From 4736c7e9bd2314698f3f614799013b9113fa06a8 Mon Sep 17 00:00:00 2001 From: Forgejo Actions Date: Wed, 25 Feb 2026 07:04:23 -0800 Subject: [PATCH] Update docs release to v1.11.4 - Built changelog from towncrier fragments [skip ci] --- CHANGELOG.md | 28 +++++++++++++++++++ argocd/manifests/docs/deployment.yaml | 2 +- docs/changelog.d/doc-review-2025-02-25.doc.md | 1 - .../feature-container-tag-provenance.doc.md | 1 - ...ure-kustomize-images-configmapgen.infra.md | 1 - .../feature-mirror-org-migration.infra.md | 1 - ...eature-prometheus-local-container.infra.md | 1 - .../fix-grafana-oauth-role.bugfix.md | 1 - ...fix-grafana-teslamate-datasource.bugfix.md | 1 - docs/changelog.d/fix-mirror-org-refs.infra.md | 1 - docs/changelog.d/main.infra.md | 1 - .../main.mirror-create-task.feature.md | 1 - .../main.mirror-image-tags.infra.md | 1 - .../main.mirror-remaining-containers.infra.md | 1 - docs/changelog.d/main.mise-tasks-ref.doc.md | 1 - 15 files changed, 29 insertions(+), 14 deletions(-) delete mode 100644 docs/changelog.d/doc-review-2025-02-25.doc.md delete mode 100644 docs/changelog.d/feature-container-tag-provenance.doc.md delete mode 100644 docs/changelog.d/feature-kustomize-images-configmapgen.infra.md delete mode 100644 docs/changelog.d/feature-mirror-org-migration.infra.md delete mode 100644 docs/changelog.d/feature-prometheus-local-container.infra.md delete mode 100644 docs/changelog.d/fix-grafana-oauth-role.bugfix.md delete mode 100644 docs/changelog.d/fix-grafana-teslamate-datasource.bugfix.md delete mode 100644 docs/changelog.d/fix-mirror-org-refs.infra.md delete mode 100644 docs/changelog.d/main.infra.md delete mode 100644 docs/changelog.d/main.mirror-create-task.feature.md delete mode 100644 docs/changelog.d/main.mirror-image-tags.infra.md delete mode 100644 docs/changelog.d/main.mirror-remaining-containers.infra.md delete mode 100644 docs/changelog.d/main.mise-tasks-ref.doc.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 0680bd6..8b9bad0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,34 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## [v1.11.4] - 2026-02-25 + +### Features + +- Add `mirror-create` mise task for creating upstream mirrors in the `mirrors/` Forgejo org + +### Bug Fixes + +- Fix Grafana OAuth role mapping: INI parser was stripping quotes from `role_attribute_path = 'Admin'`, causing all Authentik users to get Viewer role instead of Admin. Now uses group-based mapping from the `admins` Authentik group. +- Fix TeslaMate dashboards showing "No Data": Grafana 12.x's `grafana-postgresql-datasource` plugin requires the database name in `jsonData`, not just the top-level `database` field. + +### Infrastructure + +- Move image tags to kustomize `images:` transformer across 22 services and replace hand-written ConfigMaps with `configMapGenerator:` in 12 services, enabling content-hash-based automatic rollouts on config changes. +- Migrate upstream mirror repos from `eblume/` to `mirrors/` Forgejo organization +- Port Prometheus to local container build (3-stage: Node UI, Go binaries, Alpine runtime) for supply chain control via Zot registry. +- Fix ArgoCD app definitions and credential template to use `mirrors/` org after forge mirror migration; bump immich v2.5.2 → v2.5.6. +- Document AirPlay cross-VLAN firewall rules for Samsung Frame TV (established/related, AirPlay ports, dynamic reverse) and fix rule ordering in segment-home-network plan. +- Update image tags for all 6 mirror-migrated containers (homepage, navidrome, ntfy, miniflux, prometheus, teslamate) +- Switch prometheus, teslamate, and miniflux container builds to forge mirrors; create miniflux mirror + +### Documentation + +- Document squash-merge container tag provenance issue and post-merge workflow for updating manifests to main-SHA tags. +- Add mise-tasks reference card with categorized task inventory; include in ai-docs context +- Review 3 how-to docs: stamp provision-authentik-database and use-pypi-proxy, fix wrong policy path and misleading --yes in update-tailscale-acls + + ## [v1.11.3] - 2026-02-23 ### Features diff --git a/argocd/manifests/docs/deployment.yaml b/argocd/manifests/docs/deployment.yaml index 1e1b825..f19f6f8 100644 --- a/argocd/manifests/docs/deployment.yaml +++ b/argocd/manifests/docs/deployment.yaml @@ -22,7 +22,7 @@ spec: name: http env: - name: DOCS_RELEASE_URL - value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.11.3/docs-v1.11.3.tar.gz" + value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.11.4/docs-v1.11.4.tar.gz" resources: requests: memory: "64Mi" diff --git a/docs/changelog.d/doc-review-2025-02-25.doc.md b/docs/changelog.d/doc-review-2025-02-25.doc.md deleted file mode 100644 index a00cfd4..0000000 --- a/docs/changelog.d/doc-review-2025-02-25.doc.md +++ /dev/null @@ -1 +0,0 @@ -Review 3 how-to docs: stamp provision-authentik-database and use-pypi-proxy, fix wrong policy path and misleading --yes in update-tailscale-acls diff --git a/docs/changelog.d/feature-container-tag-provenance.doc.md b/docs/changelog.d/feature-container-tag-provenance.doc.md deleted file mode 100644 index b16fd33..0000000 --- a/docs/changelog.d/feature-container-tag-provenance.doc.md +++ /dev/null @@ -1 +0,0 @@ -Document squash-merge container tag provenance issue and post-merge workflow for updating manifests to main-SHA tags. diff --git a/docs/changelog.d/feature-kustomize-images-configmapgen.infra.md b/docs/changelog.d/feature-kustomize-images-configmapgen.infra.md deleted file mode 100644 index 18eeab2..0000000 --- a/docs/changelog.d/feature-kustomize-images-configmapgen.infra.md +++ /dev/null @@ -1 +0,0 @@ -Move image tags to kustomize `images:` transformer across 22 services and replace hand-written ConfigMaps with `configMapGenerator:` in 12 services, enabling content-hash-based automatic rollouts on config changes. diff --git a/docs/changelog.d/feature-mirror-org-migration.infra.md b/docs/changelog.d/feature-mirror-org-migration.infra.md deleted file mode 100644 index e201c2e..0000000 --- a/docs/changelog.d/feature-mirror-org-migration.infra.md +++ /dev/null @@ -1 +0,0 @@ -Migrate upstream mirror repos from `eblume/` to `mirrors/` Forgejo organization diff --git a/docs/changelog.d/feature-prometheus-local-container.infra.md b/docs/changelog.d/feature-prometheus-local-container.infra.md deleted file mode 100644 index 56431f0..0000000 --- a/docs/changelog.d/feature-prometheus-local-container.infra.md +++ /dev/null @@ -1 +0,0 @@ -Port Prometheus to local container build (3-stage: Node UI, Go binaries, Alpine runtime) for supply chain control via Zot registry. diff --git a/docs/changelog.d/fix-grafana-oauth-role.bugfix.md b/docs/changelog.d/fix-grafana-oauth-role.bugfix.md deleted file mode 100644 index 9479f1c..0000000 --- a/docs/changelog.d/fix-grafana-oauth-role.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fix Grafana OAuth role mapping: INI parser was stripping quotes from `role_attribute_path = 'Admin'`, causing all Authentik users to get Viewer role instead of Admin. Now uses group-based mapping from the `admins` Authentik group. diff --git a/docs/changelog.d/fix-grafana-teslamate-datasource.bugfix.md b/docs/changelog.d/fix-grafana-teslamate-datasource.bugfix.md deleted file mode 100644 index f757f96..0000000 --- a/docs/changelog.d/fix-grafana-teslamate-datasource.bugfix.md +++ /dev/null @@ -1 +0,0 @@ -Fix TeslaMate dashboards showing "No Data": Grafana 12.x's `grafana-postgresql-datasource` plugin requires the database name in `jsonData`, not just the top-level `database` field. diff --git a/docs/changelog.d/fix-mirror-org-refs.infra.md b/docs/changelog.d/fix-mirror-org-refs.infra.md deleted file mode 100644 index c0f7e0d..0000000 --- a/docs/changelog.d/fix-mirror-org-refs.infra.md +++ /dev/null @@ -1 +0,0 @@ -Fix ArgoCD app definitions and credential template to use `mirrors/` org after forge mirror migration; bump immich v2.5.2 → v2.5.6. diff --git a/docs/changelog.d/main.infra.md b/docs/changelog.d/main.infra.md deleted file mode 100644 index 1bf745e..0000000 --- a/docs/changelog.d/main.infra.md +++ /dev/null @@ -1 +0,0 @@ -Document AirPlay cross-VLAN firewall rules for Samsung Frame TV (established/related, AirPlay ports, dynamic reverse) and fix rule ordering in segment-home-network plan. diff --git a/docs/changelog.d/main.mirror-create-task.feature.md b/docs/changelog.d/main.mirror-create-task.feature.md deleted file mode 100644 index ea1e843..0000000 --- a/docs/changelog.d/main.mirror-create-task.feature.md +++ /dev/null @@ -1 +0,0 @@ -Add `mirror-create` mise task for creating upstream mirrors in the `mirrors/` Forgejo org diff --git a/docs/changelog.d/main.mirror-image-tags.infra.md b/docs/changelog.d/main.mirror-image-tags.infra.md deleted file mode 100644 index 3f68df7..0000000 --- a/docs/changelog.d/main.mirror-image-tags.infra.md +++ /dev/null @@ -1 +0,0 @@ -Update image tags for all 6 mirror-migrated containers (homepage, navidrome, ntfy, miniflux, prometheus, teslamate) diff --git a/docs/changelog.d/main.mirror-remaining-containers.infra.md b/docs/changelog.d/main.mirror-remaining-containers.infra.md deleted file mode 100644 index d4d9a9d..0000000 --- a/docs/changelog.d/main.mirror-remaining-containers.infra.md +++ /dev/null @@ -1 +0,0 @@ -Switch prometheus, teslamate, and miniflux container builds to forge mirrors; create miniflux mirror diff --git a/docs/changelog.d/main.mise-tasks-ref.doc.md b/docs/changelog.d/main.mise-tasks-ref.doc.md deleted file mode 100644 index 6cae6e0..0000000 --- a/docs/changelog.d/main.mise-tasks-ref.doc.md +++ /dev/null @@ -1 +0,0 @@ -Add mise-tasks reference card with categorized task inventory; include in ai-docs context