112 releases 130 tags

RSS feed

• v0.53.0 bbf12d68c6

  Compare

  v0.53.0 Stable

  release-bot released this 2026-08-27 09:16:55 +02:00 | 675 commits to main since this release

  Added

  • workflows: shared Forgejo parse guard records complete workflow coverage (#841)
  • release: rebuilding an old tag now uses current pipeline logic (#980)

  Changed

  • contributor CI: fork pull requests now receive an explicit workflow-approval notice (#645)
  • ac-closure-check: the undeclared-target refusal now names the negation case explicitly (#989)

  Fixed

  • manifest PR auto-merge: explicitly requests deletion of the generated branch (#633)
  • release: the pipeline checkout no longer dirties the tree being built (#980)
  • workflow-parse-check: toolkit-self cuts resolve the toolkit from main before the new tag exists (#995)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • release: document refactor-of-an-already-documented-change guidance and the non-automated Refactors: trailer convention (#492)
  • fetch-rt.sh: comment why a surviving checksums.txt is safe on both early-exit paths (#643)
  • internal: keep hidden workflow verbs in the complete CLI registration census (#787)
  • release-assets: pin that an unreadable release body cannot skip DELETE authorization (#967)

  Downloads

  • checksums.txt
    4 downloads · 2026-08-27 09:16:31 +02:00 · 81 B
  • rt-linux-amd64
    5 downloads · 2026-08-27 09:16:31 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.49.0 ae1492e451

  Compare

  v0.49.0 Stable

  release-bot released this 2026-08-26 23:27:04 +02:00 | 723 commits to main since this release

  Added

  • decide: a blocked pending-cut result now names whether the tag and release already exist (#885)

  Changed

  None.

  Fixed

  • publish-image: the digest hand-off uses job outputs instead of an artifact (#941)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • post-cut manifest: the commit-succeeded/push-failed state is now covered (#913)
  • post-cut precheck: correct the doc comment's rendering count (#923)
  • fragment summaries: warn when a summary exceeds 19 words (#932)
  • Dockerfile: the /rt path now documents the workflow that depends on it (#933)

  Downloads

  • checksums.txt
    4 downloads · 2026-09-05 21:02:52 +02:00 · 81 B
  • rt-linux-amd64
    6 downloads · 2026-09-05 21:02:52 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.52.0 c61277f9b3

  Compare

  v0.52.0 Stable

  release-bot released this 2026-08-26 20:14:20 +02:00 | 696 commits to main since this release

  Added

  • ac-closure-check: scans commit messages too, and refuses an undeclared target (#965)

  Changed

  None.

  Fixed

  None.

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Downloads

  • checksums.txt
    4 downloads · 2026-08-26 20:12:49 +02:00 · 81 B
  • rt-linux-amd64
    5 downloads · 2026-08-26 20:12:49 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.51.0 dee8192ea3

  Compare

  v0.51.0 Stable

  release-bot released this 2026-08-26 19:47:15 +02:00 | 702 commits to main since this release

  Added

  None.

  Changed

  • reusable-release: the release path now uses the shared bootstrap composite (#606)
  • release-assets: verify derives the expected count once and warns on a foreign asset (#971)

  Fixed

  None.

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Downloads

  • checksums.txt
    4 downloads · 2026-08-26 19:46:56 +02:00 · 81 B
  • rt-linux-amd64
    5 downloads · 2026-08-26 19:46:56 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.50.1 9e292e26fa

  Compare

  v0.50.1 Stable

  release-bot released this 2026-08-26 19:16:24 +02:00 | 710 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • release-assets: verify treats an existing empty release as a first publish (#962)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Downloads

  • checksums.txt
    4 downloads · 2026-08-26 19:14:40 +02:00 · 81 B
  • rt-linux-amd64
    5 downloads · 2026-08-26 19:14:40 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.50.0 1e3bf06cf6

  Compare

  v0.50.0 Stable

  release-bot released this 2026-08-26 18:50:26 +02:00 | 716 commits to main since this release

  Added

  None.

  Changed

  • fragment-check: the summary must carry an issue reference (#959)

  Fixed

  • release-assets: the delete guard counts assets, not the release object (#962)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Downloads

  • checksums.txt
    2 downloads · 2026-08-26 18:51:03 +02:00 · 81 B
  • rt-linux-amd64
    4 downloads · 2026-08-26 18:51:04 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.48.2 6537063d0b

  Compare

  v0.48.2 Stable

  release-bot released this 2026-08-26 17:39:37 +02:00 | 736 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • consumer-wrapper discovery: an ungradeable workflow file no longer reads as absent (#843)
  • fragment-check: refuse fragments without the documented summary header (#931)
  • publish-image: a failed container cleanup no longer aborts the bake (#933)
  • decide/manifest-check: a tag carrying #794's image-digest pin no longer reads as manifest anchor divergence. The bake force-moves the tag one commit above last_released_sha, which wedged rt decide at the start of every cut. Both commands now recognise that exact shape and accept it; any other divergence still fails loud (#943)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • wrappers: a code comment now cites the full path it names (#843)
  • dated-examples-check: the control now has a caller (#926)

  Downloads

  • checksums.txt
    4 downloads · 2026-08-26 17:39:19 +02:00 · 81 B
  • rt-linux-amd64
    5 downloads · 2026-08-26 17:39:19 +02:00 · 9.5 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.48.1 7cf7451e16

  Compare

  v0.48.1 Stable

  release-bot released this 2026-08-26 16:37:32 +02:00 | 750 commits to main since this release

  Added

  None.

  Changed

  None.

  Fixed

  • publish-image: the bake step takes rt from the image it just pushed (#933)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • tests: arm the goreleaser version guard, which shipped without any (#925)

  Downloads

  • checksums.txt
    2 downloads · 2026-08-26 16:33:27 +02:00 · 81 B
  • rt-linux-amd64
    4 downloads · 2026-08-26 16:33:27 +02:00 · 9.4 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.48.0 50ef41aa06

  Compare

  v0.48.0 Stable

  release-bot released this 2026-08-26 16:10:16 +02:00 | 757 commits to main since this release

  Added

  • rt ac-closure-check: refuse a merge whose Closes #N would close an issue with an unfinished AC (#848)

  Changed

  • release notes: now require a changelog fragment for adopter-facing prose; fragment-less conventional commits still drive version bumps without leaking their subjects into notes (#717)
  • fragment-check: identifies dense fragments changed by the current PR versus pre-existing fragments so adoption failures route to the right file (#735)
  • manifest-postcondition: writes a durable Forgejo commit status carrying its exact verdict, including refusal outcomes, so post-cut evidence survives log retention (#747)
  • changelog: fragments contribute their summary line, not their whole body (#854)
  • style docs: the worked examples now state when they were written (#912)
  • release: the goreleaser install step now skips when the runner image already carries the pinned version, and installs otherwise. Comparing the version rather than mere presence keeps all three states self-healing: nothing baked installs as before, a matching bake skips, and a stale bake is corrected. Removes a ~100-module download and compile from the release critical path when the image provides it (#918)

  Fixed

  • decide: preserve changelog read and parse refusals instead of treating them as an empty latest-version result (#697)
  • fragment-check: pin which renderer the density gate calls (#854)
  • contract-paths-check on a shallow clone: provenance is now could-not-grade instead of a false failure (#903)
  • post-cut precheck: the idempotent-skip decision now logs the inputs it was made from (#914)

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Security

  • PR-CI input handling: keep caller-supplied paths out of shell source (#654)

  Internal

  • C5 contract docs: name the three toolkit-self verbs the C5 table deliberately omits (#774)
  • live negative controls for three gates: changelog-body-check, manifest-check and register-check now each prove they can go RED (#890)

  Downloads

  • checksums.txt
    2 downloads · 2026-08-26 16:10:45 +02:00 · 81 B
  • rt-linux-amd64
    4 downloads · 2026-08-26 16:10:45 +02:00 · 9.4 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.47.0 239b5063c9

  Compare

  v0.47.0 Stable

  release-bot released this 2026-08-26 13:55:04 +02:00 | 795 commits to main since this release

  Added

  None.

  Changed

  • contract source-of-record split: byte-authority and provenance are now separate fields, and both are checkable (#849)

    The single field carried two different claims, so a naive check reddened on six correct sites. Source of record now lists only paths that must resolve today. Ported from lists historical paths, checked for having ever existed. scripts/contract-paths-check.sh grades both halves and classifies globs rather than resolving them.

  Fixed

  • cut-cancellation recovery docs: recovery (A) now covers manifest-create, non-atomicity, and the published-release case (#660)

    docs/integration.md § Cut-cancellation recovery (#417) no longer says "edit" the manifest for adopters who never had one — it gives the full create-from-scratch JSON. The three (A) steps are now named as non-atomic, since a bare tag push can silently clear the bootstrap population's orphan check unfinished. (B) is flagged as actively wrong once a release is already published, per the live 2026-08-25 incident (#884).

  • dry-run preview docs: fix the fidelity-guarantee direction and two stale claims (#662)

    The asymmetry #662 quoted — rt decide reporting mode=cut for a run that would resolve mode=update live — was already closed at the code level by #689. The doc now says so plainly: --dry-run is a computational no-op for rt decide. Also retires the stale FORGEJO_API_DRY_RUN env-var reference and names a live gap: rt release's idempotency pre-check is faked under --dry-run, always previewing a create.

  • changelog: suppress duplicate commit bullets covered by body-referenced fragments (#672)

    Multi-commit changes can keep the richer fragment entry without widening the add-only fragment walk that protects against silent omission.

  • release: disclose whether post-cut manifest bookkeeping creates or updates (#679)

    The typed post-cut boundary now preserves the observable create/update branch evidence from the release workflow.

  • prep: rt prep --dry-run no longer writes your checkout. It runs against a scratch copy and prints the diff it would produce, so a failed run leaves nothing behind for the retry's clean-tree gate to refuse. post_bump_hooks run in the scratch copy; anything they touch outside their working directory is still not contained (#708)

  • decide: a cut-safeguard that declines no longer resolves to mode=noop when the fall-through finds nothing release-relevant. That path dropped safeguard_fail, safeguard_version and prep_sha and exited 0, so a decline read exactly like "nothing to release". It now emits mode=blocked with reason=safeguard_decline, which the workflow already fails on. A could-not-grade stays distinguishable from a refusal (#711)

  • operations: document drain-before-review order for rolling release PRs (#770)

    Land other work before reviewing the rolling PR, then merge it before another main landing can rebuild its content and invalidate the approval. This is a regeneration rule, not an outdated-branch rule.

  • manifest: a draft cut no longer records a completed release. Schema 2 adds last_released_published, so a cut that leaves the release unpublished says so. manifest-check now reports the absent tag as an unfinished cut, not a desync. Schema 1 is still read, and migrates only when a record needs the new field (#805)

  • 849: fragment density, and scrub a register over-match in the arms

  • ci: keep the blocked arm FLAT so its bats guard reads what it means to

  Removed

  None.

  Deprecated

  None.

  Upgrade

  None.

  Internal

  • test guards: make pending-cut branch extraction safe for nested shell cases (#889)

    The workflow contract is unchanged; the structural guard now proves both a nested-case success path and a missing-refusal inverse fails closed.

  Downloads

  • checksums.txt
    8 downloads · 2026-08-26 13:56:47 +02:00 · 81 B
  • checksums.txt
    3 downloads · 2026-08-26 14:12:29 +02:00 · 81 B
  • rt-linux-amd64
    9 downloads · 2026-08-26 13:56:47 +02:00 · 9.4 MiB
  • rt-linux-amd64
    5 downloads · 2026-08-26 14:12:29 +02:00 · 9.4 MiB

  ---

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads