From 19f7db1995d911d1302c775a0d67eee737acfa55 Mon Sep 17 00:00:00 2001 From: Konrad Ferdinand Heimel Date: Tue, 21 Jul 2026 23:09:44 +0200 Subject: [PATCH] :memo: docs(changelog): update for v0.2.1 Move Unreleased entries under the 0.2.1 section after the tag, and close the session handoff now that publish/sign/mirror all succeeded. --- CHANGELOG.md | 14 ++--- agent-context/coordination/OPERATOR-BOARD.md | 8 +-- agent-context/coordination/SESSION-HANDOFF.md | 61 ++++++------------- 3 files changed, 29 insertions(+), 54 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index eb05250..3bfbe3a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,24 +8,24 @@ Release notes are generated from [Conventional Commits](https://www.conventional (with a leading gitmoji token) on the default branch using [git-cliff](https://git-cliff.org/). -## [Unreleased] +## [0.2.1](https://github.com/platformrelay/provider-gridscale/compare/v0.2.0..v0.2.1) - 2026-07-21 ### Bug Fixes -- **deps:** Bump golang.org/x/text to v0.39.0 for GO-2026-5970 [2f69d44](https://github.com/platformrelay/provider-gridscale/commit/2f69d448366a714105af788b641679ed611c8d2c) +- **deps:** Bump golang.org/x/text to v0.39.0 for GO-2026-5970 [03f1c31](https://github.com/platformrelay/provider-gridscale/commit/03f1c3190cb36a5b508cd4346eef242a686cac86) - **ci:** Accept up v0.51 per-extension annotations in D-020-FU verify [43294ed](https://github.com/platformrelay/provider-gridscale/commit/43294edb7cb5e32de9e309e17e6d07d3fbc0cee4) ### Documentation -- Sync CHANGELOG (post-badge bump) [6a8b59b](https://github.com/platformrelay/provider-gridscale/commit/6a8b59bc24d55a0d36880529ddd562832c2185fc) +- Sync CHANGELOG (post-badge bump) [e337c7c](https://github.com/platformrelay/provider-gridscale/commit/e337c7c95a5fb5882ee3832f68851a3b048c2c54) -- Point Marketplace badge at v0.2.1 [a963468](https://github.com/platformrelay/provider-gridscale/commit/a963468f88f42d551043ff419b29f5bc44ba5ece) +- Point Marketplace badge at v0.2.1 [fee45f3](https://github.com/platformrelay/provider-gridscale/commit/fee45f3d28e78ceaa0daee88d377684ce33b2f30) -- Sync CHANGELOG and bump install refs to v0.2.1 [dd6894a](https://github.com/platformrelay/provider-gridscale/commit/dd6894ac061f55367f43551fee2957116f0a3b38) +- Sync CHANGELOG and bump install refs to v0.2.1 [270950a](https://github.com/platformrelay/provider-gridscale/commit/270950a0b635a2fe83bd33540bc10a9b19ac7345) -- Kollect-style badges, README, and logo candidates [5fd649a](https://github.com/platformrelay/provider-gridscale/commit/5fd649acd75ed582dec28034656e093d0708c764) +- Kollect-style badges, README, and logo candidates [97b9c87](https://github.com/platformrelay/provider-gridscale/commit/97b9c87f574ba0b2e6622ab8a1591fadb88da610) - Sync CHANGELOG (post-rebase SHA) ([#14](https://github.com/platformrelay/provider-gridscale/pull/14))[422450b](https://github.com/platformrelay/provider-gridscale/commit/422450b765fc37fc7d33c6be4e8dc60413502b5b) @@ -42,7 +42,7 @@ Release notes are generated from [Conventional Commits](https://www.conventional ### Miscellaneous -- **ci:** Declare top-level workflow permissions [ad84edf](https://github.com/platformrelay/provider-gridscale/commit/ad84edf016ebd2e1635761a9f71a7276f3a67242) +- **ci:** Declare top-level workflow permissions [1e07b86](https://github.com/platformrelay/provider-gridscale/commit/1e07b86ed2c1adf5182cead5f34c228c86e157a3) ## [0.2.0](https://github.com/platformrelay/provider-gridscale/compare/v0.1.1..v0.2.0) - 2026-07-17 diff --git a/agent-context/coordination/OPERATOR-BOARD.md b/agent-context/coordination/OPERATOR-BOARD.md index b0413bc..1c56ce5 100644 --- a/agent-context/coordination/OPERATOR-BOARD.md +++ b/agent-context/coordination/OPERATOR-BOARD.md @@ -1,13 +1,13 @@ # OPERATOR-BOARD — provider-gridscale (lanes + locks) -Coordinator: session **2026-07-21** (vuln + badges + logos + docs). Base: `origin/main` @ `422450b`. -**In flight:** L-DOCS-BRAND on branch `docs/readme-badges-logos`. +Coordinator: session wrap **2026-07-21** (v0.2.1 security patch + docs). Base: `origin/main` @ `c53fc82`. +**No lanes In-flight.** **v0.2.1 published & signed** — see [`SESSION-HANDOFF.md`](SESSION-HANDOFF.md). -### Batch 10 — vuln + README/docs + logo candidates (2026-07-21) — in flight +### Batch 10 — vuln + README/docs + logo candidates (2026-07-21) — landed on `main` | Lane | Story | State | | --- | --- | --- | -| L-DOCS-BRAND | Fix `golang.org/x/text` GO-2026-5970; Scorecard top-level permissions; kollect-style badges; README/docs; logo candidates A–G; BRAND-2 INBOX | 🔶 In flight (`docs/readme-badges-logos`) | +| L-DOCS-BRAND | x/text GO-2026-5970; Scorecard permissions; kollect badges; README/docs; logo candidates; BRAND-2 INBOX | ✅ Merged PR #15 → tag **v0.2.1** published ([run](https://github.com/PlatformRelay/provider-gridscale/actions/runs/29868142402)) | ### Batch 9 — badges + v0.2.0 release (2026-07-17c) — landed on `main` diff --git a/agent-context/coordination/SESSION-HANDOFF.md b/agent-context/coordination/SESSION-HANDOFF.md index 227ed20..bb394da 100644 --- a/agent-context/coordination/SESSION-HANDOFF.md +++ b/agent-context/coordination/SESSION-HANDOFF.md @@ -1,57 +1,32 @@ # SESSION-HANDOFF — provider-gridscale -**Session wrap:** 2026-07-17c (badges + signed v0.2.0 release). -**HEAD:** `origin/main` @ `43294ed` (D-020-FU verify accepts `up` v0.51 per-extension annotations). -**Main CI:** Scorecard green after re-run; publish green on re-dispatch. -**Latest package tag:** **`v0.2.0`** — published to GHCR + Upbound, **keyless-cosign signed**, +**Session wrap:** 2026-07-21 (vuln patch + README/docs + logo candidates → **v0.2.1**). +**HEAD:** `origin/main` @ `c53fc82` (docs(changelog) sync for PR #15); wrap PR may tip further. +**Latest package tag:** **`v0.2.1`** — published to GHCR + Upbound, **keyless-cosign signed**, extensions verified, SBOM attested -([run 29574409336](https://github.com/PlatformRelay/provider-gridscale/actions/runs/29574409336)). -Prefer this over unsigned `v0.1.1`. Do **not** re-sign v0.1.1. -**Merge model:** local rebase + ff-merge → push `main` (no PRs), per operator. +([run 29868142402](https://github.com/PlatformRelay/provider-gridscale/actions/runs/29868142402)). +Prefer this over v0.2.0. Shipping Marketplace icon still the press Bildmarke until **BRAND-2**. +**Merge model:** PRs into `main`; solo via `gh pr merge --rebase --admin`. ## Done this session | Item | Result | | --- | --- | -| README badges | Dropped Go Report Card; replaced Actions Scorecard status with **OpenSSF Scorecard** API badge; Marketplace → v0.2.0 | -| Releases badge | Was "no releases found" — only git tags existed. Created GitHub Releases for v0.1.0-alpha.1…v0.2.0 | -| CHANGELOG / tag | Regenerated for 0.2.0; annotated tag `v0.2.0` @ `1799637` | -| Publish #1 | Failed closed at verify (annotation scheme) — safe, no bad signature | -| Verify fix | `43294ed` — accept `upbound` **or** `icons`/`readme` | -| Publish #2 | **All green** — publish-artifacts, mirror-to-upbound, sign-and-sbom | +| GO-2026-5970 | `golang.org/x/text` → v0.39.0; `make vuln` / Govulncheck green | +| Scorecard Token-Permissions | Top-level `permissions:` on backport / tag / publish | +| README badges | Kollect-style native Actions badges + Scorecard/codecov/Marketplace/GHCR | +| Docs | `docs/README.md`, assurance Scorecard drivers, branding candidates A–G | +| PR #15 | Merged rebase-admin → `main` | +| Release | Annotated tag + GitHub Release **v0.2.1**; publish **all green** | -## Repo state (clean) +## Open for the operator -| Area | State | -| --- | --- | -| Branches | Only `main` (local + remote). | -| Worktrees | Only the main checkout. | -| Open PRs (this repo) | None (changelog workflow may open an automated PR for the tag — merge if it appears). | -| Working tree | Clean after coordination commit. | -| Upstream fork | `konih/terraform-provider-gridscale` PRs #509/#510/#511 still open on gridscale:master. | - -## Open items for the operator (nothing blocking) - -1. **Revoke old classic PAT** briefly stored as `GHCR_PAT` (local `.envrc` only). -2. **Upstream PR review** — #509/#510/#511; on merge, re-vendor + drop local U-1/LB-1 overrides. -3. **TEST-2** (operator-blocked) — uptest e2e needs live gridscale lab creds as CI secrets. - -## Next entry points - -1. Watch upstream #509/#510/#511; on merge, re-vendor + drop overrides. -2. Backlog otherwise exhausted — only TEST-2 + BRAND-1 deferred remain. - -## Learnings - -1. **GitHub Releases ≠ tags.** shields.io `/github/v/release` needs `gh release create`, not just `git tag`. -2. **`up` v0.51.0 annotation scheme** — discrete `icons`/`readme`/`docs`/`release-notes` layers; legacy - combined `upbound` still appears on some platform children. Verify must accept both. -3. **Fail-closed worked as designed** — first dispatch refused to sign; fix + re-dispatch produced a - signed extension-bearing digest. +1. **BRAND-2** — pick logo candidate (recommended **F**) or keep Bildmarke — see INBOX. +2. Revoke old classic PAT (local `.envrc` only). +3. Upstream TF PRs #509/#510/#511. ## Do not -- Re-dispatch publish to "re-sign" v0.1.1 (strips extensions — D-020). +- Re-sign v0.1.1 / strip extensions. - Hand-edit generated trees or `config/schema.json`. -- Bump `TERRAFORM_VERSION` past 1.5.7 (BSL pin). -- Reintroduce a personal PAT as an Actions secret. +- Bump `TERRAFORM_VERSION` past 1.5.7.