From fede14b24f93986bd46d1725500dac4ab8a718dd Mon Sep 17 00:00:00 2001 From: Tomas Dvorak Date: Mon, 21 Sep 2026 13:45:17 +0200 Subject: [PATCH] release: v0.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bump version to 0.6.0 and cut the changelog — phase 7 automation (scheduled jobs, realtime SSE, automation UI, jobs CLI/MCP), security hardening, and the new CI image pipeline + install.sh. Authored By: TDvorak Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com> --- CHANGELOG.md | 8 +++++++- package.json | 2 +- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 26c930b..9ff9614 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ All notable changes to Primora. Format follows [Keep a Changelog](https://keepachangelog.com/); versions follow [SemVer](https://semver.org/). -## [Unreleased] +## [0.6.0] - 2026-09-21 ### Added @@ -25,6 +25,12 @@ All notable changes to Primora. Format follows [Keep a Changelog](https://keepac - **Connection passwords encrypted at rest** — `core.db_connections.config.password` is now AES-256-GCM sealed (`enc:v1:` marker) via `PRIMORA_ENCRYPTION_KEY`; decrypted only when registering the connection with DBX. Migration 00008 strips pre-existing plaintext passwords. - **DBX naming** — connection names now prefix the full project UUID; the previous 8-hex prefix could collide across projects and alias the wrong credentials. +### Infrastructure + +- **One-line installer** — `install.sh` (`curl | bash`) fetches the compose files, generates secrets, pulls prebuilt GHCR images, and falls back to a source-tarball build when packages aren't published. +- **CI image pipeline** — per-app buildx matrix with GHA layer cache, container-contents smoke checks, Trivy scans, `docker compose config` validation, and `edge`/`sha-*` GHCR publishing on master. +- **Fixed release image pushes** — tags were rendered with the mixed-case owner (`ghcr.io/Dvorinka/...`), which GHCR rejects; owner is now lowercased, unblocking tagged releases. + ## [0.5.0] - 2026-09-16 ### Added diff --git a/package.json b/package.json index bd2a198..48c2436 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "primora", - "version": "0.5.0", + "version": "0.6.0", "private": true, "packageManager": "npm@9.2.0", "workspaces": [