w33ble
released this
2026-08-27 09:52:35 -06:00
| 11 commits to main since this release
Fixes
fix(cmd): prevent downgrade when live digest matches remote tag
When the running container's digest matched the current remote tag (e.g.
manual update to v1.1.0, SHA 5f75b09e43b2) but the tag hadn't aged
enough for the policy, updatePlan selected the previous eligible historic
digest (v1.0.0, SHA 7f6c239cd49e) and pulled it — actively downgrading the
container. Added guard: if liveDigest == remoteInfo.Digest, skip update
with "already at latest" instead of falling back to an older observed
digest.
Infrastructure
Dockerfile: inject VERSION, COMMIT, DATE build args; add label-schema
labels (org.label-schema.version, .commit, .build-date) for image
provenance tracking.AGENTS.md: document mise tasks (build, build-dist, build-docker,
build-all) and mandatory eval "$(mise activate zsh)" activation.
Verification
mise run build passes.- BoltDB state verified:
digests bucket no longer overwritten by fallback
pull; v1 retains current SHA (5f75b09...) instead of reverting to
previous (7f6c239...).
Docker image
Downloads