-
0.9.1
StableAll checks were successfulpublished / fetched (push) Successful in 0spublished / projectfile-is-valid (push) Successful in 3spublished / signing-is-ready (push) Successful in 5spublished / source-is-compliant (push) Successful in 6spublished / source-is-tested (push) Successful in 5spublished / source-is-secure (push) Successful in 26spublished / documentation-passes-lint (push) Successful in 59spublished / source-passes-lint (push) Successful in 51spublished / projectfile-is-ok (push) Successful in 5spublished / documentation-is-ok (push) Successful in 1spublished / source-is-ok (push) Successful in 1spublished / inputs-are-ok (push) Successful in 1spublished / binaries-are-built (amd64, linux) (push) Successful in 18spublished / binaries-are-built (riscv64, linux) (push) Successful in 10spublished / binaries-are-built (arm64, linux) (push) Successful in 12spublished / image-is-built (amd64) (push) Successful in 7m51spublished / gsa (amd64, linux) (push) Successful in 1m4spublished / gsa (riscv64, linux) (push) Successful in 4spublished / gsa (arm64, linux) (push) Successful in 4spublished / image-has-sbom (amd64) (push) Successful in 19spublished / secrets-ready (push) Successful in 1spublished / image-is-seeded (amd64) (push) Successful in 19spublished / image-is-secure (amd64) (push) Successful in 3m26spublished / binaries-are-ok (push) Successful in 1spublished / images-are-ok (push) Successful in 1spublished / binaries-are-signed (push) Successful in 36spublished / container-is-ok (push) Successful in 1spublished / binaries-are-torrented (push) Successful in 1m12spublished / container-ready-to-test (push) Successful in 1spublished / container-is-diagnosed (push) Successful in 0spublished / container-is-verified (amd64) (push) Successful in 1m29spublished / image-is-ready (push) Successful in 0spublished / artifacts-are-ok (push) Successful in 0spublished / ready-to-publish (push) Successful in 0spublished / publish-image (push) Successful in 1spublished / image-is-signed (push) Successful in 0spublished / image-is-attested (kiota) (push) Successful in 12spublished / image-is-attested (dockerhub) (push) Successful in 40spublished / release-is-published (push) Successful in 5spublished / release-notes-are-published (push) Successful in 5spublished / published (push) Successful in 0sreleased this
2026-10-11 01:35:07 +00:00 | 13 commits to dev since this release16 commits, 1 contributor, 16 hours since 0.9.0.
Bug fixes
- guard: make the JSON depth cap count nesting (
0d3916b) - intake: bound the redaction walk by the JSON depth cap (
4adfe73) - telemetry: let the retry budget own the export ceiling (
21588f1) - intake: claim a whole batch before enqueuing any of it (
181af2d) - server: spend a rate token on the CORS preflight (
fb3c2fe) - intake: cut every clipped value on a rune boundary (
042a26f) - test: scope intake START globally so label query survives set -u (
b65cd7a) - test: carry the clipped-type probe in failure-info (
b012659)
Performance
- guard: move the idle-bucket sweep off the request path (
af4c4f7)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/report-relay:0.9.1This release also publishes the
0.9and0tags — pull the precision you want to pin.If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/damian-buho/report-relay:0.9.1Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/report-relay https://kiota.ch/damian-buho/report-relay/releases/download/0.9.1/report-relay-linux-$(uname -m) chmod +x ~/.local/bin/report-relay ~/.local/bin/report-relay --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64Usage
Run the service in the background, publishing its ports:
docker run --detach --publish 8080:8080/tcp --publish 8081:8081/tcp damianbuho/report-relay:0.9.1Then check that it answers:
curl http://localhost:8081/healthzImage digests
A tag can move; a digest cannot. Pull this exact build:
docker pull docker.io/damianbuho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5 docker pull kiota.ch/damian-buho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5Platform Digest Size linux/amd64 sha256:9a8299fb35a8c8ede3f0fa6eab6e76a66c486f46f299fc0b23217a242e4508f395.9 MB Sizes are compressed layer bytes as stored in the registry.
Verify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5 cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/damian-buho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5 cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5 cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/damian-buho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5Prebuilt binary
The signature proves the binary is the one the maintainer’s release key signed.
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257 curl --fail --location --output report-relay.asc https://kiota.ch/damian-buho/report-relay/releases/download/0.9.1/report-relay-linux-$(uname -m).asc gpg --verify report-relay.asc report-relayDownload via BitTorrent
Fetch this release over BitTorrent with a magnet link, or with the attached
.torrentfile:Full changes: https://kiota.ch/damian-buho/report-relay/compare/0.9.0...0.9.1
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- guard: make the JSON depth cap count nesting (