Changelog
- 3807df5937b19199509c1ef3e53548587682bce9 chore(release): 2.25.0
- 1137f7eee788a60a44941765794130acb7b27bd4 chore: 🗂️ beads close forgejo-mcp-00o, 3h2, aps + session wrap
- 8c1df9dd8ed658bd7b0b51a7cf310f675f513782 chore: 🗂️ merge beads jsonl after #161
- bd3ccae5ffcd7386e75392570c80890ba19970bb Merge pull request 'fix: 🐛 pipeline task fixes validated by run11 success' (#163) from forgejo-mcp-aps into main
- 0901bf0b9263462b3fee5d6a42d98db6987a7b95 fix: 🐛 pipeline task fixes validated by run11 success
- 5e232175f215be9f50682ec885a63de902e536b0 Merge pull request 'fix: 🔒️ restore fail-closed cosign signing, remove bootstrap SKIP_SIGN' (#158) from forgejo-mcp-00o into main
- 187c51c1f219858e29d024ffa6575e9ae1cea4ef Merge pull request 'fix: 🐛 sha256sum filename mismatch + privileged SCC for buildah' (#162) from forgejo-mcp-aps into main
- 97ee636e49f605e8d6338c8e9805e2eeaac024a6 fix: 🐛 filename mismatch in sha256sum + privileged SCC for buildah
- 41cdafc0bf060fe2cbb8be67041496c54abb62ff fix: ✏️ buildah needs runAsUser 0 for chroot isolation with hi/go base
- b45e2e46e82dddea672e725a7b9dbdade7ea8dfc Merge pull request 'fix: 🐛 rootless buildah in build-image task for OpenShift SCC' (#161) from forgejo-mcp-aps into main
- 6a55f3f02f1c584bb2b4c445f3356ebb5aceb9a8 fix: 🐛 rootless buildah in build-image task for OpenShift SCC
- e6a61859559fdbc174975fa40f142b2bfabd119c feat: ✨ render dep graph as subway map
- 118d19feafc12dfd12efbf892ec91ceb7e1806b7 Merge pull request 'fix: 🐛 move release-tools PipelineRuns to .tekton/ root' (#160) from forgejo-mcp-8sz into main
- 7706d17411307a9a59a6c098370429b0ab69a363 fix: ✏️ correct CEL macro files.any.exists → files.exists
- 4649f98c1bde32ad64c2887909b2418612faf031 fix: 🐛 move release-tools PipelineRuns to .tekton/ root
- a7883a62eda9f163a7402cb4a30cf24bf0e14ead chore: 🗂️ beads jsonl claim forgejo-mcp-3h2 + forgejo-mcp-00o
- 68a72769985859b3cb48dfa100ede17bfbfd03ac Merge pull request 'fix: 🔒️ SHA256-verify goreleaser+syft, drop piped install.sh' (#159) from forgejo-mcp-3h2 into main
- da3cfb12625190e908fc58480df47b6bde83063b fix: 🔒️ SHA256-verify goreleaser+syft, drop piped install.sh
- 8a282ca1e4ce59cb35c50f8b8573789457a5b914 fix: 🔒️ restore fail-closed cosign signing, remove bootstrap SKIP_SIGN
- bbe36d6b4eabf724013acb74112113f2f751eaaa chore: 🗂️ beads jsonl close forgejo-mcp-p1p
- bd92d217e734e28557672705f9a772bc0a37d089 chore: 📋 archive release-tools-image openspec change + sync spec
- 0f1e6492ab5a732a433eca3b93d3b82b5a719a44 chore: 🔧 set vendor label to 'Operate First, by #B4mad'
- 3dec0b9478e3911fddfb807c520f73395fa61eab style: 💄 calm CRT text styling for legibility
- ef5cf057f3a2c4479598b7d2a876238e68a14dad chore: 🗂️ beads jsonl post-PR#157 merge + close forgejo-mcp-1b4
- e02cf5668f4f839645cf8f2b609210d08de71152 feat: release-tools image source tree + build/publish Tekton pipelines (#157)
- 840f996de58c11feb95fef399f29043019d4eb11 style: 💄 drop oversized #BEADS hero from dashboard
- 8ffcd31f83d89095eed980464e4ee94e4c4bda39 fix: 🐛 cosign sha256sum path — download to /tmp/cosign-linux-amd64 before verify
- a620b174c56fcfffe436ff7cb183e96e33837cda feat: ✨ add CRT phosphor beads dashboard
- 1ecb9527c1f0953ff7a8a06086436b01501fcb63 chore: 🗂️ beads jsonl post-tasks rewrite
- 0dcb2e14e9f1986bb427f1b469d5b7a473ccea3d refactor: ♻️ rewrite .tekton/tasks/ to use release-tools image
- c1316d8a7e60720337287e11ab77ec434e9586d1 feat: ✨ add govulncheck + openspec to release-tools image
- ef300baed3878aa651c4547ce0266f8170784dd0 chore: 🗂️ beads jsonl post-PR#157 review fixes
- d59b9105e97405b7b0cd6116e42b4a8b7ae4f9ea fix: 🔒️ address automated code review findings from PR #157
- 2f5dc5123f3e378f695bc6acd3c26825566fec29 fix(ci): 🔧 registry → codeberg.org/operate-first + cosign task bugs + bootstrap
- 5df98baca9a65f3b1dde12a816d760e9a71dcd87 feat(ci): 🚀 add release-tools image build + publish Tekton pipelines (iteration 2)
- 240a544ed39b6889e3811d17bb4dea74d0224364 feat(image): 🐳 add release-tools OCI image source tree (iteration 1)
- 9c84d7f2274fd202bc4bce931fddd96ecb392177 chore: 🗂️ beads jsonl post-#155 merge
- 550db7f300674d444acf2d28993e1f9668005ce6 Merge pull request 'docs(openspec): propose release-tools-image change with adversarial review' (#155) from feat/release-tools-image into main
- ddbb5a091e527ba95555cd36cfa7bd9df819b4b8 docs(openspec): 📋 apply adversarial review patches to release-tools-image change
- c81412792ef762cb9fa7de55784742a3c00a2ddc docs(openspec): 📋 propose release-tools-image change for op1st Tekton pipeline
- 082c71e7c8806794e6fa9802791965e845ce5935 chore: 🗂️ beads jsonl: capture release pipeline findings on P0 image bead