v0.28.3

What's Changed

• fix(db/hook): trim error to fit db column by @wass3rw3rk in #1440
• fix: tighten up UpdateRepo calls and add sync-up to repair by @ecrupper in #1438
• fix(router): use install token for caller token and fix ptr derefs by @ecrupper in #1439
• fix(cancel): follow through cancel on missing executor by @ecrupper in #1441
• fix(hook): matching error with other updatehook calls by @wass3rw3rk in #1442
• chore(deps): update all non-major dependencies by @renovate[bot] in #1437

Full Changelog: v0.28.2...v0.28.3

v0.28.2

What's Changed

• fix(compiler/types): use struct walk for Substitute instead of JSON marshal by @ecrupper in #1432
• fix(scm): handle nil on getcontents by @wass3rw3rk in #1434
• fix(deps): update module golang.org/x/crypto to v0.50.0 by @renovate[bot] in #1433

Full Changelog: v0.28.1...v0.28.2

v0.28.1

What's Changed

• fix(compiler): address logic bug in de-dup for origin secrets in templates by @ecrupper in #1431
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #1429
• fix(deps): update all non-major dependencies by @renovate[bot] in #1428

Full Changelog: v0.28.0...v0.28.1

v0.28.0

What's Changed

• enhance(oidc): add jti claim by @ecrupper in #1356
• feat!: remove buildkite dependency by @ecrupper in #1352
• fix(compiler): prevent same-name stages in pipeline configs by @ecrupper in #1360
• fix(api): yaml expand on stage pipelines by @wass3r in #1363
• enhance(api)!: accept installation tokens for MustWrite and MustRead auth using caching by @ecrupper in #1373
• fix(mock): add refresh install token mock by @ecrupper in #1374
• fix(scm): proper expiration set to worker by @ecrupper in #1380
• fix(deps): bump aws-sdk to v2 by @wass3r in #1365
• fix(database)!: use transactions tied to repo counters for hook and build to avoid collisions by @ecrupper in #1353
• fix(scm): fall back on github info if role map missing entry by @ecrupper in #1382
• fix(deps): update module github.com/expr-lang/expr to v1.17.7 [security] by @renovate[bot] in #1379
• chore(build): reduce binary size by @wass3r in #1377
• chore: bump go-github to v81 by @ecrupper in #1383
• fix(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate[bot] in #1370
• feat!: platform setting for enabling/disabling Vela secrets by @ecrupper in #1384
• fix(scm): add deployments as a default perm for deploy events by @ecrupper in #1386
• feat(events)!: support merge queue for GitHub SCM by @ecrupper in #1343
• fix(compiler): add origin secrets to pipeline validate func by @ecrupper in #1388
• enhance(app): add PR and Issue perms for install token by @ecrupper in #1389
• enhance(compiler)!: do not add duplicate origin secrets using name as key by @ecrupper in #1390
• chore(lint): update codebase for new linter rules by @ecrupper in #1393
• feat(artifacts): Object storage integration and artifacts key by @KellyMerrick in #1385
• feat: leverage checks API for CI statuses with app installation by @ecrupper in #1392
• fix(deps): update module github.com/google/go-github/v81 to v83 by @renovate[bot] in #1391
• fix(scm): add merge_group to events set by @ecrupper in #1394
• chore(deps): upgrade minor deps and apply some go fix changes by @ecrupper in #1395
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #1371
• chore(deps): update github/codeql-action action to v4 by @renovate[bot] in #1358
• chore(deps): update actions/github-script action to v8 by @renovate[bot] in #1349
• chore(deps): update actions/setup-go action to v6 by @renovate[bot] in #1348
• fix(artifacts): add upload to storage service by @timhuynh94 in #1397
• fix(deps): update all non-major dependencies by @renovate[bot] in #1396
• fix(scm): override details link to point to vela build by @ecrupper in #1400
• fix(artifacts): switch from sts to presigned put by @timhuynh94 in #1401
• fix(build): reset build number for restarts by @ecrupper in #1404
• fix(revert): use commit status API only by @ecrupper in #1405
• refactor(compiler): move script gen outside of compiler and into container by @ecrupper in #1403
• fix(env): remove id request url from compiler by @ecrupper in #1408
• fix(perm): allow for GETs when secrets are disabled by @ecrupper in #1406
• fix(deps): update all non-major dependencies by @renovate[bot] in #1398
• fix(deps): update module github.com/google/go-github/v83 to v84 by @renovate[bot] in #1399
• chore(deps): update docker/login-action action to v4 by @renovate[bot] in #1402
• chore(deps): update docker/metadata-action action to v6 by @renovate[bot] in #1407
• chore(deps): update docker/build-push-action action to v7 by @renovate[bot] in #1409
• chore(deps): bump go to 1.26.1 by @wass3rw3rk in #1410
• fix(webhook): generate token for status update on failed compile by @ecrupper in #1412
• fix(deps): update all non-major dependencies by @renovate[bot] in #1411
• fix: add clearer error message for post-subst unmarshal issues by @ecrupper in #1415
• fix(merge_group): set branch to base ref instead of head ref by @ecrupper in #1414
• fix(db): only update fields when necessary for repo hot path writes by @ecrupper in #1416
• fix(deps): update all non-major dependencies by @renovate[bot] in #1413
• fix(admin): add logs for secret toggles by @wass3rw3rk in #1419
• enhance: separate clone/build SCM token from status token by @ecrupper in #1420
• fix(deps): update all non-major dependencies by @renovate[bot] in #1417
• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #1418
• chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in #1421
• fix(webhook): use webhook parsed build info on compile failures for status by @ecrupper in #1422
• fix: use install token if available for changeset call by @ecrupper in #1424
• fix(deps): update all non-major dependencies by @renovate[bot] in #1423
• chore(deps): update codecov/codecov-action action to v6 by @renovate[bot] in #1425
• fix(util): use filepath matching for allowlist by @ecrupper in #1426

Full Changelog: v0.27.5...v0.28.0

v0.28.0-rc12

What's Changed

• fix(util): use filepath matching for allowlist by @ecrupper in #1426

Full Changelog: v0.28.0-rc11...v0.28.0-rc12

v0.28.0-rc11

What's Changed

• fix: use install token if available for changeset call by @ecrupper in #1424
• fix(deps): update all non-major dependencies by @renovate[bot] in #1423
• chore(deps): update codecov/codecov-action action to v6 by @renovate[bot] in #1425

Full Changelog: v0.28.0-rc10...v0.28.0-rc11

v0.28.0-rc9

What's Changed

• fix(admin): add logs for secret toggles by @wass3rw3rk in #1419
• enhance: separate clone/build SCM token from status token by @ecrupper in #1420
• fix(deps): update all non-major dependencies by @renovate[bot] in #1417
• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #1418
• chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @dependabot[bot] in #1421

Full Changelog: v0.28.0-rc8...v0.28.0-rc9

v0.28.0-rc10

What's Changed

• fix(webhook): use webhook parsed build info on compile failures for status by @ecrupper in #1422

Full Changelog: v0.28.0-rc9...v0.28.0-rc10

v0.28.0-rc8

What's Changed

• fix(db): only update fields when necessary for repo hot path writes by @ecrupper in #1416
• fix(deps): update all non-major dependencies by @renovate[bot] in #1413

Full Changelog: v0.28.0-rc7...v0.28.0-rc8

v0.28.0-rc7

What's Changed

• fix: add clearer error message for post-subst unmarshal issues by @ecrupper in #1415
• fix(merge_group): set branch to base ref instead of head ref by @ecrupper in #1414

Full Changelog: v0.28.0-rc6...v0.28.0-rc7