• 2.3.0 b2d81f7430

    2.3.0
    All checks were successful
    published / fetched (push) Successful in 0s
    published / projectfile-is-valid (push) Successful in 7s
    published / signing-is-ready (push) Successful in 9s
    published / source-is-compliant (push) Successful in 12s
    published / source-is-tested (push) Successful in 7s
    published / source-is-secure (push) Successful in 17s
    published / documentation-passes-lint (push) Successful in 1m12s
    published / documentation-is-ok (push) Successful in 0s
    published / projectfile-is-ok (push) Successful in 8s
    published / source-passes-lint (push) Successful in 1m18s
    published / source-is-ok (push) Successful in 0s
    published / inputs-are-ok (push) Successful in 0s
    published / binaries-are-built (amd64, darwin) (push) Successful in 16s
    published / binaries-are-built (amd64, linux) (push) Successful in 15s
    published / binaries-are-built (arm64, darwin) (push) Successful in 9s
    published / binaries-are-built (arm64, linux) (push) Successful in 6s
    published / binaries-are-built (riscv64, linux) (push) Successful in 5s
    published / gsa (riscv64, linux) (push) Successful in 17s
    published / gsa (amd64, darwin) (push) Successful in 21s
    published / gsa (arm64, darwin) (push) Successful in 19s
    published / gsa (amd64, linux) (push) Successful in 19s
    published / gsa (arm64, linux) (push) Successful in 19s
    published / binaries-are-ok (push) Successful in 0s
    published / binaries-are-signed (amd64, linux) (push) Successful in 9s
    published / binaries-are-signed (amd64, darwin) (push) Successful in 10s
    published / binaries-are-signed (arm64, darwin) (push) Successful in 10s
    published / binaries-are-signed (arm64, linux) (push) Successful in 11s
    published / binaries-are-signed (riscv64, linux) (push) Successful in 4s
    published / image-is-built (amd64) (push) Successful in 1m36s
    published / secrets-ready (push) Successful in 0s
    published / image-has-sbom (amd64) (push) Successful in 27s
    published / images-are-ok (push) Successful in 0s
    published / image-is-secure (amd64) (push) Successful in 29s
    published / container-is-ok (push) Successful in 0s
    published / container-ready-to-test (push) Successful in 0s
    published / container-is-diagnosed (push) Successful in 0s
    published / container-is-verified (amd64) (push) Successful in 1m27s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (kiota) (push) Successful in 22s
    published / image-is-attested (dockerhub) (push) Successful in 44s
    published / release-is-published (push) Successful in 7s
    published / release-notes-are-published (push) Successful in 36s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-09 06:45:01 +00:00 | 124 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    6 commits, 1 contributor, 4 hours since 2.2.7.

    Features

    • render: lower tool keep-going to a status-function step gate (32adde3)

    Bug fixes

    • render: keep each fused member's event gate (b476a6e)

    Installation

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/projectfile/ci:2.3.0
    

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.3.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m)
    chmod +x ~/.local/bin/pf-ci
    ~/.local/bin/pf-ci --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64, darwin/amd64, darwin/arm64

    Usage

    Lower the CI DAG to a forge’s workflow files:

    pf-ci resolve
    pf-ci generate -target forgejo
    pf-ci generate -target gha -check
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/projectfile-ci@sha256:5553413d3918b1389bfbb69dc8af58cb9484b2653607657e910012238ec520d4
    docker pull kiota.ch/projectfile/ci@sha256:5553413d3918b1389bfbb69dc8af58cb9484b2653607657e910012238ec520d4
    
    Platform Digest Size
    linux/amd64 sha256:b774e9332edf0b6a9e1f0fb6f70200c33ed6f21928124e3a40b5acb7821aa844 94.2 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:5553413d3918b1389bfbb69dc8af58cb9484b2653607657e910012238ec520d4
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:5553413d3918b1389bfbb69dc8af58cb9484b2653607657e910012238ec520d4
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:5553413d3918b1389bfbb69dc8af58cb9484b2653607657e910012238ec520d4
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:5553413d3918b1389bfbb69dc8af58cb9484b2653607657e910012238ec520d4
    

    Full changes: https://kiota.ch/projectfile/ci/compare/2.2.7...2.3.0

    Downloads