33 lines
2.2 KiB
Markdown
33 lines
2.2 KiB
Markdown
# ForgeFlow 0.10.0
|
|
|
|
ForgeFlow 0.10.0 makes existing Unraid workloads substantially easier and safer to adopt, verify and deploy.
|
|
|
|
## Deployment discovery and verification
|
|
|
|
- Automatic discovery links unique running server workloads to their matching Gitea repositories while excluding unrelated infrastructure and stale release folders.
|
|
- Deployment cards preserve the last verified live commit and compare it with the current Gitea branch, even when a container was updated outside ForgeFlow.
|
|
- Existing Compose project names, files, services, remote folders and DockerMan metadata are adopted from server truth instead of guessed or overwritten.
|
|
|
|
## Safe Server pull
|
|
|
|
- Server pull is now the recommended deployment route and fetches the exact requested commit from Gitea.
|
|
- Each repository receives its own repository-scoped read-only deploy key; ForgeFlow never installs the desktop Gitea token on Unraid.
|
|
- Gitea SSH host fingerprints are pinned and checked before trust is changed and before every pull.
|
|
- Fetch, archive, checksum, Compose validation, activation and rollback remain exact-commit and transactional.
|
|
- Direct copy remains available when server-side Git access is undesirable, and monitoring-only links cannot deploy accidentally.
|
|
|
|
## Git hygiene
|
|
|
|
- Git Validator now also checks `.gitattributes`, `.editorconfig`, dependency lockfiles and a Gitea Actions workflow.
|
|
- Safe repairs create reviewable files without committing or pushing them automatically.
|
|
- Existing identity, upstream, synchronization, branch-protection, documentation, secret-path and oversized-file checks remain available in one scored view.
|
|
|
|
## Interface and reliability
|
|
|
|
- The deployment workspace now emphasizes repository, container, environment and live-versus-Gitea evidence, with a focused animated project illustration and clearer server inventory.
|
|
- Large unrelated server inventories are summarized instead of producing dozens of indistinguishable cards.
|
|
- Connection validation consistently opens the same encrypted Electron profile as the installed app.
|
|
- Obsolete ForgeFlow artifacts are removed from `dist` after every successful packaged build.
|
|
|
|
No container was restarted or replaced during automatic discovery. Deployments still require a successful preflight and an explicit user action.
|