Skip to content

Changelog

All notable changes to the ci runner image are documented here. Versioning follows Semantic Versioning; every build on main (push / daily schedule / manual dispatch) cuts a new SemVer patch. This file is generated by git-cliff from the Conventional-Commit history — do not edit by hand.

[1.0.56] - 2026-08-24

Chores

  • Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#23) (6fade83)
  • Bump actions/checkout from 4.3.1 to 7.0.1 (#21) (0ba0df7)
  • Bump ubuntu from 786a8b5 to 33ceb71 (#22) (1d50f11)

[1.0.54] - 2026-08-23

Added

  • Auto-detect org vs repo scope + idempotent token minting (#20) (a19c2cc)

[1.0.46] - 2026-08-16

Chores

  • Bump docker/metadata-action from 5.10.0 to 6.2.0 (#11) (d5c66fa)
  • Bump docker/build-push-action from 7.2.0 to 7.3.0 (#12) (7603873)
  • Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#14) (057f2da)
  • Bump actions/setup-python from 6.3.0 to 7.0.0 (#15) (d2cc6be)
  • Bump actions/checkout from 4.3.1 to 7.0.1 (#17) (f5b65eb)
  • Bump docker/login-action from 3.7.0 to 4.6.0 (#18) (fb7ac07)

[1.0.9] - 2026-07-11

Added

  • Auto-detect org vs repo scope + idempotent token minting (#10) (4fe51d5)

[1.0.8] - 2026-07-11

Chores

  • Public-repo polish — de-branding (S-08), docs site, badges, security files (#9) (b69fe75)

[1.0.7] - 2026-07-11

Fixed

  • Harden token handling, de-registration, and socket-GID grant (#8) (4c3b24e)

[1.0.6] - 2026-07-08

Fixed

  • Pre-install trivy at a pinned version (lock-step with kadenz#1186) (1c20fc0)
  • Add gettext-base for cosign-installer's envsubst dependency (2bd825f)

[1.0.1] - 2026-06-30

Fixed

  • Grant runner user access to the bind-mounted docker socket (3d48b36)

[1.0.0] - 2026-06-30

Added

  • SemVer release pipeline with cosign signing + changelog (7a81ad5)
  • Custom self-hosted runner image for the Kadenz CI pool (2d74a45)

Chores

  • Publish image as ghcr.io/kadenz-live/ci (short name) (1f9d3d6)