Update docs release to v1.15.7

- Built changelog from towncrier fragments [skip ci]
2026-04-18 08:14:58 -07:00 · 2026-04-18 08:14:58 -07:00 · a72a2c2bd4
commit a72a2c2bd4
parent 9bafe85b2b
15 changed files with 26 additions and 14 deletions
--- a/docs/changelog.d/+borgmatic-launchagent-tcc.bugfix.md
+++ b/docs/changelog.d/+borgmatic-launchagent-tcc.bugfix.md
@ -1 +0,0 @@
-Fix borgmatic LaunchAgent failing silently due to macOS TCC permission dialogs. LaunchAgents now call borgmatic directly instead of routing through `mise x`, which triggered "wants to access Documents" dialogs that hung headless sessions. The ansible role now also manages borgmatic installation via `mise install`.
--- a/docs/changelog.d/+container-manual-builds.infra.md
+++ b/docs/changelog.d/+container-manual-builds.infra.md
@ -1 +0,0 @@
-Container builds are now manual-only via `mise run container-build-and-release`. Removed auto-trigger on push to main — shared Dagger helpers made path-based detection unreliable.
--- a/docs/changelog.d/+container-release-push-check.misc.md
+++ b/docs/changelog.d/+container-release-push-check.misc.md
@ -1 +0,0 @@
-container-build-and-release now verifies the commit exists on the remote before dispatching a build.
--- a/docs/changelog.d/+dagger-go-build-refactor.infra.md
+++ b/docs/changelog.d/+dagger-go-build-refactor.infra.md
@ -1 +0,0 @@
-Refactored Dagger container pipelines: extended `go_build()` helper with `buildmode` and `extra_env` params, migrated miniflux and forgejo-runner to use it, and standardized all Alpine bases from 3.22 to 3.23.
--- a/docs/changelog.d/+devpi-dagger-migration.infra.md
+++ b/docs/changelog.d/+devpi-dagger-migration.infra.md
@ -1 +0,0 @@
-Migrate devpi container from Dockerfile to native Dagger build; bump devpi-server 6.19.1→6.19.3 and devpi-web 5.0.1→5.0.2.
--- a/docs/changelog.d/+forge-robots-txt.infra.md
+++ b/docs/changelog.d/+forge-robots-txt.infra.md
@ -1 +0,0 @@
-Added `robots.txt` to `forge.eblu.me` blocking crawlers from `/mirrors/` to reduce load from Facebook scraping.
--- a/docs/changelog.d/+forgejo-archive-dos-mitigation.infra.md
+++ b/docs/changelog.d/+forgejo-archive-dos-mitigation.infra.md
@ -1 +0,0 @@
-Mitigated Forgejo archive endpoint DoS: redirect public archive requests to tailnet, expanded robots.txt, enabled archive cleanup cron, cached release downloads at proxy.
--- a/docs/changelog.d/+kiwix-dagger-migration.infra.md
+++ b/docs/changelog.d/+kiwix-dagger-migration.infra.md
@ -1 +0,0 @@
-Migrated kiwix-serve container from Dockerfile to native Dagger build, bumping Alpine base from 3.22 to 3.23.
--- a/docs/changelog.d/+review-sso-gated-admin-tools.misc.md
+++ b/docs/changelog.d/+review-sso-gated-admin-tools.misc.md
@ -1 +0,0 @@
-Review compensating control `sso-gated-admin-tools`: tightened scope to ArgoCD only, removed Grafana reference.
--- a/docs/changelog.d/automate-manual-prowler-checks.infra.md
+++ b/docs/changelog.d/automate-manual-prowler-checks.infra.md
@ -1 +0,0 @@
-Automate verification of Prowler MANUAL findings (kubelet file perms, kubelet config, etcd CA, RBAC cluster-admin) in `review-compliance-reports` and mute them with `node-config-automated-verification` compensating control.
--- a/docs/changelog.d/dagger-transmission-containers.infra.md
+++ b/docs/changelog.d/dagger-transmission-containers.infra.md
@ -1 +0,0 @@
-Migrate transmission and transmission-exporter containers from Dockerfile to native Dagger builds (`container.py`). Updates base images to Alpine 3.23 and Python 3.14, pins uv to 0.11.6.
--- a/docs/changelog.d/fly-proxy-keepalive.infra.md
+++ b/docs/changelog.d/fly-proxy-keepalive.infra.md
@ -1 +0,0 @@
-Switched Fly proxy to upstream keepalive pools, reducing forge.eblu.me latency from 35s+ p50 to sub-second. Added `mise run fly-reload` for DNS re-resolution without redeploy.
--- a/docs/changelog.d/upgrade-prowler-5.23.infra.md
+++ b/docs/changelog.d/upgrade-prowler-5.23.infra.md
@ -1 +0,0 @@
-Upgrade Prowler from 5.22.0 to 5.23.0; remove init container workaround for broken `--registry` flag (upstream fix in PR #10470).
				`@ -1 +0,0 @@`
				Fix borgmatic LaunchAgent failing silently due to macOS TCC permission dialogs. LaunchAgents now call borgmatic directly instead of routing through `mise x`, which triggered "wants to access Documents" dialogs that hung headless sessions. The ansible role now also manages borgmatic installation via `mise install`.
				`@ -1 +0,0 @@`
				Container builds are now manual-only via `mise run container-build-and-release`. Removed auto-trigger on push to main — shared Dagger helpers made path-based detection unreliable.
				`@ -1 +0,0 @@`
				`container-build-and-release now verifies the commit exists on the remote before dispatching a build.`
				`@ -1 +0,0 @@`
				Refactored Dagger container pipelines: extended `go_build()` helper with `buildmode` and `extra_env` params, migrated miniflux and forgejo-runner to use it, and standardized all Alpine bases from 3.22 to 3.23.
				`@ -1 +0,0 @@`
				`Migrate devpi container from Dockerfile to native Dagger build; bump devpi-server 6.19.1→6.19.3 and devpi-web 5.0.1→5.0.2.`
				`@ -1 +0,0 @@`
				Added `robots.txt` to `forge.eblu.me` blocking crawlers from `/mirrors/` to reduce load from Facebook scraping.
				`@ -1 +0,0 @@`
				`Mitigated Forgejo archive endpoint DoS: redirect public archive requests to tailnet, expanded robots.txt, enabled archive cleanup cron, cached release downloads at proxy.`
				`@ -1 +0,0 @@`
				`Migrated kiwix-serve container from Dockerfile to native Dagger build, bumping Alpine base from 3.22 to 3.23.`
				`@ -1 +0,0 @@`
				Review compensating control `sso-gated-admin-tools`: tightened scope to ArgoCD only, removed Grafana reference.
				`@ -1 +0,0 @@`
				Automate verification of Prowler MANUAL findings (kubelet file perms, kubelet config, etcd CA, RBAC cluster-admin) in `review-compliance-reports` and mute them with `node-config-automated-verification` compensating control.