Prepare 0.4.5 release

UPGRADING.md

@@ -2,6 +2,23 @@
 
 Version-to-version notes. Anything not mentioned here needs no action.
 
+## 0.4.4 to 0.4.5
+
+Upgrade the chart and operator together:
+
+```sh
+helm upgrade understudy oci://ghcr.io/kylan11/charts/understudy \
+  --namespace understudy-system --version 0.4.5
+```
+
+There are no CRD schema or configuration changes from v0.4.4. This release fixes
+sentinel startup, bounds holds when surging fails, and watches node signals on
+every operator replica.
+
+Stand-ins now honour the target Deployment or Rollout's `minReadySeconds`.
+Allow for that warm-up period when configuring `readinessDeadlineSeconds`;
+the deadline still releases a hold if replacement availability takes too long.
+
 ## 0.4.3 to 0.4.4
 
 `spec.baselineReplicas` opts into continuous capacity management. Existing

charts/understudy/Chart.yaml

@@ -5,8 +5,8 @@ description: >-
   downtime from announced node disruptions (drains, upgrades, consolidation,
   spot reclaims) without a standing second replica.
 type: application
-version: 0.4.4
-appVersion: "0.4.4"
+version: 0.4.5
+appVersion: "0.4.5"
 kubeVersion: ">=1.34.0-0"
 keywords:
   - availability
@@ -42,7 +42,7 @@ annotations:
       url: https://github.com/kylan11/understudy/issues
   artifacthub.io/images: |
     - name: understudy
-      image: ghcr.io/kylan11/understudy:0.4.4
+      image: ghcr.io/kylan11/understudy:0.4.5
   artifacthub.io/crds: |
     - kind: Understudy
       version: v1alpha1
@@ -65,9 +65,13 @@ annotations:
         minSurgeTimeSeconds: 60
         readinessDeadlineSeconds: 600
   artifacthub.io/changes: |
-    - kind: added
-      description: Optional baselineReplicas separates Git-owned desired capacity from effective Deployment and Rollout replicas, deferring capacity changes until handover completes
-    - kind: added
-      description: BaselineApplied status and documented Argo CD field delegation expose and preserve pending capacity changes
     - kind: fixed
-      description: Detect Deployment releases during an active surge and apply the latest baseline when application releases take over
+      description: Remove the obsolete sentinel mode flag and verify chart arguments against both binaries in CI
+    - kind: fixed
+      description: Honour Deployment and Rollout minReadySeconds before counting stand-ins as available
+    - kind: fixed
+      description: Bound eviction holds even when replica changes or pod deletion-cost updates fail
+    - kind: fixed
+      description: Watch node signals on every operator replica so standby webhooks exclude doomed nodes
+    - kind: security
+      description: Update x/net, gRPC, and OpenTelemetry dependencies past identified advisories

docs/roadmap.md

@@ -1,5 +1,13 @@
 # Roadmap
 
+## v0.4.5 - Handover reliability
+
+Stand-ins honour `minReadySeconds`, failed surges retain the bounded eviction
+hold, and every operator replica watches node signals for webhook decisions.
+The sentinel chart arguments are corrected and checked against the binaries in
+CI. Dependency updates address identified x/net, gRPC, and OpenTelemetry
+advisories.
+
 ## v0.4.4 - GitOps baseline capacity
 
 `spec.baselineReplicas` lets Git supply the desired baseline while Understudy