• 2.4.0 a9c1e4b780

    2.4.0
    All checks were successful
    published / fetched (push) Successful in 0s
    published / projectfile-is-valid (push) Successful in 38s
    published / signing-is-ready (push) Successful in 18s
    published / documentation-passes-lint (push) Successful in 1m6s
    published / source-is-compliant (push) Successful in 1m11s
    published / source-is-tested (push) Successful in 47s
    published / source-is-secure (push) Successful in 1m28s
    published / source-passes-lint (push) Successful in 2m58s
    published / projectfile-is-ok (push) Successful in 1m53s
    published / documentation-is-ok (push) Successful in 0s
    published / source-is-ok (push) Successful in 0s
    published / inputs-are-ok (push) Successful in 0s
    published / binaries-are-built (amd64, linux) (push) Successful in 10s
    published / binaries-are-built (amd64, darwin) (push) Successful in 10s
    published / binaries-are-built (arm64, darwin) (push) Successful in 10s
    published / binaries-are-built (riscv64, linux) (push) Successful in 14s
    published / binaries-are-built (arm64, linux) (push) Successful in 14s
    published / image-is-built (amd64) (push) Successful in 2m38s
    published / gsa (amd64, darwin) (push) Successful in 10s
    published / gsa (amd64, linux) (push) Successful in 10s
    published / gsa (arm64, linux) (push) Successful in 8s
    published / gsa (arm64, darwin) (push) Successful in 8s
    published / gsa (riscv64, linux) (push) Successful in 8s
    published / image-has-sbom (amd64) (push) Successful in 24s
    published / secrets-ready (push) Successful in 0s
    published / image-is-secure (amd64) (push) Successful in 37s
    published / binaries-are-ok (push) Successful in 0s
    published / images-are-ok (push) Successful in 0s
    published / binaries-are-signed (amd64, linux) (push) Successful in 12s
    published / binaries-are-signed (arm64, darwin) (push) Successful in 12s
    published / binaries-are-signed (amd64, darwin) (push) Successful in 12s
    published / binaries-are-signed (arm64, linux) (push) Successful in 9s
    published / binaries-are-signed (riscv64, linux) (push) Successful in 10s
    published / container-is-ok (push) Successful in 0s
    published / container-ready-to-test (push) Successful in 0s
    published / container-is-diagnosed (push) Successful in 0s
    published / container-is-verified (amd64) (push) Successful in 2m38s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 1s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (kiota) (push) Successful in 1m11s
    published / image-is-attested (dockerhub) (push) Successful in 2m58s
    published / release-is-published (push) Successful in 7s
    published / release-notes-are-published (push) Successful in 21s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-10 15:27:04 +00:00 | 108 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    15 commits, 1 contributor, 1 day since 2.3.0.

    Features

    • ci: let a node follow another node's when events (3644757)
    • render: roll named-cache keys by period and skip saves on a hit (218a020)
    • render: add an N-hour cache-key roll and default to 8h (1dfed64)

    Bug fixes

    • container: restore M6E_VERSION in final image (77be8d7)
    • deps: bump projectfile/core to v2.16.0 (6e21f5f)

    Installation

    Container image

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/projectfile-ci:2.4.0
    

    This release also publishes the 2.4 and 2 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/projectfile/ci:2.4.0
    

    Prebuilt binary

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.4.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m)
    chmod +x ~/.local/bin/pf-ci
    ~/.local/bin/pf-ci --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64, darwin/amd64, darwin/arm64

    Usage

    Lower the CI DAG to a forge’s workflow files:

    pf-ci resolve
    pf-ci generate -target forgejo
    pf-ci generate -target gha -check
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/projectfile-ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f
    docker pull kiota.ch/projectfile/ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f
    
    Platform Digest Size
    linux/amd64 sha256:927d09d91c4798fa6139c7cda62fe3bca6f0f4c55436d79f9fe7dbc208063473 94.2 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:29623c30b99cb9cb5da65133bcf8cd624274016f28cbb5e049308a54f5ac0b4f
    

    Full changes: https://kiota.ch/projectfile/ci/compare/2.3.0...2.4.0

    Downloads