill unchanged (Golden Rule).
  • Theme-driven bg/text (guaranteed-contrast pairing on all 19 themes;
    hardcoded light-blue would fail 4.5:1 on light themes) with a blue
    scope-accent border. Options escaped (operator-set cluster names).
  • Switcher kept in sync on every node-list refresh via a signature guard
    (JSON.stringify) so a background poll can't collapse an open dropdown.

Reviewed (2 bugs fixed: signature collision, cluster-level page name
forwarded to a per-node view). Parse-checked; browser-untested at ship.


Verifying this release

Each binary is signed via cosign keyless OIDC (no key distribution — signing identity is the GitHub Actions workflow itself, anchored to the Sigstore Fulcio CA and the Rekor transparency log) and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfstack-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/wolfsoftwaresystemsltd/WolfStack/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfstack-x86_64

Verify the build provenance:

gh attestation verify wolfstack-x86_64 --repo wolfsoftwaresystemsltd/WolfStack

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

  • wolfstack-x86_64 / wolfstack-aarch64 — static musl binaries (Linux x86_64 and ARM64 / Raspberry Pi 4+).
  • wolfstack-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
  • SHA256SUMS — checksums for both binaries.

For per-version history see CHANGELOG.md.