This commit is contained in:
@@ -0,0 +1,21 @@
|
||||
# ForgeFlow 0.10.1
|
||||
|
||||
## Reliable certificate-free updates
|
||||
|
||||
- Windows installer and portable releases are supported without paid signing services.
|
||||
- Packaged updates remain protected by exact Gitea release assets, PE validation and SHA-256 verification before staging and immediately before replacement.
|
||||
- Old ForgeFlow versions are pruned from `dist` after each successful build.
|
||||
|
||||
## Deployment inventory correctness
|
||||
|
||||
- Repository matching is case-insensitive, so `Jens/Repo` and `jens/repo` refresh the same deployment profile.
|
||||
- Running repository workloads are linked conservatively; third-party DockerMan applications remain visible as external monitoring-only workloads instead of generating hundreds of false repository problems.
|
||||
- Historical and stopped duplicate definitions no longer require repetitive manual review.
|
||||
- Shadowed automatic profiles are retired only after a recovery snapshot and a stable reviewed reconciliation plan.
|
||||
- Live runtime, container health and commit evidence are refreshed before readiness is reported.
|
||||
|
||||
## Server pull verification
|
||||
|
||||
- Existing running repository workloads can receive repository-scoped read-only deploy keys without changing containers.
|
||||
- The audit command supports compact inventory, reconciliation and access evidence for operational verification.
|
||||
- Release acceptance no longer assumes an external Authenticode certificate while retaining checksum, provenance and SBOM checks.
|
||||
Reference in New Issue
Block a user