• 0.9.1 e2423bfb9f

    0.9.1
    All checks were successful
    published / fetched (push) Successful in 0s
    published / projectfile-is-valid (push) Successful in 3s
    published / signing-is-ready (push) Successful in 5s
    published / source-is-compliant (push) Successful in 6s
    published / source-is-tested (push) Successful in 5s
    published / source-is-secure (push) Successful in 26s
    published / documentation-passes-lint (push) Successful in 59s
    published / source-passes-lint (push) Successful in 51s
    published / projectfile-is-ok (push) Successful in 5s
    published / documentation-is-ok (push) Successful in 1s
    published / source-is-ok (push) Successful in 1s
    published / inputs-are-ok (push) Successful in 1s
    published / binaries-are-built (amd64, linux) (push) Successful in 18s
    published / binaries-are-built (riscv64, linux) (push) Successful in 10s
    published / binaries-are-built (arm64, linux) (push) Successful in 12s
    published / image-is-built (amd64) (push) Successful in 7m51s
    published / gsa (amd64, linux) (push) Successful in 1m4s
    published / gsa (riscv64, linux) (push) Successful in 4s
    published / gsa (arm64, linux) (push) Successful in 4s
    published / image-has-sbom (amd64) (push) Successful in 19s
    published / secrets-ready (push) Successful in 1s
    published / image-is-seeded (amd64) (push) Successful in 19s
    published / image-is-secure (amd64) (push) Successful in 3m26s
    published / binaries-are-ok (push) Successful in 1s
    published / images-are-ok (push) Successful in 1s
    published / binaries-are-signed (push) Successful in 36s
    published / container-is-ok (push) Successful in 1s
    published / binaries-are-torrented (push) Successful in 1m12s
    published / container-ready-to-test (push) Successful in 1s
    published / container-is-diagnosed (push) Successful in 0s
    published / container-is-verified (amd64) (push) Successful in 1m29s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 1s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (kiota) (push) Successful in 12s
    published / image-is-attested (dockerhub) (push) Successful in 40s
    published / release-is-published (push) Successful in 5s
    published / release-notes-are-published (push) Successful in 5s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-11 01:35:07 +00:00 | 13 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    16 commits, 1 contributor, 16 hours since 0.9.0.

    Bug fixes

    • guard: make the JSON depth cap count nesting (0d3916b)
    • intake: bound the redaction walk by the JSON depth cap (4adfe73)
    • telemetry: let the retry budget own the export ceiling (21588f1)
    • intake: claim a whole batch before enqueuing any of it (181af2d)
    • server: spend a rate token on the CORS preflight (fb3c2fe)
    • intake: cut every clipped value on a rune boundary (042a26f)
    • test: scope intake START globally so label query survives set -u (b65cd7a)
    • test: carry the clipped-type probe in failure-info (b012659)

    Performance

    • guard: move the idle-bucket sweep off the request path (af4c4f7)

    Installation

    Container image

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/report-relay:0.9.1
    

    This release also publishes the 0.9 and 0 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/damian-buho/report-relay:0.9.1
    

    Prebuilt binary

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/report-relay https://kiota.ch/damian-buho/report-relay/releases/download/0.9.1/report-relay-linux-$(uname -m)
    chmod +x ~/.local/bin/report-relay
    ~/.local/bin/report-relay --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64

    Usage

    Run the service in the background, publishing its ports:

    docker run --detach --publish 8080:8080/tcp --publish 8081:8081/tcp damianbuho/report-relay:0.9.1
    

    Then check that it answers:

    curl http://localhost:8081/healthz
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5
    docker pull kiota.ch/damian-buho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5
    
    Platform Digest Size
    linux/amd64 sha256:9a8299fb35a8c8ede3f0fa6eab6e76a66c486f46f299fc0b23217a242e4508f3 95.9 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/damian-buho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/damian-buho/report-relay@sha256:3401ab7d51972104c1b88d5e8c861f3ab33d7949811fe7fb196b1edb27a924d5
    

    Prebuilt binary

    The signature proves the binary is the one the maintainer’s release key signed.

    gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257
    curl --fail --location --output report-relay.asc https://kiota.ch/damian-buho/report-relay/releases/download/0.9.1/report-relay-linux-$(uname -m).asc
    gpg --verify report-relay.asc report-relay
    

    Download via BitTorrent

    Fetch this release over BitTorrent with a magnet link, or with the attached .torrent file:

    Full changes: https://kiota.ch/damian-buho/report-relay/compare/0.9.0...0.9.1

    Downloads