ForgeFlow/docs/RELEASE_NOTES_0.10.0.md

ForgeFlow 0.10.0

ForgeFlow 0.10.0 makes existing Unraid workloads substantially easier and safer to adopt, verify and deploy.

Deployment discovery and verification

• Automatic discovery links unique running server workloads to their matching Gitea repositories while excluding unrelated infrastructure and stale release folders.
• Deployment cards preserve the last verified live commit and compare it with the current Gitea branch, even when a container was updated outside ForgeFlow.
• Existing Compose project names, files, services, remote folders and DockerMan metadata are adopted from server truth instead of guessed or overwritten.

Safe Server pull

• Server pull is now the recommended deployment route and fetches the exact requested commit from Gitea.
• Each repository receives its own repository-scoped read-only deploy key; ForgeFlow never installs the desktop Gitea token on Unraid.
• Gitea SSH host fingerprints are pinned and checked before trust is changed and before every pull.
• Fetch, archive, checksum, Compose validation, activation and rollback remain exact-commit and transactional.
• Direct copy remains available when server-side Git access is undesirable, and monitoring-only links cannot deploy accidentally.

Git hygiene

• Git Validator now also checks .gitattributes, .editorconfig, dependency lockfiles and a Gitea Actions workflow.
• Safe repairs create reviewable files without committing or pushing them automatically.
• Existing identity, upstream, synchronization, branch-protection, documentation, secret-path and oversized-file checks remain available in one scored view.

Interface and reliability

• The deployment workspace now emphasizes repository, container, environment and live-versus-Gitea evidence, with a focused animated project illustration and clearer server inventory.
• Large unrelated server inventories are summarized instead of producing dozens of indistinguishable cards.
• Connection validation consistently opens the same encrypted Electron profile as the installed app.
• Obsolete ForgeFlow artifacts are removed from dist after every successful packaged build.

No container was restarted or replaced during automatic discovery. Deployments still require a successful preflight and an explicit user action.