v0.10.1

operator v0.10.1: content-gate recognizes .deco/blocks.gen.json (7.x)

Patch on v0.10.0: isContentPath accepts the 7.x bundled-snapshot path
.deco/blocks.gen.json (kept the legacy src/server/cms path). Includes the
cfkv errcheck lint fix (#30).

v0.10.0

operator v0.10.0: per-deployment fast-deploy content sync

tanstack-kv reconciler resolves the site's index:live and passes DEPLOYMENT_ID
to the sync Job (content keyed per deployment). Waiting+requeue when index:live
is unset. Pairs with decofile-syncer v0.2.0.

v0.9.1

v0.9.1 — fast-deploy KV-sync Job runs under namespace default SA (no …

v0.9.0

v0.9.0 — fast-deploy (git webhook → Decofile CR → KV-sync Job) + unif…

v0.8.2

fix(decoredirect): use configuration-snippet to preserve ACME challenge

server-snippet runs at the nginx server block level (HTTP + HTTPS) before
location matching, intercepting Let's Encrypt HTTP-01 ACME challenge
requests and breaking certificate issuance for new domains.

configuration-snippet is scoped to the location / block — the cert-manager
ACME solver creates a more specific location (/.well-known/acme-challenge/TOKEN)
that takes priority, so challenges are served correctly while path is
still preserved via $request_uri on all other requests.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

v0.8.1

fix(decoredirect): preserve path on apex redirect (#23)

* fix(decoredirect): preserve path on apex redirect using \$request_uri

The permanent-redirect annotation was set to the bare target URL (e.g.
https://www.client.com), causing nginx to redirect all requests to the
root — discarding the path. Append nginx's \$request_uri variable so the
full path and query string are preserved.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix(decoredirect): use server-snippet to preserve path on apex redirect

permanent-redirect annotation does not support nginx variables — the
admission webhook rejects values containing $. Switch to server-snippet
with $request_uri so the full path and query string are preserved.

Requires allow-snippet-annotations: true and annotations-risk-level: Critical
in the nginx ingress controller config (infra_applications PRs #156, #157).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

v0.8.0

feat(decoredirect): auto-heal failed certs and add retry-cert API rou…

v0.7.0

feat(decoredirect): add redirectCode field (301|307) and opt-in X-Red…

v0.6.0

What's Changed

• feat(decofile): cascade-delete via Revision ownerReference by @nicacioliveira in #15

Full Changelog: v0.5.1...v0.6.0

v0.5.1

feat: normalize 'to' field to https:// when no scheme provided (#16)

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>