Tags

Tags give the ability to mark specific points in history as being important
  • v0.3.3

    protected Release: v0.3.3
    pdns-api-cage v0.3.3
    
    An automatic patch release, made by the nightly pipeline: what ships
    differs from v0.3.2 in pdns-api-cage (amd64),pdns-api-cage (arm64). This tag is not signed;
    the pipeline admitted it only as the next patch on a line whose .0 the
    maintainer signed (RELEASING.md, "The nightly patch release").
  • v0.3.2

    protected Release: v0.3.2
    pdns-api-cage v0.3.2
    
    An automatic patch release, made by the nightly pipeline: what ships
    differs from v0.3.1 in pdns-api-cage (amd64),pdns-api-cage (arm64). This tag is not signed;
    the pipeline admitted it only as the next patch on a line whose .0 the
    maintainer signed (RELEASING.md, "The nightly patch release").
  • v0.3.1

    protected Release: v0.3.1
    pdns-api-cage v0.3.1
    
    * ci: compare only Go modules between the two architectures' SBOMs (5330533)
    
  • v0.3.0

    protected
    pdns-api-cage v0.3.0
    
    * Adopt the devtools submodule: containerised make, shared CI and tooling (225a068)
    * deps: go 1.27.1, go-landlock 0.10.1, x/sys 0.48.0, x/net 0.59.0, psx 1.2.78 (6ca109a)
    * sandbox: close outbound UDP by socket type, grade every probe by errno (0f8c070)
    
  • v0.2.0

    protected Release: v0.2.0
    pdns-api-cage v0.2.0
    
    * BREAKING: 'lego' preset renamed to 'acme' and expanded to support more clients (f848c0c)
    * ci: accept the hosted runners' missing Landlock in git, with the cost stated (707c29c)
    * ci: smoke-test the shipped image natively per architecture, and refuse to do it under emulation (32b4393)
    * ci: leave staging-unsigned in place for the next release to overwrite (4a6d4b9)
    
  • v0.1.1

    protected Release: v0.1.1
    pdns-api-cage v0.1.1
    
    * ci: publish X.Y and X tags that follow their own train (629c0ab)
    * ci: hold the build under a reused staging-unsigned tag, not a per-commit one (5b0ee38)
    * ci: float podman on latest rather than pinning bytes quay will collect (258f61a)
    * ci: stop the runner's shell from eating the release notes (43d6bb1)
    
  • v0.1.0

    protected Release: v0.1.0
    pdns-api-cage v0.1.0
    
    * ci: delete the sha-<commit> scaffolding tag once the release is published (40cf236)
    *  ci: publish the image as :X.Y.Z, without the git tag's leading v (58020ab)
    * ci: match scanner findings on any identifier, and assert the key shape (192de44)
    * ci: fail on openvex statements that match nothing in the SBOM (76bbb47)
    * ci: retry signature verification and drop osv-scanner (793564b)
    * ci: use cosign v3 bundle format for blob signing (74b7916)
    * ci: derive the SBOM guard from the binary, not the Go toolchain (76d2788)
    * ci: fix release tag verification and run scanners from a pinned toolchain (32f223f)
    * Initial commit (e06c90d)