This upstream changelog is preserved for historical accuracy. Product names below describe the environment at the time of each original release. New PastureStack maintenance changes are recorded in the preserved Git history.
- Bind the source CycloneDX component version and serial number to the exact numeric release version supplied by the validated build workflow.
- Update the maintained Linux image examples to the current pure numeric release coordinate.
- Rebuild the maintained Linux runtime and build tooling with current patched gRPC, text, archive, and module dependencies.
- Refresh checksum-pinned Ubuntu package inputs and preserve deterministic source, binary, image, SBOM, and vulnerability evidence.
- Publish the Linux image and release assets from one annotated, pure numeric SemVer tag. The Windows package remains separately identified by its package name and keeps a pure numeric tag.
- Replace the broad generated control-plane client with a bounded minimal registry and registry-credential client.
- Add full create and update lifecycle coverage against mock ECR and environment APIs.
- Retry both ECR and environment API failures without logging credentials.
- Add an optional validated ECR endpoint override for isolated validation and AWS-compatible services.
- Run the Ubuntu 26.04 runtime as unprivileged user
10001:10001. - Package all tracked vendored license, notice, and author files.
- Build and test with Go 1.27.0 and checksum-verified tool archives.
- Replace the end-of-life AWS SDK for Go v1 with the official AWS SDK for Go v2 ECR, STS, configuration, and credential modules.
- Upgrade
golang.org/x/systov0.47.0, closing the source-SBOM finding for CVE-2026-39824.
- Add HTTP healthcheck for container (default: :8080/ping, configurable with
LISTEN_PORTenvvar) - Support multiple ECR registries with
AWS_ECR_REGISTRY_IDSenvvar - Support auto creating an ECR registry in the control plane using the
AUTO_CREATEenvvar (false by default) - Support Assuming IAM Roles using the
AWS_ROLE_ARNenvvar.
- Support IAM Instance Profiles for AWS API credentials
- [bug] - don't exit process when error connecting to the control-plane API
- Initial Release