commit d91516ad05dac0531f691cd42361a3ce5dadd915
parent 49de32bf1c57fab8607ba4ed765b5a928f1e7029
Author: finwo <finwo@pm.me>
Date: Sun, 27 Sep 2026 01:04:11 +0200
chore: bump version to 0.10.0
Diffstat:
3 files changed, 23 insertions(+), 5 deletions(-)
diff --git a/deploy/hub/conductor-worker.md b/deploy/hub/conductor-worker.md
@@ -11,8 +11,8 @@ Source and issues: https://github.com/finwo/conductor
| Tag | What it is |
| ---------------- | ------------------------------------------ |
| `latest` | the most recent release |
-| `0.9.3` | an exact version |
-| `0.9` | the latest patch of that minor series |
+| `0.10.0` | an exact version |
+| `0.10` | the latest patch of that minor series |
| `main` | the tip of the default branch |
Built for `linux/amd64`, `linux/arm64` and `linux/riscv64`.
diff --git a/deploy/hub/conductor.md b/deploy/hub/conductor.md
@@ -10,12 +10,30 @@ Source and issues: https://github.com/finwo/conductor
| Tag | What it is |
| ---------------- | ------------------------------------------ |
| `latest` | the most recent release |
-| `0.9.3` | an exact version |
-| `0.9` | the latest patch of that minor series |
+| `0.10.0` | an exact version |
+| `0.10` | the latest patch of that minor series |
| `main` | the tip of the default branch |
Built for `linux/amd64`, `linux/arm64` and `linux/riscv64`.
+**0.10.0 closed several ways in.** Workers are unaffected; the protocol
+they speak is unchanged.
+
+- A project with no trigger secret no longer accepts anonymous triggers.
+ Starting a build now takes a valid signature, or a session that may
+ manage the project. Anything driving `/trigger` without either stops
+ working, deliberately.
+- A trigger secret starts builds and no longer reads them back. Reading a
+ private job, task, log or artifact needs a session.
+- `visibility` in `.conductor.yml` is refused, and a file still carrying it
+ fails to compile. Visibility is a project setting: use
+ `PATCH /api/v1/projects/:id`.
+- `repo_url` must be `https`, `ssh`, `git` or an `scp`-style
+ `user@host:path`. Other schemes select a git transport rather than a
+ location and are rejected.
+- Changing your own password now takes `current_password` alongside the new
+ one. An administrator resetting someone else's does not.
+
**0.9.0 changed how people sign in.** Workers are unaffected; the protocol
they speak is unchanged.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
{
"name": "conductor",
- "version": "0.9.3",
+ "version": "0.10.0",
"description": "Stand-alone CI system: in-repo pipelines, containerised jobs, pull-based workers",
"type": "module",
"main": "src/conductor/index.js",
