106 releases 124 tags

RSS feed

• v0.63.1 1c84e95d0f

  Compare

  v0.63.1 Stable

  release-bot released this 2026-09-08 01:21:51 +02:00 | 1 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • readme-pin-check: splits mirror availability from digest grading; rejects placeholder image digests before opening adopter pin PRs (#1463).
  • fragment-check: coverage and density now post as separate named contexts (#1465).
  • record-landing-review: rejects repeated review/comment pages before runner timeout (#1469).

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    22 downloads · 2026-09-08 01:21:19 +02:00 · 81 B
  • checksums.txt.minisig
    22 downloads · 2026-09-08 01:21:19 +02:00 · 308 B
  • rt-linux-amd64
    5 downloads · 2026-09-08 01:21:19 +02:00 · 10 MiB
• v0.63.0 b3cef90517

  Compare

  v0.63.0 Stable

  release-bot released this 2026-09-07 23:46:08 +02:00 | 12 commits to main since this release

  Added

  • adoption: mirror-release.yml gains a guarded force_recreate (#1426).

  Changed

  None.

  Fixed

  • adoption: a corrected release note now reaches the public mirror (#1426).
  • release-state: v0.62.4 is recorded in the manifest, so the release gate stops refusing every push (#1444).
  • prepared-uncut-check: published interrupted cuts now name manifest-only recovery and correct SHA/time semantics (#1452).
  • fragment-check: local runs now refuse with COULD-NOT-GRADE when PR coverage inputs are absent (#1456).
  • decide: the pending-cut message no longer recommends a destructive recovery on a shipped release (#1457)
  • release gate: digest-pin-verify distinguishes stale anchors from wrong tags (#1458)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • ci: the drift report now reopens its tracker before commenting (#1348)
  • docs: the integration guide's adoption path carries no historical asides (#1407)
  • fix: the worked-example provenance check no longer reports a documented section as undocumented (#1421)
  • internal: the Status rule says which numbers it is about (#1423).
  • docs: six passages no longer assume the reader knows our internal vocabulary (#1427)
  • test: the cut path's doc-staging step is now covered (#1438)
  • ci: mirror-drift-check now grades the newest release instead of excluding it permanently (#1445)
  • internal: manifest pushes retry on concurrent base advances; fail closed on unchanged, non-linear, unrelated, conflicting, or repeated rejection (#1447).
  • internal: anchor-check now runs in the pull-request docs gate and preserves could-not-grade diagnostics (#1451).
  • internal: pull-request docs checks now reject tags whose action image digest is still the all-zero placeholder (#1453).

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    14 downloads · 2026-09-07 23:45:28 +02:00 · 81 B
  • checksums.txt.minisig
    14 downloads · 2026-09-07 23:45:28 +02:00 · 308 B
  • rt-linux-amd64
    4 downloads · 2026-09-07 23:45:28 +02:00 · 10 MiB
• v0.62.4 e45075a121

  Compare

  v0.62.4 Stable

  release-bot released this 2026-09-07 18:54:29 +02:00 | 45 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • docs: three in-document links now reach the sections they name (#1431)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • ci: the public-link checker now runs on a schedule instead of only when someone remembers (#1420)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    1 download · 2026-09-07 18:55:23 +02:00 · 81 B
  • checksums.txt.minisig
    1 download · 2026-09-07 18:55:23 +02:00 · 308 B
  • rt-linux-amd64
    1 download · 2026-09-07 18:55:23 +02:00 · 10 MiB
• v0.62.3 fe6d53c953

  Compare

  v0.62.3 Stable

  release-bot released this 2026-09-07 09:30:46 +02:00 | 52 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  None.

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • internal: an arm holds the README Status rule (#1401).
  • docs: the integration guide answers its hardest questions where a reader can reach them (#1407)
  • internal: the integration guide names no ungraded version (#1415).

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    3 downloads · 2026-09-07 09:28:19 +02:00 · 81 B
  • checksums.txt.minisig
    3 downloads · 2026-09-07 09:28:19 +02:00 · 308 B
  • rt-linux-amd64
    2 downloads · 2026-09-07 09:28:19 +02:00 · 10 MiB
• v0.62.2 ab167b99fb

  Compare

  v0.62.2 Stable

  release-bot released this 2026-09-07 02:30:33 +02:00 | 59 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • examples: the drop-in workflows now resolve as copied (#1402)
  • README: the Status section names one version, and it is the only kind that stays true (#1403)
  • docs: the positioning describes the access model we have, and two false visibility claims are corrected (#1404)
  • docs: every git.frankenbit.de link in the adopter-facing docs resolves for a public reader, and a check fetches them (#1414)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • internal: the mirror caller's header no longer claims a caller that does not exist (#1392).
  • internal: prepare no longer writes to README.md (#1411).
  • conventions: a link from a CHANGELOG entry into the tree must pin a commit, not a branch (#1417)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    3 downloads · 2026-09-07 02:29:53 +02:00 · 81 B
  • checksums.txt.minisig
    3 downloads · 2026-09-07 02:29:53 +02:00 · 308 B
  • rt-linux-amd64
    2 downloads · 2026-09-07 02:29:53 +02:00 · 10 MiB
• v0.62.1 17022c3ad5

  Compare

  v0.62.1 Stable

  release-bot released this 2026-09-06 23:42:45 +02:00 | 76 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  None.

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • internal: the adopter-pin PR is now opened by a credential that lets it be graded (#1393).
  • internal: the adopter-pin PR can now pass the repo's own required gates (#1394).

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    3 downloads · 2026-09-06 23:42:09 +02:00 · 81 B
  • checksums.txt.minisig
    3 downloads · 2026-09-06 23:42:09 +02:00 · 308 B
  • rt-linux-amd64
    2 downloads · 2026-09-06 23:42:09 +02:00 · 10 MiB
• v0.62.0 b6b5208bde

  Compare

  v0.62.0 Stable

  release-bot released this 2026-09-06 22:10:37 +02:00 | 82 commits to main since this release

  Added

  • gates: preflight-push-whitelist grades a split-pair deploy-key push instead of always warning (#1105).
  • adopters: a dispatch exercises rt adopter-preflight from a gitea.com consumer (#1259).
  • gates: base divergence now reports a pull-request status for merge readiness (#1275)
  • new check: rt review-eligibility reports whether the authenticated reviewer's approval counts (#1277)
  • ci: post-merge Go failures page the landing PR with both adjacent commits (#1278)
  • new gate: refuse a v1.0.0 cut while ADR-0001 still reads accepted (#1292)
  • ci: records the commit an official review named beside the object Forgejo lands after replay (#1299)
  • gates: rt cut-fragment-coverage-check refuses a cut that leaves a fragment on its base (#1305)
  • new check: rt cancelled-context-check distinguishes a cancelled task from a genuine refusal on a failing status context (#1309)
  • new check: pre-push grades its local-gate table against the live required-context set (#1327)
  • adoption: rt readme-pin-check grades the README's version pins against the mirror (#1345).
  • security: a SHA-pinned consumer's second checkout now resolves through that SHA (#336)

  Changed

  • PR CI: gates build the tree a PR will land on, not the tree it was pushed as (#1195).
  • PR CI: the landing-tree replay names the base SHA it graded and what it does not cover (#1195).

  Fixed

  • adoption: the README named a version the mirror cannot serve (#1068).
  • adopter-preflight-probe: the run's verdict is now readable after the fact (#1259).
  • release checks: marker counts and value grading now stay aligned over canonical baked workflows (#1267).
  • tests: the second hook-credential scan gets the same sentinels and pre-assertion (#1295).
  • base-divergence-check: the PASS line names the base SHA it graded and says the status does not re-run when the base moves (#1307).
  • gates: the push preflights no longer pass when direct push is disabled entirely (#1313).
  • integration guide: the org-scope runner check is not 2xx, not == 403 (#1317)
  • README + integration guide: the uses: line depends on where the toolkit lives (#1321)
  • ci: the shared-tree guard refused to grade an unreadable outcome instead of waving it through (#1323)
  • pre-push: the declaration list is graded against the required set, so a dead entry cannot hide a gap (#1333)
  • review-eligibility: an unreported approval-whitelist flag is could-not-grade, not disabled (#1342)
  • gates: mirror-drift-check's red now reaches someone, and its two modes stay apart (#1348).
  • docs: the Quick start names the forge axis, so a Gitea adopter is not sent to .forgejo/ (#1350).
  • gates: prepared-uncut-check tells manifest drift from an uncut release (#1356).
  • release-state: the manifest still named v0.61.0 after v0.61.1 was cut (#1356).
  • adopters: rt adopter-preflight exits 2 when it could read nothing at all (#1357).
  • build-ref-check: names a runner label that exists, so the workflow can actually run (#1361).
  • forgejo: the shared pagination walk stops only on an empty page (#1374)
  • adopter-preflight: grades runners on Gitea, where the shapes differ in two places (#1374)
  • ci: every runs-on job carries a timeout-minutes bound, and a gate refuses a workflow that drops one (#1375)
  • adoption: the README's adopter pins are set by the mirror, not by the cut (#1378).
  • docs: identify base-divergence-check as an advisory pull-request workflow gate (#1381)
  • adoption: the pin gate grades the integration guide and the examples too (#1382).
  • forgejo: a forge that repeats pages is no longer reported as a large one (#1385)
  • release decision: manifest-free prerelease bootstrap now follows the detected tag lineage (#623).

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • ci: the consolidated gate job now attests that its nine gate steps actually ran (#1253).
  • ci: the five per-workflow toolkit-self gate jobs are removed (#1253).
  • ci: the consolidated gate job now enforces that its nine gates leave the shared tree alone (#1253).
  • Post-merge pager: pin transport and malformed-response refusals in the shell PR lookup. (#1301)
  • Forgejo reads: pin transport failures and malformed merge-SHA lookup responses as refusals instead of silent no-PR fallbacks. (#1301)
  • base-divergence-check: an arm executes the grading step's rc contract, so removing pipefail reddens (#1306).
  • base-divergence-check: the advisory-not-required decision is recorded in the verb's own doc comment (#1312).
  • internal: pre-push's local-gate table drops a context retired by #1320 (#1322).
  • pre-push: runPrePush's exit-status decisions are pinned (#1335).
  • tests: the tag-truncation control's fixture now models the hazard, so a tag assertion carries it (#1364)
  • internal: add an exact-head review submit gate and document the HOLD convention (#1383)
  • ci: the gitea wire probe settles paging without assuming a stable row order (#1374)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    3 downloads · 2026-09-06 22:10:01 +02:00 · 81 B
  • checksums.txt.minisig
    3 downloads · 2026-09-06 22:10:01 +02:00 · 308 B
  • rt-linux-amd64
    2 downloads · 2026-09-06 22:10:01 +02:00 · 10 MiB
• v0.61.1 5cf2067e99

  Compare

  v0.61.1 Stable

  release-bot released this 2026-09-06 12:42:09 +02:00 | 182 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • tests: the tier-3 hook-credential leak scan no longer fails on a branch name (#1295).

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • ci: the five duplicated toolkit-self gate jobs are consolidated into one (#1253).
  • versioning policy: the stale "latest release" literal is gone, and the rule replacing it is stated once (#1283)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    1 download · 2026-09-06 12:43:23 +02:00 · 81 B
  • checksums.txt.minisig
    1 download · 2026-09-06 12:43:23 +02:00 · 308 B
  • rt-linux-amd64
    1 download · 2026-09-06 12:43:23 +02:00 · 10 MiB
• v0.61.0 e3cfb57e03

  Compare

  v0.61.0 Stable

  release-bot released this 2026-09-06 12:22:01 +02:00 | 191 commits to main since this release

  Added

  • release: rt status-context-check refuses an unclassified posted context (#1177)
  • cli: rt adopter-preflight reports every missing adopter prerequisite in one run (#1236).

  Changed

  None.

  Fixed

  • forgejo: the lenient pagination helper is retired, and the unpublished-draft check now pages to completion (#1256).
  • release checks: build-ref accounting now reports present files with unrecognised markers. (#1268)
  • build-ref-check: distinguish a missing local tag from an unbaked tagged tree (#1273)
  • release: status-context-check grades a PR head, not a push one (#1287, #1289)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • integration guide: version instructions mean release tags only, stated once (#1248)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    3 downloads · 2026-09-06 12:20:05 +02:00 · 81 B
  • checksums.txt.minisig
    3 downloads · 2026-09-06 12:20:05 +02:00 · 308 B
  • rt-linux-amd64
    2 downloads · 2026-09-06 12:20:05 +02:00 · 10 MiB
• v0.60.0 7d5a704a08

  Compare

  v0.60.0 Stable

  release-bot released this 2026-09-06 11:38:29 +02:00 | 210 commits to main since this release

  Added

  • gates: rt prep-order-check refuses a PR that stacks a release-relevant commit above its prepare commit (#1170).
  • docs: name how to read a failed Actions run's step output on this Forgejo (#1198)
  • release: an unmirrored gitea.com release is now detectable (#1212)
  • release cut: rt build-ref-check refuses a tagged tree that does not carry its own tag (#1214).
  • release: a caller missing secrets: inherit is now reported, not silent (#1258)

  Changed

  • adopter gate: the prepared-but-uncut check is reusable with push and daily-schedule wiring, and its .gitea twin is generated alongside the Forgejo source (#1200).

  Fixed

  • dispatch-check: distinguish dispatch lag from a stalled task registration (#1110).
  • release cut: the Baker now stages .gitea twins alongside the sources it bakes (#1180).
  • release prep: blocked rolling PRs now announce deadlocks (#1183)
  • tests: Go now asserts the bake and staging workflow populations stay aligned (#1201).
  • release: an unrouted release PR now says so on the PR itself, not only the job log (#1204)
  • ac-closure-check: refusals now explain that fixing a referenced issue needs a PR touch to refresh the status (#1211).
  • workflow ref resolution: the caller fallback now accepts absolute provider URLs and display-cased frankenbit/release-toolkit wrapper paths when a reusable's baked marker is absent or still the placeholder (#1222).
  • gates: PRCommitSHAs and PRCommitMessages now paginate, and refuse a malformed page (#1223).
  • ci: preserve refusal and could-not-grade diagnostics at gate boundaries (#1226)
  • dispatch-check: read the complete Forgejo Actions task feed before grading a commit (#1227).
  • release prep: repeated rolling-PR deadlock notices are deduplicated by blocker set (#1231)
  • release: a failed asset publish can no longer emit silence, and an empty release is returned to draft (#1232).
  • release: the goreleaser config guard now reads its tool's output under ANSI colour (#1233).
  • rolling PR: an unsubmitted review draft no longer clears a live REQUEST_CHANGES (#1235).
  • rolling PR: only a submitted verdict can clear a live REQUEST_CHANGES (#1246).
  • bake: internal/bake compiles again after two PRs exported the same accessor (#1270).

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • contributor docs: name the three artifacts a new CLI verb touches (#1196)
  • integration guide: name the twelve published tags whose image digest was never rewritten (#1210)
  • integration guide: name the symptom of a missing runner (#1229)
  • gates: the assets-present job's release-keyed decision and its could-not-grade refusal now have behavioural arms (#1257).
  • contributor guide: a fixture needing a version-shaped tag cannot live in this repo (#1262)
  • release: NeedsSecrets is now derived-and-asserted, not just hand-maintained (#1269)

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • checksums.txt
    3 downloads · 2026-09-06 11:37:39 +02:00 · 81 B
  • checksums.txt.minisig
    3 downloads · 2026-09-06 11:37:39 +02:00 · 308 B
  • rt-linux-amd64
    2 downloads · 2026-09-06 11:37:40 +02:00 · 9.9 MiB