• Jens released this 2026-07-28 06:27:26 +00:00 | 87 commits to main since this release

    ForgeFlow 0.10.0

    ForgeFlow 0.10.0 makes existing Unraid workloads substantially easier and safer to adopt, verify and deploy.

    Deployment discovery and verification

    • Automatic discovery links unique running server workloads to their matching Gitea repositories while excluding unrelated infrastructure and stale release folders.
    • Deployment cards preserve the last verified live commit and compare it with the current Gitea branch, even when a container was updated outside ForgeFlow.
    • Existing Compose project names, files, services, remote folders and DockerMan metadata are adopted from server truth instead of guessed or overwritten.

    Safe Server pull

    • Server pull is now the recommended deployment route and fetches the exact requested commit from Gitea.
    • Each repository receives its own repository-scoped read-only deploy key; ForgeFlow never installs the desktop Gitea token on Unraid.
    • Gitea SSH host fingerprints are pinned and checked before trust is changed and before every pull.
    • Fetch, archive, checksum, Compose validation, activation and rollback remain exact-commit and transactional.
    • Direct copy remains available when server-side Git access is undesirable, and monitoring-only links cannot deploy accidentally.

    Git hygiene

    • Git Validator now also checks .gitattributes, .editorconfig, dependency lockfiles and a Gitea Actions workflow.
    • Safe repairs create reviewable files without committing or pushing them automatically.
    • Existing identity, upstream, synchronization, branch-protection, documentation, secret-path and oversized-file checks remain available in one scored view.

    Interface and reliability

    • The deployment workspace now emphasizes repository, container, environment and live-versus-Gitea evidence, with a focused animated project illustration and clearer server inventory.
    • Large unrelated server inventories are summarized instead of producing dozens of indistinguishable cards.
    • Connection validation consistently opens the same encrypted Electron profile as the installed app.
    • Obsolete ForgeFlow artifacts are removed from dist after every successful packaged build.

    No container was restarted or replaced during automatic discovery. Deployments still require a successful preflight and an explicit user action.

    Downloads