-
2.5.0
StableAll checks were successfulpublished / fetched (push) Successful in 0spublished / gpg-is-ready (push) Successful in 3spublished / projectfile-is-valid (push) Successful in 3spublished / signing-is-ready (push) Successful in 5spublished / source-is-compliant (push) Successful in 9spublished / source-is-tested (push) Successful in 7spublished / source-is-secure (push) Successful in 19spublished / projectfile-is-ok (push) Successful in 6spublished / documentation-passes-lint (push) Successful in 54spublished / documentation-is-ok (push) Successful in 0spublished / source-passes-lint (push) Successful in 47spublished / source-is-ok (push) Successful in 0spublished / inputs-are-ok (push) Successful in 0spublished / binaries-are-built (amd64, darwin) (push) Successful in 5spublished / binaries-are-built (amd64, linux) (push) Successful in 5spublished / binaries-are-built (arm64, darwin) (push) Successful in 5spublished / binaries-are-built (arm64, linux) (push) Successful in 5spublished / binaries-are-built (riscv64, linux) (push) Successful in 6spublished / gsa (amd64, darwin) (push) Successful in 4spublished / gsa (amd64, linux) (push) Successful in 6spublished / gsa (arm64, linux) (push) Successful in 6spublished / gsa (arm64, darwin) (push) Successful in 6spublished / gsa (riscv64, linux) (push) Successful in 5spublished / binaries-are-ok (push) Successful in 0spublished / binaries-are-signed (amd64, darwin) (push) Successful in 4spublished / binaries-are-signed (arm64, linux) (push) Successful in 5spublished / binaries-are-signed (riscv64, linux) (push) Successful in 5spublished / binaries-are-signed (amd64, linux) (push) Successful in 5spublished / binaries-are-signed (arm64, darwin) (push) Successful in 5spublished / image-is-built (amd64) (push) Successful in 56spublished / secrets-ready (push) Successful in 0spublished / images-are-ok (push) Successful in 0spublished / container-is-ok (push) Successful in 0spublished / container-ready-to-test (push) Successful in 0spublished / image-has-sbom (amd64) (push) Successful in 7spublished / container-is-diagnosed (push) Successful in 0spublished / image-is-secure (amd64) (push) Successful in 9spublished / container-is-verified (amd64) (push) Successful in 29spublished / image-is-ready (push) Successful in 0spublished / artifacts-are-ok (push) Successful in 0spublished / ready-to-publish (push) Successful in 0spublished / publish-image (push) Successful in 0spublished / image-is-signed (push) Successful in 0spublished / image-is-attested (kiota) (push) Successful in 15spublished / image-is-attested (dockerhub) (push) Successful in 38spublished / release-is-published (push) Successful in 7spublished / release-notes-are-published (push) Successful in 6spublished / published (push) Successful in 0sreleased this
2026-10-14 03:29:49 +00:00 | 90 commits to dev since this release17 commits, 1 contributor, 3 days since 2.4.0.
Features
- render: skip same-repo pull requests in favour of the push run (
5747599) - render: leave the declared stable branch out of the push surface (
1d30a68) - render: read the trunk from org.projectfile.release.trunk first (
4745558)
Bug fixes
- render: let every job accept a skip from a narrower-gated need (
1219013) - deps: bump core to 2.17.0 (
f29625d) - deps: bump core to 2.18.0 (
8f383ac)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/projectfile-ci:2.5.0This release also publishes the
2.5and2tags — pull the precision you want to pin.If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/projectfile/ci:2.5.0Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.5.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m) chmod +x ~/.local/bin/pf-ci ~/.local/bin/pf-ci --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64,darwin/amd64,darwin/arm64Usage
Lower the CI DAG to a forge’s workflow files:
pf-ci resolve pf-ci generate -target forgejo pf-ci generate -target gha -checkImage digests
A tag can move; a digest cannot. Pull this exact build:
docker pull docker.io/damianbuho/projectfile-ci@sha256:ac8c2656dc226aebb54239b67d830f13d9b0840d0c64c18784bad4dca9a7068d docker pull kiota.ch/projectfile/ci@sha256:ac8c2656dc226aebb54239b67d830f13d9b0840d0c64c18784bad4dca9a7068dPlatform Digest Size linux/amd64 sha256:af8ee8988d6c214ecadd309541303f4d4b26a904635a4762bd01595826b9ce3a94.2 MB Sizes are compressed layer bytes as stored in the registry.
Verify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:ac8c2656dc226aebb54239b67d830f13d9b0840d0c64c18784bad4dca9a7068d cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:ac8c2656dc226aebb54239b67d830f13d9b0840d0c64c18784bad4dca9a7068d cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:ac8c2656dc226aebb54239b67d830f13d9b0840d0c64c18784bad4dca9a7068d cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:ac8c2656dc226aebb54239b67d830f13d9b0840d0c64c18784bad4dca9a7068dPrebuilt binary
The signature proves the binary is the one the maintainer’s release key signed.
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257 curl --fail --location --output pf-ci.asc https://kiota.ch/projectfile/ci/releases/download/2.5.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m).asc gpg --verify pf-ci.asc pf-ciFull changes: https://kiota.ch/projectfile/ci/compare/2.4.0...2.5.0
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- render: skip same-repo pull requests in favour of the push run (