Ovumcy v0.7.2

Release date: 2026-03-24

Highlights

• Fixed the SECRET_KEY_FILE runtime regression so operator-managed absolute paths such as /run/secrets/... keep working after the startup hardening change.
• Clarified the public repository story in README by documenting how ovumcy-web, ovumcy-app, and ovumcy-sync-community relate to each other.
• Restored the Go Report Card badge in README and aligned pinned image examples with the new tagged release.

Security and quality

• SECRET_KEY_FILE still treats the path as operator-managed startup configuration, while preserving the original unreadable path in startup errors for easier self-hosted debugging.
• The release was validated with go test ./cmd/ovumcy, go test ./..., staticcheck ./..., gosec ./..., and docker compose config for all supported compose stacks.

Upgrade notes

• No database migration is required for this release.
• Tagged images publish under ghcr.io/ovumcy/ovumcy-web:v0.7.2.
• Existing deployments can upgrade in place and pin OVUMCY_IMAGE=ghcr.io/ovumcy/ovumcy-web:v0.7.2 if they do not want to track future tags manually.
• SECRET_KEY still takes precedence over SECRET_KEY_FILE when both are set.

Full changelog

• Compare: v0.7.1...v0.7.2
• Changelog entry: CHANGELOG.md section 0.7.2.