322 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	716e0f50a7	Give each version mismatch its own remedy, and stop publishing a moving bare-major tag	2026-08-22 12:27:43 +02:00
lilleman	2d62553a10	Refuse a 0.x minor mismatch, and republish the overview from the named release's tree	2026-08-22 12:13:41 +02:00
lilleman	d8b7a2d64a	Keep the proven always() guard on the overview job	2026-08-22 12:03:18 +02:00
lilleman	d62c7faabd	Scope the sidecar trailer by package so a mixed branch cannot lose it	2026-08-22 12:01:35 +02:00
lilleman	6c07856159	Accept the README-only gate skip, and say why it is safe	2026-08-22 11:58:28 +02:00
lilleman	41084441ff	Manage the published quick start's pins, and fail closed on every release-tooling edge	2026-08-22 11:45:46 +02:00
lilleman	08d4f6271d	Gate the overview's manual trigger on the same contract check as a tag	2026-08-22 11:27:35 +02:00
lilleman	5820264885	Trim the prose to what is true now	2026-08-22 11:24:16 +02:00
lilleman	b708aab981	Keep the release at v0.1.0 — nothing consumed the old contract	2026-08-22 11:21:42 +02:00
lilleman	99e77ebabf	Release this as v0.2.0, and give the Hub overview its own job, token and template	2026-08-20 23:32:10 +02:00
lilleman	2148822dad	Make the plugin contract version the release version, and publish the Docker Hub overview from CI	2026-08-20 23:16:11 +02:00
lilleman	7f839afb32	Release nothing when no Renovate commit reached the app	2026-08-20 23:02:21 +02:00
lilleman	1f61235e88	Scope Release-Bump to the surfaces that ship, and drop the inert package.json versions	2026-08-20 22:43:36 +02:00
lilleman	24007b15f3	Rewrap the auto-release paragraph	2026-08-20 22:04:23 +02:00
lilleman	3eceee0cf1	Lift the pre-release freeze — releases resume and the plugin contract goes live	2026-08-20 22:02:29 +02:00
lilleman	9fa0f60f79	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-20 21:52:27 +02:00
lilleman	4f791d8f11	Merge remote-tracking branch 'origin/main' into plugin-storage ... # Conflicts: # package-lock.json # package.json	2026-08-20 21:47:22 +02:00
renovate-bot	94e9e8bc60	Update dependency lucide-static to v1.33.0 ... Release-Bump: minor	2026-08-20 04:17:56 +00:00
lilleman	03d14b1a20	Merge remote-tracking branch 'origin/main' into plugin-storage ... # Conflicts: # package-lock.json # package.json	2026-08-19 20:34:30 +02:00
lilleman	3552b85d63	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-19 20:29:09 +02:00
renovate-bot	dde6fccb35	Update renovate/renovate Docker tag to v44.33.2 ... Release-Bump: minor	2026-08-19 04:18:20 +00:00
renovate-bot	19b3fbc802	Update dependency lucide-static to v1.32.0 ... Release-Bump: minor	2026-08-19 04:18:11 +00:00
lilleman	47541ae97b	Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery	2026-08-19 01:03:40 +02:00
lilleman	c5c9cce2b6	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	6db14a2205	Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery	2026-08-19 00:20:17 +02:00
lilleman	ae8f105360	Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL	2026-08-19 00:08:35 +02:00
lilleman	bba048e38f	Refuse a throwaway plugin storage secret in bootstrap, before any role is created	2026-08-18 23:24:34 +02:00
lilleman	bf638dfb19	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	5cc6c3d93e	Todo: note the code-field hint landed, the paste fix did not	2026-08-18 22:07:21 +02:00
lilleman	04af61a5e5	Hint the code field's digits-only rule, so the browser's refusal isn't bare	2026-08-18 22:07:12 +02:00
lilleman	a64a60644d	Todo: record the flow-POST proxy findings for the verification-code fix	2026-08-18 22:00:31 +02:00
lilleman	950eb5a911	Todo: record the manifest-over-.env decision for plugin config	2026-08-18 21:55:35 +02:00
lilleman	091011cfe5	Let Renovate reach the example plugins' manifests	2026-08-18 21:55:35 +02:00
lilleman	d55898eb8c	Refuse a stray package.json or node_modules in config/ by name	2026-08-18 21:55:32 +02:00
lilleman	f992cb6b2c	Merge branch 'main' into plugin-dependencies	2026-08-18 18:33:24 +02:00
lilleman	7d1f7750d3	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	3f9787df48	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
renovate-bot	a261570796	Update renovate/renovate Docker tag to v44.32.6 ... Release-Bump: minor	2026-08-18 04:18:04 +00:00
lilleman	77343e859a	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	616040fda6	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	fee4fe632b	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00
lilleman	1ba6dbdc51	Merge branch 'main' into prose-diet	2026-08-17 21:05:29 +02:00
renovate-bot	09ab2fcb85	Update renovate/renovate Docker tag to v44.31.0 ... Release-Bump: minor	2026-08-17 04:17:51 +00:00
renovate-bot	a977ecf1c7	Update renovate/renovate Docker tag to v44.30.3 ... Release-Bump: minor	2026-08-15 04:18:17 +00:00
renovate-bot	04a508c169	Update postgres Docker tag to v18.6 ... Release-Bump: minor	2026-08-14 04:18:05 +00:00
renovate-bot	d74989c4e0	Update renovate/renovate Docker tag to v44.27.0 ... Release-Bump: minor	2026-08-13 04:18:02 +00:00
renovate-bot	43d7062d9e	Update renovate/renovate Docker tag to v44.24.3 ... Release-Bump: minor	2026-08-12 04:18:15 +00:00
renovate-bot	d5ee0353d4	Update renovate/renovate Docker tag to v44.23.0 ... Release-Bump: minor	2026-08-11 04:17:48 +00:00
renovate-bot	137c35478d	Update dependency lucide-static to v1.31.0 ... Release-Bump: minor	2026-08-10 04:17:44 +00:00
renovate-bot	352f2f2794	Update axllent/mailpit Docker tag to v1.30.7 ... Release-Bump: patch	2026-08-09 04:18:09 +00:00