Skip to content

WolfStack v25.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Jun 19:28
v25.0.1
2eecbf2

v25.0.1: two Compose UX fixes — running 'Up' button + Validate no longer saves (wabil)

  1. Running stacks now get an 'Up' button (was only shown when stopped). After a
    Pull, 'docker compose up -d' recreates only the changed containers in place
    to apply the new image WITHOUT a Down first — so a stack you're connected
    through (e.g. a reverse proxy) stays up. Restart reuses the old image, so it
    doesn't apply the pull. Backend compose_up already does 'up -d --remove-orphans';
    this surfaces the existing 'up' action in the running state (with a tooltip).

  2. Editor 'Validate' no longer secretly saves. It used to POST the YAML to disk
    first (because the validator only checked the on-disk file), so Validate
    mutated the stack and Cancel couldn't undo it. Now /validate accepts the
    editor's current content and validates it via a throwaway .wolfstack-validate.yml
    in the stack dir (so .env + relative paths still resolve), then deletes it —
    the saved docker-compose.yml is never touched. Validate is a pure check;
    Cancel genuinely discards; Save is the only thing that persists. Backward-
    compatible: an older UI that posts no body still validates the on-disk file.

Frontend + backend; build/clippy/node-check clean.

Verifying this release

Each binary is signed via cosign keyless OIDC (no key distribution — signing identity is the GitHub Actions workflow itself, anchored to the Sigstore Fulcio CA and the Rekor transparency log) and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfstack-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/wolfsoftwaresystemsltd/WolfStack/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfstack-x86_64

Verify the build provenance:

gh attestation verify wolfstack-x86_64 --repo wolfsoftwaresystemsltd/WolfStack

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

  • wolfstack-x86_64 / wolfstack-aarch64 — static musl binaries (Linux x86_64 and ARM64 / Raspberry Pi 4+).
  • wolfstack-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
  • SHA256SUMS — checksums for both binaries.

For per-version history see CHANGELOG.md.

Assets 7
Loading