-
2.6.0
StableAll checks were successfulpublished / fetched (push) Successful in 2spublished / gpg-is-ready (push) Successful in 7spublished / projectfile-is-valid (push) Successful in 6spublished / signing-is-ready (push) Successful in 6spublished / source-is-tested (push) Successful in 6spublished / source-is-compliant (push) Successful in 8spublished / projectfile-is-ok (push) Successful in 4spublished / source-is-secure (push) Successful in 11spublished / source-passes-lint (push) Successful in 38spublished / source-is-ok (push) Successful in 0spublished / documentation-passes-lint (push) Successful in 51spublished / documentation-is-ok (push) Successful in 0spublished / inputs-are-ok (push) Successful in 0spublished / binaries-are-built (riscv64, linux) (push) Successful in 4spublished / binaries-are-built (amd64, darwin) (push) Successful in 4spublished / binaries-are-built (arm64, linux) (push) Successful in 4spublished / binaries-are-built (amd64, linux) (push) Successful in 4spublished / binaries-are-built (arm64, darwin) (push) Successful in 4spublished / gsa (riscv64, linux) (push) Successful in 8spublished / gsa (arm64, darwin) (push) Successful in 8spublished / gsa (arm64, linux) (push) Successful in 8spublished / gsa (amd64, linux) (push) Successful in 8spublished / gsa (amd64, darwin) (push) Successful in 8spublished / binaries-are-ok (push) Successful in 0spublished / binaries-are-signed (arm64, darwin) (push) Successful in 5spublished / binaries-are-signed (arm64, linux) (push) Successful in 5spublished / binaries-are-signed (amd64, linux) (push) Successful in 5spublished / binaries-are-signed (riscv64, linux) (push) Successful in 5spublished / binaries-are-signed (amd64, darwin) (push) Successful in 5spublished / binaries-are-torrented (push) Successful in 7spublished / image-is-built (amd64) (push) Successful in 37spublished / secrets-ready (push) Successful in 0spublished / images-are-ok (push) Successful in 0spublished / container-is-ok (push) Successful in 0spublished / image-has-sbom (amd64) (push) Successful in 6spublished / container-ready-to-test (push) Successful in 0spublished / image-is-secure (amd64) (push) Successful in 8spublished / container-is-diagnosed (push) Successful in 0spublished / container-is-verified (amd64) (push) Successful in 22spublished / image-is-ready (push) Successful in 0spublished / artifacts-are-ok (push) Successful in 0spublished / ready-to-publish (push) Successful in 0spublished / publish-image (push) Successful in 0spublished / image-is-signed (push) Successful in 0spublished / image-is-attested (kiota) (push) Successful in 14spublished / image-is-attested (dockerhub) (push) Successful in 32spublished / release-is-published (push) Successful in 4spublished / release-notes-are-published (push) Successful in 4spublished / published (push) Successful in 0sreleased this
2026-10-15 00:16:17 +00:00 | 83 commits to dev since this release6 commits, 1 contributor, 19 hours since 2.5.0.
Features
- version: fall back to the go install module version (
8c8e8d3) - release: torrent every signed binary on kiota (
fc446a7)
Bug fixes
- deps: bump projectfile/core to v2.18.1 for retried network fetches (
a69cc98)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/projectfile-ci:2.6.0This release also publishes the
2.6and2tags — pull the precision you want to pin.If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/projectfile/ci:2.6.0Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.6.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m) chmod +x ~/.local/bin/pf-ci ~/.local/bin/pf-ci --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64,darwin/amd64,darwin/arm64Usage
Lower the CI DAG to a forge’s workflow files:
pf-ci resolve pf-ci generate -target forgejo pf-ci generate -target gha -checkImage digests
A tag can move; a digest cannot. Pull this exact build:
docker pull docker.io/damianbuho/projectfile-ci@sha256:c61a4760a7c53662fd180cf7cbaae2e57c08112d0552befdaa297d768a4a793c docker pull kiota.ch/projectfile/ci@sha256:c61a4760a7c53662fd180cf7cbaae2e57c08112d0552befdaa297d768a4a793cPlatform Digest Size linux/amd64 sha256:1f35e338b2740da7bf239eb4110b5dc86644cbe7d906aa7b88600e51b699bf2594.2 MB Sizes are compressed layer bytes as stored in the registry.
Verify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:c61a4760a7c53662fd180cf7cbaae2e57c08112d0552befdaa297d768a4a793c cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:c61a4760a7c53662fd180cf7cbaae2e57c08112d0552befdaa297d768a4a793c cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:c61a4760a7c53662fd180cf7cbaae2e57c08112d0552befdaa297d768a4a793c cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:c61a4760a7c53662fd180cf7cbaae2e57c08112d0552befdaa297d768a4a793cPrebuilt binary
The signature proves the binary is the one the maintainer’s release key signed.
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257 curl --fail --location --output pf-ci.asc https://kiota.ch/projectfile/ci/releases/download/2.6.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m).asc gpg --verify pf-ci.asc pf-ciDownload via BitTorrent
Fetch this release over BitTorrent with a magnet link, or with the attached
.torrentfile:Full changes: https://kiota.ch/projectfile/ci/compare/2.5.0...2.6.0
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- version: fall back to the go install module version (