eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Update docs release to v1.15.3

Browse source 
- Built changelog from towncrier fragments

[skip ci]
This commit is contained in:
Forgejo Actions 2026-04-05 21:24:25 -07:00
commit facb803010
8 changed files with 16 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

15
CHANGELOG.md
View file

@ -12,6 +12,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
<!-- towncrier release notes start -->
## [v1.15.3] - 2026-04-05
### Infrastructure
- Build Tempo container from source via forge mirror; bump 2.10.1 → 2.10.3
- Pin NixOS service versions (forgejo-runner, snowflake, k3s) via `nixpkgs-services` overlay in ringtail flake, preventing silent upgrades from `nix flake update`. Add k3s and minikube to service-versions.yaml tracking. Fix stale nix-container-builder version (was 12.6.4, actually running 12.7.2).
- Migrate Immich from Helm chart to kustomize manifests and upgrade from v2.5.6 to v2.6.3
- Upgrade Grafana from 12.3.3 to 12.4.2 — patches 7 CVEs including an unauthenticated DoS (CVE-2026-27880).
### Documentation
- First compensating control review: verified `single-user-cluster` still in effect. Added aspirational how-to card for PCI DSS evidence collection.
- Prowler `--registry` fix merged upstream (PR #10470); initContainer workaround documented as pending release.
## [v1.15.2] - 2026-03-30
### Features

2
argocd/manifests/docs/deployment.yaml
View file

@ -30,7 +30,7 @@ spec:
name: http
env:
- name: DOCS_RELEASE_URL
value: "https://forge.eblu.me/eblume/blumeops/releases/download/v1.15.2/docs-v1.15.2.tar.gz"
value: "https://forge.eblu.me/eblume/blumeops/releases/download/v1.15.3/docs-v1.15.3.tar.gz"
resources:
requests:
memory: "64Mi"

1
docs/changelog.d/+prowler-registry-fix-upstream.doc.md
View file

@ -1 +0,0 @@
Prowler `--registry` fix merged upstream (PR #10470); initContainer workaround documented as pending release.

1
docs/changelog.d/+review-single-user-cluster.doc.md
View file

@ -1 +0,0 @@
First compensating control review: verified `single-user-cluster` still in effect. Added aspirational how-to card for PCI DSS evidence collection.

1
docs/changelog.d/immich-kustomize-v2.6.3.infra.md
View file

@ -1 +0,0 @@
Migrate Immich from Helm chart to kustomize manifests and upgrade from v2.5.6 to v2.6.3

1
docs/changelog.d/local-tempo-container.infra.md
View file

@ -1 +0,0 @@
Build Tempo container from source via forge mirror; bump 2.10.1 → 2.10.3

1
docs/changelog.d/pin-nixos-service-versions.infra.md
View file

@ -1 +0,0 @@
Pin NixOS service versions (forgejo-runner, snowflake, k3s) via `nixpkgs-services` overlay in ringtail flake, preventing silent upgrades from `nix flake update`. Add k3s and minikube to service-versions.yaml tracking. Fix stale nix-container-builder version (was 12.6.4, actually running 12.7.2).

1
docs/changelog.d/upgrade-grafana-12.4.2.infra.md
View file

@ -1 +0,0 @@
Upgrade Grafana from 12.3.3 to 12.4.2 — patches 7 CVEs including an unauthenticated DoS (CVE-2026-27880).