Changelog
- f54052cda5b7066d848e1a344bbf4c427cbb508c chore(release): 2.27.0
- 313e1cb6011d2bc42c41ccd4183a8a6de5cccb9b chore: 🗂️ bd close uc6 (branch protection shipped #195/#196/#197)
- 0fbfe567ccdf2b40b65616170af7928e79b1e5d9 docs: 📝 archive branch-protection-management + co-locate demo (uc6) (#197)
- 88cd866d0f8be50241ef9ecb3c56b4d058b77afd docs: 📝 archive branch-protection-management + co-locate demo (uc6)
- b36d097dd4db5b7f660a5d131598020e919c4a74 ci: 🚀 track-downloads pushes via PR + auto-merge (main is protected)
- 70765bcfdfc9944e82f93451ff8f9e5a9a2cd681 feat: ✨ branch protection management — CRUD tools + forgejo:// resources (uc6) (#196)
- 3e5dad455ed4d5a6768c7fa5628766cc65b9d8c2 docs: 📝 showboat demo for branch protection (uc6) — token-free
- 0826172c239b154bacdb77dce6550387295c3927 feat: ✨ branch protection management — CRUD tools + forgejo:// resources (uc6)
- 1b994fbe667d90326aaa0e9b1b03a8797a7af2ca docs: 📝 openspec change — branch protection management (branch-protection capability) (#195)
- 05731b0b066e895f5affc18f775ad8a941de2fde chore: 🗂️ bd update uc6 (branch-protection openspec proposed)
- 6312bd2775700cfc035b2361f0fff524c71e23a4 docs: 📝 openspec change — branch protection management (branch-protection capability)
- d5d84cbe89dcad1e4e000e57e4aa1fe4a051798a chore: 🗂️ bd close 0zl (merged #194, README artifact-key fixed)
- 2c84eed0bea213734c043f944b550a2c7ec8dd5f fix: 📝 point README artifact-key fetch at renamed cosign-signing-key-artifacts.pub (#194)
- 78ab25b6424684df08821159b9f59538798b8e66 chore: 🗂️ bd claim 0zl (README artifact-key rename)
- c0f6595aa5ee66ae0bfd8fcc0150f732b1fc2193 fix: 📝 point README artifact-key fetch at renamed cosign-signing-key-artifacts.pub
- 8078ce5d00bf506cf2ce793adb0a0255c299019d chore: 🗂️ bd close 3y1 (merged #193, signed-sbom-attestation archived)
- e5edfe6719439e7c3c587cf399691fc19098ae2d docs: 📝 archive signed-sbom-attestation + showboat demo (release-tools-image) (#193)
- 120b0f0e6fd6b02bf7529bff51283f9327689677 docs: ✏️ stamp showboat demo provenance with PR #193
- 8989dd4ff3c5baa1c167f002790d4c5a5e0d211d chore: 🗂️ bd update 3y1 (signed-sbom archived; file 0zl README §4 key-rename follow-up)
- 6311de072196fcf43193cf57ce15e70585d49665 docs: 📝 archive signed-sbom-attestation + showboat demo (release-tools-image)
- 7b85ba42f43d715ae219b89ff446bf1cb90b141a docs: 📝 openspec change — signed SBOM attestation (release-tools-image) (#189)
- 7b2a16e151320b9c54cef24e9345e4c9dab0f697 chore: 🗂️ bd update 773 (label-crud debate outcome: delete_mode enum, repo-prefixed names, org URI)
- caa170805831c77e5179dd9e729f04e132126a1b chore: 🗂️ bd update 773 (label-crud scope: org CRUD + safe delete)
- dedc5b5507791470a0790dce511d6c21a9812e6c chore: 🗂️ bd file 773 (label-crud openspec impl, PR #192)
- 5a5d921cab9337e5848edd4bf39fa1ba145ec186 chore: 🗂️ bd file tcy (CLI resource-read parity, Codeberg #191)
- 0e6b5c6b433b946e46d198ca9d7714625e2309e5 chore: 🗂️ bd close fd6 (label CRUD issue #190 prepared)
- 86d95da7c50c58256b0171a3553c112d51a6b965 chore: 🗂️ bd close k5f (extend #136 scope to webhook resource-templates)
- 7234a081db30ac4f126c6850789b7199fa1ada2d chore: 🗂️ track PR #189 on bd-3y1 (signed SBOM openspec change)
- 5207bd9282ab3e57dad61cddb219ca326320354a docs: 📝 openspec change — signed SBOM attestation (release-tools-image)
- fd7fdd5d258f63c017b82885be996c8cc81de2a1 chore: 🗂️ bd close aa6 (cosign attest migration) + file 3y1 spec follow-up
- 560e37523512e79b6658ddec50a5128f5bf0931c fix: 🔒️ sign SBOM via cosign attest (replace deprecated attach sbom)
- 6c66a0126caee5e1d23288b64b534000c1a6b85d Merge pull request 'chore(deps): update registry.access.redhat.com/hi/go:latest-builder docker digest to 9523912' (#187) from renovate/registry.access.redhat.com-hi-go-latest-builder into main
- 7279457d4f1f2c676130b684c5bf327b8289108e chore(deps): update registry.access.redhat.com/hi/go:latest-builder docker digest to 9523912
- 15bb6da3a2e005aa8347d187251b21d5fb5bd14a Merge pull request 'chore(deps): update quay.io/hummingbird/go:1.26.3-builder docker digest to 9523912' (#186) from renovate/quay.io-hummingbird-go-1.26.3-builder into main
- 6ffa142c635f441bf6d21ea321b96c575a0a8f82 chore(deps): update quay.io/hummingbird/go:1.26.3-builder docker digest to 9523912
- 4bae9727c1540d4f5e96b89c3cb2e1e8a2618e32 chore: 🔧 add make check-demos target
- cb6f6576443c9fa3f1be4972e7dee7b1d061a77c ci: 🚀 enforce check-demos in PaC and pre-commit
- 15cd1153e3b49e20d316ed4b942c5dc65fcae02f chore: 🔧 wire up just check-demos anchored-demo checker
- 1e017ef2609cdb23d1d524d8d32e0ec580174c65 docs: 📝 retarget showboat skill from spellkave to forgejo-mcp
- 890c1ec8a0aa96b6f502d838f9b3b6e517da18d6 chore: 🔧 add showboat skill (spec-linked demo artifact convention)
- f107ca364aab54dd8d8817e3e52a19fd4fb22efa docs: 📝 archive stateless-http-auth change, sync spec
- 610f4f5b4471d8f341f5a3ba2550930b5c090cd0 Merge pull request 'fix: 🔒️ reject bare tokens in stateless HTTP auth' (#185) from fix/stateless-http-auth-bare-token into main
- 0008cb331181fdcda1a7a18ec461bbbe9a78d78f chore: 🔧 add bead forgejo-mcp-8if (merge #185, finish smoke tests, archive)
- 63e16242a3b634c5320afbaef2dd6625c7cfdb39 fix: 🔒️ reject bare tokens in stateless HTTP auth
- f026f8c30ff575ab654ab532e482fcf9f87c1691 fix: 🔥 remove ephemeral :build-tmp tag after promotion
- b12dd07410a9ad54ec2d0f9742c477b7c78801bd chore: 🔧 prefix all .tekton PipelineRun names with forgejo-mcp-