PlatformRelay · konih · Jul 21, 2026 · Jul 21, 2026
@@ -8,24 +8,24 @@ Release notes are generated from [Conventional Commits](https://www.conventional
 (with a leading gitmoji token) on the default branch using
 [git-cliff](https://git-cliff.org/).
 
-## [Unreleased]
+## [0.2.1](https://github.com/platformrelay/provider-gridscale/compare/v0.2.0..v0.2.1) - 2026-07-21
 
 ### Bug Fixes
 
-- **deps:** Bump golang.org/x/text to v0.39.0 for GO-2026-5970 [2f69d44](https://github.com/platformrelay/provider-gridscale/commit/2f69d448366a714105af788b641679ed611c8d2c)
+- **deps:** Bump golang.org/x/text to v0.39.0 for GO-2026-5970 [03f1c31](https://github.com/platformrelay/provider-gridscale/commit/03f1c3190cb36a5b508cd4346eef242a686cac86)
 
 - **ci:** Accept up v0.51 per-extension annotations in D-020-FU verify [43294ed](https://github.com/platformrelay/provider-gridscale/commit/43294edb7cb5e32de9e309e17e6d07d3fbc0cee4)
 
 
 ### Documentation
 
-- Sync CHANGELOG (post-badge bump) [6a8b59b](https://github.com/platformrelay/provider-gridscale/commit/6a8b59bc24d55a0d36880529ddd562832c2185fc)
+- Sync CHANGELOG (post-badge bump) [e337c7c](https://github.com/platformrelay/provider-gridscale/commit/e337c7c95a5fb5882ee3832f68851a3b048c2c54)
 
-- Point Marketplace badge at v0.2.1 [a963468](https://github.com/platformrelay/provider-gridscale/commit/a963468f88f42d551043ff419b29f5bc44ba5ece)
+- Point Marketplace badge at v0.2.1 [fee45f3](https://github.com/platformrelay/provider-gridscale/commit/fee45f3d28e78ceaa0daee88d377684ce33b2f30)
 
-- Sync CHANGELOG and bump install refs to v0.2.1 [dd6894a](https://github.com/platformrelay/provider-gridscale/commit/dd6894ac061f55367f43551fee2957116f0a3b38)
+- Sync CHANGELOG and bump install refs to v0.2.1 [270950a](https://github.com/platformrelay/provider-gridscale/commit/270950a0b635a2fe83bd33540bc10a9b19ac7345)
 
-- Kollect-style badges, README, and logo candidates [5fd649a](https://github.com/platformrelay/provider-gridscale/commit/5fd649acd75ed582dec28034656e093d0708c764)
+- Kollect-style badges, README, and logo candidates [97b9c87](https://github.com/platformrelay/provider-gridscale/commit/97b9c87f574ba0b2e6622ab8a1591fadb88da610)
 
 - Sync CHANGELOG (post-rebase SHA) ([#14](https://github.com/platformrelay/provider-gridscale/pull/14))[422450b](https://github.com/platformrelay/provider-gridscale/commit/422450b765fc37fc7d33c6be4e8dc60413502b5b)
 
@@ -42,7 +42,7 @@ Release notes are generated from [Conventional Commits](https://www.conventional
 
 ### Miscellaneous
 
-- **ci:** Declare top-level workflow permissions [ad84edf](https://github.com/platformrelay/provider-gridscale/commit/ad84edf016ebd2e1635761a9f71a7276f3a67242)
+- **ci:** Declare top-level workflow permissions [1e07b86](https://github.com/platformrelay/provider-gridscale/commit/1e07b86ed2c1adf5182cead5f34c228c86e157a3)
 
 ## [0.2.0](https://github.com/platformrelay/provider-gridscale/compare/v0.1.1..v0.2.0) - 2026-07-17
 

@@ -1,13 +1,13 @@
 # OPERATOR-BOARD — provider-gridscale (lanes + locks)
 
-Coordinator: session **2026-07-21** (vuln + badges + logos + docs). Base: `origin/main` @ `422450b`.
-**In flight:** L-DOCS-BRAND on branch `docs/readme-badges-logos`.
+Coordinator: session wrap **2026-07-21** (v0.2.1 security patch + docs). Base: `origin/main` @ `c53fc82`.
+**No lanes In-flight.** **v0.2.1 published & signed** — see [`SESSION-HANDOFF.md`](SESSION-HANDOFF.md).
 
-### Batch 10 — vuln + README/docs + logo candidates (2026-07-21) — in flight
+### Batch 10 — vuln + README/docs + logo candidates (2026-07-21) — landed on `main`
 
 | Lane | Story | State |
 | --- | --- | --- |
-| L-DOCS-BRAND | Fix `golang.org/x/text` GO-2026-5970; Scorecard top-level permissions; kollect-style badges; README/docs; logo candidates A–G; BRAND-2 INBOX | 🔶 In flight (`docs/readme-badges-logos`) |
+| L-DOCS-BRAND | x/text GO-2026-5970; Scorecard permissions; kollect badges; README/docs; logo candidates; BRAND-2 INBOX | ✅ Merged PR #15 → tag **v0.2.1** published ([run](https://github.com/PlatformRelay/provider-gridscale/actions/runs/29868142402)) |
 
 ### Batch 9 — badges + v0.2.0 release (2026-07-17c) — landed on `main`
 

@@ -1,57 +1,32 @@
 # SESSION-HANDOFF — provider-gridscale
 
-**Session wrap:** 2026-07-17c (badges + signed v0.2.0 release).
-**HEAD:** `origin/main` @ `43294ed` (D-020-FU verify accepts `up` v0.51 per-extension annotations).
-**Main CI:** Scorecard green after re-run; publish green on re-dispatch.
-**Latest package tag:** **`v0.2.0`** — published to GHCR + Upbound, **keyless-cosign signed**,
+**Session wrap:** 2026-07-21 (vuln patch + README/docs + logo candidates → **v0.2.1**).
+**HEAD:** `origin/main` @ `c53fc82` (docs(changelog) sync for PR #15); wrap PR may tip further.
+**Latest package tag:** **`v0.2.1`** — published to GHCR + Upbound, **keyless-cosign signed**,
 extensions verified, SBOM attested
-([run 29574409336](https://github.com/PlatformRelay/provider-gridscale/actions/runs/29574409336)).
-Prefer this over unsigned `v0.1.1`. Do **not** re-sign v0.1.1.
-**Merge model:** local rebase + ff-merge → push `main` (no PRs), per operator.
+([run 29868142402](https://github.com/PlatformRelay/provider-gridscale/actions/runs/29868142402)).
+Prefer this over v0.2.0. Shipping Marketplace icon still the press Bildmarke until **BRAND-2**.
+**Merge model:** PRs into `main`; solo via `gh pr merge --rebase --admin`.
 
 ## Done this session
 
 | Item | Result |
 | --- | --- |
-| README badges | Dropped Go Report Card; replaced Actions Scorecard status with **OpenSSF Scorecard** API badge; Marketplace → v0.2.0 |
-| Releases badge | Was "no releases found" — only git tags existed. Created GitHub Releases for v0.1.0-alpha.1…v0.2.0 |
-| CHANGELOG / tag | Regenerated for 0.2.0; annotated tag `v0.2.0` @ `1799637` |
-| Publish #1 | Failed closed at verify (annotation scheme) — safe, no bad signature |
-| Verify fix | `43294ed` — accept `upbound` **or** `icons`/`readme` |
-| Publish #2 | **All green** — publish-artifacts, mirror-to-upbound, sign-and-sbom |
+| GO-2026-5970 | `golang.org/x/text` → v0.39.0; `make vuln` / Govulncheck green |
+| Scorecard Token-Permissions | Top-level `permissions:` on backport / tag / publish |
+| README badges | Kollect-style native Actions badges + Scorecard/codecov/Marketplace/GHCR |
+| Docs | `docs/README.md`, assurance Scorecard drivers, branding candidates A–G |
+| PR #15 | Merged rebase-admin → `main` |
+| Release | Annotated tag + GitHub Release **v0.2.1**; publish **all green** |
 
-## Repo state (clean)
+## Open for the operator
 
-| Area | State |
-| --- | --- |
-| Branches | Only `main` (local + remote). |
-| Worktrees | Only the main checkout. |
-| Open PRs (this repo) | None (changelog workflow may open an automated PR for the tag — merge if it appears). |
-| Working tree | Clean after coordination commit. |
-| Upstream fork | `konih/terraform-provider-gridscale` PRs #509/#510/#511 still open on gridscale:master. |
-
-## Open items for the operator (nothing blocking)
-
-1. **Revoke old classic PAT** briefly stored as `GHCR_PAT` (local `.envrc` only).
-2. **Upstream PR review** — #509/#510/#511; on merge, re-vendor + drop local U-1/LB-1 overrides.
-3. **TEST-2** (operator-blocked) — uptest e2e needs live gridscale lab creds as CI secrets.
-
-## Next entry points
-
-1. Watch upstream #509/#510/#511; on merge, re-vendor + drop overrides.
-2. Backlog otherwise exhausted — only TEST-2 + BRAND-1 deferred remain.
-
-## Learnings
-
-1. **GitHub Releases ≠ tags.** shields.io `/github/v/release` needs `gh release create`, not just `git tag`.
-2. **`up` v0.51.0 annotation scheme** — discrete `icons`/`readme`/`docs`/`release-notes` layers; legacy
-   combined `upbound` still appears on some platform children. Verify must accept both.
-3. **Fail-closed worked as designed** — first dispatch refused to sign; fix + re-dispatch produced a
-   signed extension-bearing digest.
+1. **BRAND-2** — pick logo candidate (recommended **F**) or keep Bildmarke — see INBOX.
+2. Revoke old classic PAT (local `.envrc` only).
+3. Upstream TF PRs #509/#510/#511.
 
 ## Do not
 
-- Re-dispatch publish to "re-sign" v0.1.1 (strips extensions — D-020).
+- Re-sign v0.1.1 / strip extensions.
 - Hand-edit generated trees or `config/schema.json`.
-- Bump `TERRAFORM_VERSION` past 1.5.7 (BSL pin).
-- Reintroduce a personal PAT as an Actions secret.
+- Bump `TERRAFORM_VERSION` past 1.5.7.