• 2026.06.1
    CI / test (push) Successful in 2m34s
    CI / lint (push) Successful in 40s
    CI / vulncheck (push) Successful in 35s
    Release / release (push) Successful in 2m11s
    Release / docker (push) Successful in 20m32s
    Stable

    lerko released this 2026-06-01 23:27:04 +00:00 | 0 commits to main since this release

    ⚠️ Breaking Change

    Container now runs as non-root user uptop (UID/GID 1000) instead of root.

    Existing Docker users must migrate volume permissions before upgrading:

    docker run --rm -v <your_volume>:/data alpine chown -R 1000:1000 /data
    

    New installs are unaffected.

    What's changed

    • Non-root user — Container runs as uptop (UID 1000). Entrypoint validates /data is writable and exits with clear migration instructions if not.
    • Supply chain attestations — SBOM and provenance (mode=max) attached to all pushed images. Resolves Docker Scout compliance warnings.
    • SSH host key relocated — Host key now stored at /data/.ssh/id_ed25519 instead of /app/.ssh/ to support non-root writes.
    • Build cleanup — Release workflow prunes dangling images and build cache after each push, preventing runner bloat.
    Downloads