-
2.4.0
StableAll checks were successfulpublished / fetched (push) Successful in 0spublished / projectfile-is-valid (push) Successful in 38spublished / signing-is-ready (push) Successful in 18spublished / documentation-passes-lint (push) Successful in 1m6spublished / source-is-compliant (push) Successful in 1m11spublished / source-is-tested (push) Successful in 47spublished / source-is-secure (push) Successful in 1m28spublished / source-passes-lint (push) Successful in 2m58spublished / projectfile-is-ok (push) Successful in 1m53spublished / documentation-is-ok (push) Successful in 0spublished / source-is-ok (push) Successful in 0spublished / inputs-are-ok (push) Successful in 0spublished / binaries-are-built (amd64, linux) (push) Successful in 10spublished / binaries-are-built (amd64, darwin) (push) Successful in 10spublished / binaries-are-built (arm64, darwin) (push) Successful in 10spublished / binaries-are-built (riscv64, linux) (push) Successful in 14spublished / binaries-are-built (arm64, linux) (push) Successful in 14spublished / image-is-built (amd64) (push) Successful in 2m38spublished / gsa (amd64, darwin) (push) Successful in 10spublished / gsa (amd64, linux) (push) Successful in 10spublished / gsa (arm64, linux) (push) Successful in 8spublished / gsa (arm64, darwin) (push) Successful in 8spublished / gsa (riscv64, linux) (push) Successful in 8spublished / image-has-sbom (amd64) (push) Successful in 24spublished / secrets-ready (push) Successful in 0spublished / image-is-secure (amd64) (push) Successful in 37spublished / binaries-are-ok (push) Successful in 0spublished / images-are-ok (push) Successful in 0spublished / binaries-are-signed (amd64, linux) (push) Successful in 12spublished / binaries-are-signed (arm64, darwin) (push) Successful in 12spublished / binaries-are-signed (amd64, darwin) (push) Successful in 12spublished / binaries-are-signed (arm64, linux) (push) Successful in 9spublished / binaries-are-signed (riscv64, linux) (push) Successful in 10spublished / container-is-ok (push) Successful in 0spublished / container-ready-to-test (push) Successful in 0spublished / container-is-diagnosed (push) Successful in 0spublished / container-is-verified (amd64) (push) Successful in 2m38spublished / image-is-ready (push) Successful in 0spublished / artifacts-are-ok (push) Successful in 1spublished / ready-to-publish (push) Successful in 0spublished / publish-image (push) Successful in 0spublished / image-is-signed (push) Successful in 0spublished / image-is-attested (kiota) (push) Successful in 1m11spublished / image-is-attested (dockerhub) (push) Successful in 2m58spublished / release-is-published (push) Successful in 7spublished / release-notes-are-published (push) Successful in 21spublished / published (push) Successful in 0sreleased this
2026-10-10 15:27:04 +00:00 | 108 commits to dev since this release15 commits, 1 contributor, 1 day since 2.3.0.
Features
- ci: let a node follow another node's when events (
3644757) - render: roll named-cache keys by period and skip saves on a hit (
218a020) - render: add an N-hour cache-key roll and default to 8h (
1dfed64)
Bug fixes
- container: restore M6E_VERSION in final image (
77be8d7) - deps: bump projectfile/core to v2.16.0 (
6e21f5f)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/projectfile-ci:2.4.0This release also publishes the
2.4and2tags — pull the precision you want to pin.If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/projectfile/ci:2.4.0Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.4.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m) chmod +x ~/.local/bin/pf-ci ~/.local/bin/pf-ci --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64,darwin/amd64,darwin/arm64Usage
Lower the CI DAG to a forge’s workflow files:
pf-ci resolve pf-ci generate -target forgejo pf-ci generate -target gha -checkImage digests
A tag can move; a digest cannot. Pull this exact build:
docker pull docker.io/damianbuho/projectfile-ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f docker pull kiota.ch/projectfile/ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4fPlatform Digest Size linux/amd64 sha256:927d09d91c4798fa6139c7cda62fe3bca6f0f4c55436d79f9fe7dbc20806347394.2 MB Sizes are compressed layer bytes as stored in the registry.
Verify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4fFull changes: https://kiota.ch/projectfile/ci/compare/2.3.0...2.4.0
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- ci: let a node follow another node's when events (