Skip to content

Unify runner and image release versions#172

Merged
jmcte merged 1 commit into
codex/transactional-image-releasefrom
codex/runner-version-parity
Jul 12, 2026
Merged

Unify runner and image release versions#172
jmcte merged 1 commit into
codex/transactional-image-releasefrom
codex/runner-version-parity

Conversation

@jmcte

@jmcte jmcte commented Jul 12, 2026

Copy link
Copy Markdown
Contributor

Summary

  • make .runner-version (2.335.1) the shared Docker, Lume, CLI, and release source
  • add a daily hosted freshness check that fails 21 days after a newer disabled-update runner release appears
  • supersede the unverifiable 0.2.1 candidate with release target 0.2.2
  • align Synology and Linux Docker production image tags and remove the stale tracked docker-compose.yml
  • classify Windows as an always-statically-validated experimental template, not a release-backed production plane

Governing Issue

Closes #158
Refs #149
Refs #150
Refs #151
Refs #164

Validation

  • focused runner/release/workflow/CLI tests (8 files, 72 tests)
  • CI=true bash scripts/ci/run-fast-checks.sh (48 files, 277 tests; lint and build passed)
  • live pnpm check-runner-version -- --fail-after-days 21 confirmed current/latest 2.335.1
  • actionlint passed, ignoring only established custom self-hosted labels
  • bash -n scripts/build-image.sh scripts/lume/install-runtime.sh
  • git diff --check

Bootstrap Governance

  • Changes are scoped to the linked issues
  • Support-level documentation and CI assertions changed together
  • Auto-merge will be enabled after creation
  • No secrets, runtime auth, or machine-local files committed

Merge Automation

Notes

This PR is based on codex/transactional-image-release because it extends #170's release workflow. After #170 merges, this branch should be retargeted/rebased to main if GitHub does not do so automatically. Issues #149, #150, #151, and #164 remain open until 0.2.2 is published, installed, and verified on the affected runner pools.

Make .runner-version the shared Linux, Windows, Lume, CLI, and release source; add a daily freshness gate; supersede unreleased 0.2.1 with 0.2.2; remove the stale tracked Compose output; and classify Windows as an always-validated experimental template rather than a release-backed plane.

Closes #158. Refs #149. Refs #150. Refs #151. Refs #164.
@jmcte
jmcte requested a review from a team as a code owner July 12, 2026 22:09
@jmcte
jmcte merged commit 5f14261 into codex/transactional-image-release Jul 12, 2026
11 of 12 checks passed
@jmcte
jmcte deleted the codex/runner-version-parity branch July 12, 2026 22:09
daedalus-omt pushed a commit that referenced this pull request Jul 14, 2026
Make .runner-version the shared Linux, Windows, Lume, CLI, and release source; add a daily freshness gate; supersede unreleased 0.2.1 with 0.2.2; remove the stale tracked Compose output; and classify Windows as an always-validated experimental template rather than a release-backed plane.

Closes #158. Refs #149. Refs #150. Refs #151. Refs #164.

Co-authored-by: Your Name <you@example.com>
daedalus-omt pushed a commit that referenced this pull request Jul 14, 2026
Make .runner-version the shared Linux, Windows, Lume, CLI, and release source; add a daily freshness gate; supersede unreleased 0.2.1 with 0.2.2; remove the stale tracked Compose output; and classify Windows as an always-validated experimental template rather than a release-backed plane.

Closes #158. Refs #149. Refs #150. Refs #151. Refs #164.

Co-authored-by: Your Name <you@example.com>
jmcte added a commit that referenced this pull request Jul 16, 2026
* Make image releases transactional

Require explicit dispatch, build unique candidate tags, verify immutable digests with bounded diagnostics, and promote only after verification. Add a non-mutating recovery decision for the partially published v0.2.1 tag.

Refs #150.

* Unify runner and image release versions (#172)

Make .runner-version the shared Linux, Windows, Lume, CLI, and release source; add a daily freshness gate; supersede unreleased 0.2.1 with 0.2.2; remove the stale tracked Compose output; and classify Windows as an always-validated experimental template rather than a release-backed plane.

Closes #158. Refs #149. Refs #150. Refs #151. Refs #164.

Co-authored-by: Your Name <you@example.com>

* Fix hosted Windows contract temp path

* Fix candidate manifest signing

Inspect the verified staging subject when signing per-platform digests so first-time releases do not require the final tag before promotion. Add a workflow contract assertion for the candidate reference and ordering.

* Fix Docker API smoke build

Build a minimal non-empty scratch image so the compatibility smoke works with both BuildKit and the legacy Docker builder. Add regression assertions for the marker-backed build context.

---------

Co-authored-by: Your Name <you@example.com>
Co-authored-by: Athena <athena-omt@protonmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant