Update docs release to v1.11.4

- Built changelog from towncrier fragments

[skip ci]
This commit is contained in:
Forgejo Actions 2026-02-25 07:04:23 -08:00
commit 4736c7e9bd
15 changed files with 29 additions and 14 deletions

View file

@ -12,6 +12,34 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
<!-- towncrier release notes start -->
## [v1.11.4] - 2026-02-25
### Features
- Add `mirror-create` mise task for creating upstream mirrors in the `mirrors/` Forgejo org
### Bug Fixes
- Fix Grafana OAuth role mapping: INI parser was stripping quotes from `role_attribute_path = 'Admin'`, causing all Authentik users to get Viewer role instead of Admin. Now uses group-based mapping from the `admins` Authentik group.
- Fix TeslaMate dashboards showing "No Data": Grafana 12.x's `grafana-postgresql-datasource` plugin requires the database name in `jsonData`, not just the top-level `database` field.
### Infrastructure
- Move image tags to kustomize `images:` transformer across 22 services and replace hand-written ConfigMaps with `configMapGenerator:` in 12 services, enabling content-hash-based automatic rollouts on config changes.
- Migrate upstream mirror repos from `eblume/` to `mirrors/` Forgejo organization
- Port Prometheus to local container build (3-stage: Node UI, Go binaries, Alpine runtime) for supply chain control via Zot registry.
- Fix ArgoCD app definitions and credential template to use `mirrors/` org after forge mirror migration; bump immich v2.5.2 → v2.5.6.
- Document AirPlay cross-VLAN firewall rules for Samsung Frame TV (established/related, AirPlay ports, dynamic reverse) and fix rule ordering in segment-home-network plan.
- Update image tags for all 6 mirror-migrated containers (homepage, navidrome, ntfy, miniflux, prometheus, teslamate)
- Switch prometheus, teslamate, and miniflux container builds to forge mirrors; create miniflux mirror
### Documentation
- Document squash-merge container tag provenance issue and post-merge workflow for updating manifests to main-SHA tags.
- Add mise-tasks reference card with categorized task inventory; include in ai-docs context
- Review 3 how-to docs: stamp provision-authentik-database and use-pypi-proxy, fix wrong policy path and misleading --yes in update-tailscale-acls
## [v1.11.3] - 2026-02-23
### Features

View file

@ -22,7 +22,7 @@ spec:
name: http
env:
- name: DOCS_RELEASE_URL
value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.11.3/docs-v1.11.3.tar.gz"
value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.11.4/docs-v1.11.4.tar.gz"
resources:
requests:
memory: "64Mi"

View file

@ -1 +0,0 @@
Review 3 how-to docs: stamp provision-authentik-database and use-pypi-proxy, fix wrong policy path and misleading --yes in update-tailscale-acls

View file

@ -1 +0,0 @@
Document squash-merge container tag provenance issue and post-merge workflow for updating manifests to main-SHA tags.

View file

@ -1 +0,0 @@
Move image tags to kustomize `images:` transformer across 22 services and replace hand-written ConfigMaps with `configMapGenerator:` in 12 services, enabling content-hash-based automatic rollouts on config changes.

View file

@ -1 +0,0 @@
Migrate upstream mirror repos from `eblume/` to `mirrors/` Forgejo organization

View file

@ -1 +0,0 @@
Port Prometheus to local container build (3-stage: Node UI, Go binaries, Alpine runtime) for supply chain control via Zot registry.

View file

@ -1 +0,0 @@
Fix Grafana OAuth role mapping: INI parser was stripping quotes from `role_attribute_path = 'Admin'`, causing all Authentik users to get Viewer role instead of Admin. Now uses group-based mapping from the `admins` Authentik group.

View file

@ -1 +0,0 @@
Fix TeslaMate dashboards showing "No Data": Grafana 12.x's `grafana-postgresql-datasource` plugin requires the database name in `jsonData`, not just the top-level `database` field.

View file

@ -1 +0,0 @@
Fix ArgoCD app definitions and credential template to use `mirrors/` org after forge mirror migration; bump immich v2.5.2 → v2.5.6.

View file

@ -1 +0,0 @@
Document AirPlay cross-VLAN firewall rules for Samsung Frame TV (established/related, AirPlay ports, dynamic reverse) and fix rule ordering in segment-home-network plan.

View file

@ -1 +0,0 @@
Add `mirror-create` mise task for creating upstream mirrors in the `mirrors/` Forgejo org

View file

@ -1 +0,0 @@
Update image tags for all 6 mirror-migrated containers (homepage, navidrome, ntfy, miniflux, prometheus, teslamate)

View file

@ -1 +0,0 @@
Switch prometheus, teslamate, and miniflux container builds to forge mirrors; create miniflux mirror

View file

@ -1 +0,0 @@
Add mise-tasks reference card with categorized task inventory; include in ai-docs context