-
v3.1.0
StableAll checks were successfulpublished / projectfile-is-valid (push) Successful in 10spublished / release-tag (push) Successful in 3spublished / runner-is-ready (push) Successful in 12spublished / source-is-compliant (push) Successful in 28spublished / documentation-passes-lint (push) Successful in 1m7spublished / source-is-secure (push) Successful in 39spublished / source-is-tested (push) Successful in 15spublished / gpg-is-ready (push) Successful in 5spublished / projectfile-is-ok (push) Successful in 8spublished / signing-is-ready (push) Successful in 7spublished / source-passes-lint (push) Successful in 1m41spublished / binaries-are-built (amd64, darwin) (push) Successful in 10spublished / binaries-are-built (amd64, linux) (push) Successful in 10spublished / binaries-are-built (arm64, darwin) (push) Successful in 16spublished / binaries-are-built (arm64, linux) (push) Successful in 11spublished / binaries-are-built (riscv64, linux) (push) Successful in 7spublished / gsa (amd64, darwin) (push) Successful in 9spublished / gsa (amd64, linux) (push) Successful in 7spublished / gsa (arm64, darwin) (push) Successful in 7spublished / gsa (arm64, linux) (push) Successful in 7spublished / gsa (riscv64, linux) (push) Successful in 12spublished / binaries-are-signed (push) Successful in 21spublished / image-is-built (amd64) (push) Successful in 2m28spublished / binaries-are-torrented (push) Successful in 18spublished / image-has-sbom (amd64) (push) Successful in 15spublished / binaries-torrent-is-verified (push) Successful in 8spublished / image-is-secure (amd64) (push) Successful in 17spublished / container-is-verified (amd64) (push) Successful in 1m3spublished / image-is-published (kiota) (push) Successful in 22spublished / image-is-published (dockerhub) (push) Successful in 51spublished / release-is-published (push) Successful in 12spublished / release-notes-are-published (push) Successful in 6spublished / go-install-is-ok (push) Successful in 3m8spublished / published (push) Successful in 0sreleased this
2026-10-19 02:28:57 +00:00 | 9 commits to main since this release17 commits, 1 contributor, 21 hours since v3.0.1.
Features
- render: contract tool-less joins and judge each goal in a verdict job (
e29ef99)
Bug fixes
- refactor CI workflows (new goals + preflight checks) (
bc663b5) - workflows: move pins (
f2ed7e7,6a9589f) - workflows: enable checks (
3f8805f)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/projectfile-ci:v3.1.0If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/projectfile/ci:v3.1.0Go toolchain
Install with the Go toolchain:
go install projectfile.org/projectfile/ci/v3/cmd/pf-ci@v3.1.0Then run
pf-ci --help.Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/v3.1.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m) chmod +x ~/.local/bin/pf-ci ~/.local/bin/pf-ci --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64,darwin/amd64,darwin/arm64To uninstall, delete that one file:
rm ~/.local/bin/pf-ci.Usage
Lower the CI DAG to a forge’s workflow files:
pf-ci resolve pf-ci generate -target forgejo pf-ci generate -target gha -checkVerify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci:v3.1.0 cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci:v3.1.0 cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci:v3.1.0 cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci:v3.1.0Prebuilt binary
The signature proves the binary is the one the maintainer’s release key signed.
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257 curl --fail --location --output pf-ci.asc https://kiota.ch/projectfile/ci/releases/download/v3.1.0/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m).asc gpg --verify pf-ci.asc ~/.local/bin/pf-ci # every downloaded asset at once gpg --verify pf-ci-SHA256SUMS.asc pf-ci-SHA256SUMS sha256sum --check --ignore-missing pf-ci-SHA256SUMSDownload via BitTorrent
Fetch this release over BitTorrent with a magnet link, or with the attached
.torrentfile:Full changes: https://kiota.ch/projectfile/ci/compare/2.6.1...v3.1.0
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- render: contract tool-less joins and judge each goal in a verdict job (