Repository navigation
Conversation
|
Security source/contract review of exact The delta is limited to Chart/version identity, the README example, one new upgrade-note section, the values default and the synchronized source-release record; templates, permissions, PHP runtime selection and resource defaults are unchanged. Chart MINOR is consistent with the existing policy for crossing a Server MINOR without a chart-breaking values/resource change. The notes agree with the reviewed 3.11 source contract: no schema step from 3.10.x; retained SQLite 14 / PostgreSQL+MariaDB 15 / MySQL 16; earlier stopped-replica, backup and restore-required schema boundaries remain explicit; plain ordered timer-pair reuse creates no timer row/task; original/repeated clock authority and fractional precision limits are preserved; Worker protocol 1.20/control plane 2 and PHP 2.11.8 remain unchanged. The exact delta passes |
|
|
Exact The draft, merge and OCI hold remain. The qualified native producer tuple is now handed to PHP/Python/Rust; their actual accepted published-package full-precision cold-process receipts still gate native aliases and final Release. Chart normal merge/tested-tree equality, protected publication, exact package/source correspondence, anonymous OCI/install readback and Docs selection follow the final native disposition. No chart or downstream tuple is selected from this source pass. Current selection remains Server 3.10.0 / Chart 2.0.0. |



Chart 2.1.0 advances the default native Server image from 3.10.0 to 3.11.0. No schema step is needed from 3.10.x, and existing values and resource contracts remain compatible. Earlier releases retain the stopped-replica, backup, explicit schema-upgrade and restore-on-rollback requirements.
The five-file change updates the authoritative chart/app record, generated image defaults, example, changelog and migration notes. It documents completed plain timer reuse, full fractional replay clocks, persisted run-start authority and the limit that already-lost fractions cannot be reconstructed. PHP remains frozen at 2.11.8. Templates and runtime code are unchanged.
Validation: source-release synchronization, all 30 existing chart release controls, committed version advancement 2.0.0 to 2.1.0, and
git diff --checkpass. Independent exact-source Security PASS is recorded atd21a299e/ tree472e1d1c. All 19 current hosted checks pass with eight intended path skips and no pending/failure, including normal chart lint/render/Kubernetes installation and source CI.Merge and OCI publication are held. Native release preparation #1218 now has complete immutable image, exact-tag corpus and four-cell Compose qualification, with independent producer PASS. The exact tuple is handed to the SDK owners; actual published PHP/Python/Rust cold-process fractional replay gates under #980 still gate aliases and the final GitHub Release. This chart must wait for the complete native disposition. Chart OCI/package/content/install proof and Docs selection remain separate. Current published selection stays Server 3.10.0 / Chart 2.0.0. No #1204, Cloud or broader redrive acceptance is inferred.