Drew Newberry
daa2a362d5
fix(packaging): enable mTLS for local packages ( #1271 )
2026-05-08 13:02:12 -07:00
jtoelke2
3cfc915bfe
ci(os-132): remove stale remote buildx mode ( #1267 )
...
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com >
2026-05-08 12:20:42 -05:00
Drew Newberry
62619eefc7
fix(docker): use supervisor image entrypoint path ( #1259 )
...
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
2026-05-07 17:39:44 -07:00
Drew Newberry
70a0f6c547
refactor(cli): remove gateway lifecycle management ( #1221 )
2026-05-07 09:54:13 -07:00
Drew Newberry
5949b2fa34
feat(installer): support macOS dev installs ( #1183 )
2026-05-06 15:50:07 -07:00
dependabot[bot]
689835c1ba
chore(deps): bump Swatinem/rust-cache from 2.8.2 to 2.9.1 ( #1197 )
...
Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache ) from 2.8.2 to 2.9.1.
- [Release notes](https://github.com/swatinem/rust-cache/releases )
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md )
- [Commits](https://github.com/swatinem/rust-cache/compare/779680da715d629ac1d338a641029a2f4372abb5...c19371144df3bb44fab255c43d04cbc2ab54d1c4 )
---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
dependency-version: 2.9.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 15:07:51 -07:00
dependabot[bot]
1c37ba97b0
chore(deps): bump actions/github-script from 7 to 9 ( #1198 )
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 7 to 9.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/v7...v9 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '9'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 15:06:59 -07:00
dependabot[bot]
035a5a1286
chore(deps): bump actions/upload-artifact from 4 to 7 ( #1201 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 13:51:36 -07:00
Taylor Mutch
8fd574780c
ci(helm): add OCI chart release workflow ( #1196 )
...
* ci(helm): add OCI chart release workflow
Publishes the Helm chart to ghcr.io/nvidia/openshell/helm-chart via helm push on every tag (versioned + :latest) and main push (:0.0.0-dev overwrite + :0.0.0-dev.<sha> per-commit pin). Renames Chart.yaml name to helm-chart to match the target OCI path.
* ci(helm): use full sha in dev pinned chart version
The container images pushed by docker-build.yml are tagged with the
full $GITHUB_SHA, not a 7-char prefix. Match the chart's pinned
version (0.0.0-dev.<full-sha>) so the chart tag and the image tag
the chart resolves to are identical.
* docs(readme): add helm chart install instructions
Document the OCI chart at ghcr.io/nvidia/openshell/helm-chart with
examples for tagged, floating dev, and SHA-pinned dev installs, and
flag the Kubernetes deployment path as experimental.
* docs(helm): split chart details into chart README
Move the dev tag conventions and configuration pointers into a new
README under deploy/helm/openshell/ and shorten the top-level README
section to the install command (no --version, defaults to latest
tagged semver) plus a link to the chart README.
2026-05-06 13:50:37 -07:00
Drew Newberry
da26ed3212
fix(release): stabilize dev build packaging ( #1213 )
2026-05-06 13:00:44 -07:00
Drew Newberry
23ad858a4f
test(e2e): add podman rust suite ( #1185 )
...
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
2026-05-06 12:25:49 -07:00
Drew Newberry
4d388d2677
ci(vm): cleanup vm build infra ( #1186 )
2026-05-06 08:58:02 -07:00
Adam Miller
d8b84773ca
feat(rpm): add RPM packaging with Packit/COPR and GHA release publishing ( #1126 )
2026-05-05 15:42:00 -07:00
jtoelke2
8bfd3e1914
ci(os-49): fix release jobs on shared runners ( #1172 )
2026-05-05 10:46:14 -05:00
jtoelke2
e73a4eae53
ci(os-49): draft release runner cutover ( #1164 )
2026-05-05 10:18:29 -05:00
Drew Newberry
9751872b2d
feat(release): add Debian package publishing ( #1069 )
2026-05-01 07:51:45 -07:00
Drew Newberry
51351e4745
chore(ci): update checkout action to v6 ( #1086 )
...
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
2026-04-30 13:22:47 -07:00
Piotr Mlocek
b264cb83d8
chore(mise): add lockfile with multi-platform support and version pin ( #946 )
2026-04-27 16:07:15 -07:00
Drew Newberry
5718553b97
feat(release): publish standalone openshell-gateway binaries ( #853 )
2026-04-16 16:58:24 -07:00
Piotr Mlocek
fdca543b57
ci: parallelize wheel builds in CI ( #820 )
2026-04-13 17:20:53 -07:00
John T. Myers
dafb7996af
fix(docker): add openshell-prover to Dockerfile skeleton stages and provide z3 ( #800 )
2026-04-10 17:25:23 -07:00
Drew Newberry
1a706f33cf
fix(ci): simplify dev release install instructions to use install.sh ( #453 )
2026-03-18 13:53:03 -07:00
Piotr Mlocek
73e19134b0
fix(ci): pass wheel filenames as job output instead of re-downloading ( #418 )
...
The trigger-wheel-publish job was downloading the wheel artifact onto a
persistent self-hosted runner just to glob the filenames. Since
download-artifact does not clean the destination directory, stale .whl
files from every previous run accumulated in release/ and were all sent
to GitLab as WHEEL_FILENAMES.
Confirmed on the runner: /home/ubuntu/actions-runner/_work/OpenShell/
OpenShell/release/ contained 120+ wheels spanning versions 0.0.5
through 0.0.10.
Fix: capture wheel filenames as a job output in build-python-wheels and
pass them directly to trigger-wheel-publish. The trigger job no longer
downloads the artifact at all — it only needs the filenames to construct
GitHub release asset URLs for GitLab/Kitmaker.
2026-03-18 09:20:18 -07:00
Piotr Mlocek
ee40fc82ac
fix(ci): use github-script for wheel pruning instead of gh CLI ( #354 )
2026-03-16 07:53:02 -07:00
Piotr Mlocek
2e5e8061a9
fix(ci): run wheel pruning before moving devel tag ( #334 )
2026-03-16 00:59:36 -07:00
Piotr Mlocek
53d95eb62f
fix(ci): prune stale devel wheel assets ( #332 )
2026-03-15 20:25:26 -07:00
Piotr Mlocek
c334222463
fix(ci): remove legacy wheel publishing machinery ( #331 )
2026-03-15 19:50:45 -07:00
Piotr Mlocek
aea37e6e61
ci(release): trigger GitLab wheel publish workflows ( #323 )
2026-03-15 09:12:35 -07:00
Drew Newberry
0a7ffe1669
ci(release): gate python wheels on e2e for tagged releases ( #319 )
2026-03-15 00:39:00 -07:00
Drew Newberry
d34491a3f3
ci(release): use native GitHub release notes and add e2e gate ( #318 )
2026-03-14 22:44:12 -07:00
Piotr Mlocek
bda8b7481e
chore(ci): upload Python wheels to release assets ( #300 )
2026-03-14 18:58:12 -07:00
Drew Newberry
1ba798f0fb
ci(release): pin OPENSHELL_IMAGE_TAG to version for tagged releases ( #297 )
2026-03-13 19:28:35 -07:00
Drew Newberry
19c3230267
feat(ci): add automated release workflow with patch version bumping ( #284 )
2026-03-13 17:44:22 -07:00