diff --git a/docs/releases/v0.6.0.md b/docs/releases/v0.6.0.md index a853c814..87ff6e92 100644 --- a/docs/releases/v0.6.0.md +++ b/docs/releases/v0.6.0.md @@ -142,9 +142,12 @@ Then open `http://localhost:4603/docs`. Full guide: `INSTALLATION.md`. ## Verification summary - Scale ladder (10k and 100k): recorded above and in `docs/PERFORMANCE.md`. -- Pending, to fill at release: offline test count, pre-commit, contracts, `make release-verify`, - `make release-dry-run` (Trivy), the scripted acceptance run, and the published-image digest check - against `images.lock`. +- Offline suite on the release commit: 9,034 passed, 13 skipped, 0 failed; stubbed browser suite: 297 passed; `pre-commit --all-files`, `make contracts-check`, the docs checker and the docs-site build are clean. +- `make release-verify`: untouched assets verify; a tampered tarball and a tampered installer are refused (exit 7). +- `make release-dry-run` (Trivy): all six images (`api`, `triton`, `evaluator`, `segmenter`, `trainer`, `cropwright`) built and scanned with no un-allowlisted CRITICAL findings. +- Images pushed as `0.6.0` and `latest`; `images.lock` pins the six images and the 11 third-party images by digest. +- Live checks on a dev stack: S3 source against MinIO (register, preview, bulk ingest, allow-list refusal, webhook, poll and cron), an assist run with a real VLM (dry run, sampled classify, cluster proposal, explicit apply), a bulk-ingest preview, and a browser pass of every Cropwright page at 1600 and 430 px on public data. +- The scripted installer acceptance run into an isolated stack was not run for this release; the clean-host install of the published assets (#44) is the post-release verification. ## Credits and attribution diff --git a/images.lock b/images.lock index e4ad9699..d834f9a3 100644 --- a/images.lock +++ b/images.lock @@ -1,8 +1,8 @@ alloy=grafana/alloy:v1.17.1@sha256:4f6ddc56ffdcf8a6316748fc5162972e20cb301523cac1bb4a31957df733ae9b -api=davidamacey/openprocessor:0.5.0@sha256:b0af838e0ec80ecd75ac574238075502de0e7ab0aec73f8c7fb87271a7af7e3f -cropwright=davidamacey/cropwright:0.5.0@sha256:6cb8ea990c9a743bb6f461f6f11d839c16bf02317e17fd5edf058278161ba6aa +api=davidamacey/openprocessor:0.6.0@sha256:42d687e5e9dd12d619653c8e7b693da51271a1331521dbd1718436ed5b223cd9 +cropwright=davidamacey/cropwright:0.6.0@sha256:b39b3999021c07b3ccbbc3907a5f97bb51fe1bca4c1aebef784f220691e2dad8 dcgm_exporter=nvcr.io/nvidia/k8s/dcgm-exporter:3.3.5-3.4.0-ubuntu22.04@sha256:ab1e183c2ccd5820db379027f58cb928af29c2e8a87dd6decc39afac9f15d677 -evaluator=davidamacey/openprocessor-evaluator:0.5.0@sha256:c2e025b2a76ad85696a08632629aa32ad1560d6e87f3554188e7bcbfa1353851 +evaluator=davidamacey/openprocessor-evaluator:0.6.0@sha256:1d4c04146d097306fe65210dc85d33347becdd79d34d1dcef4a8c58b7e8bfed4 grafana=grafana/grafana:13.1.0@sha256:121a7a9ece6dc10b969f1f96eed64b4f07dfac0d0b8abc070f7cb83bbde86f63 loki=grafana/loki:3.6.12@sha256:2483b71b28b15dee230f85512cae2b20c4b5f6e98a6eabe686cbccfa5ea3ba4a mlflow=ghcr.io/mlflow/mlflow:v3.17.0@sha256:78803b7afd156eced665b023554bc199a4723d4466e7cba3732f7284f3cddd11 @@ -10,8 +10,8 @@ node_exporter=prom/node-exporter:v1.10.2@sha256:3ac34ce007accad95afed72149e0d2b9 opensearch_dashboards=opensearchproject/opensearch-dashboards:3.6.0@sha256:1ddd64e3a07fd98bc20ccf5174760b51795630a602b81102b37d1e9ee82cb7a9 opensearch=opensearchproject/opensearch:3.6.0@sha256:b5dd1512af2a99748c942cfbbd7f32162623336b210667d0fc6333c6321f171d prometheus=prom/prometheus:v3.12.0@sha256:69f5241418838263316593f7274a304b095c40bcf22e57272865da91bd60a8ac -segmenter=davidamacey/openprocessor-segmenter:0.5.0@sha256:423c30e9faf41586d5029243ac1c1d0e257ab7551124691e34dad1488f9778c5 -trainer=davidamacey/openprocessor-trainer:0.5.0@sha256:4c6ac262abb3ef4dc7be88c29a4ef839e81765fcced1e2794ca92d7ce2ad46b3 -triton=davidamacey/openprocessor-triton:0.5.0@sha256:1ac56ac9fda810c55a8e3e1bb7dab5084bee5e0d0c52baaa5b131647572c8eb3 +segmenter=davidamacey/openprocessor-segmenter:0.6.0@sha256:efd05d846fbc111ffdf20d54a9fd3fbe2e82305e45f349058c410cb1980a26a8 +trainer=davidamacey/openprocessor-trainer:0.6.0@sha256:7001da7417692ebd2c9ebd94c059227e2de87f7ef2ea7239edf1e879d76d783a +triton=davidamacey/openprocessor-triton:0.6.0@sha256:d4330ddaf19b8407ead664c1e6482387e9e8567057b7ff3a791ac950ddb3896b vlm_gemma4=vllm/vllm-openai:gemma4-cu130@sha256:0d152595cd940ea1e0890fa190a37b7a86e3f7f0f5048ac3e2e4c14529fea833 vlm_generic=vllm/vllm-openai:gemma4-cu130@sha256:0d152595cd940ea1e0890fa190a37b7a86e3f7f0f5048ac3e2e4c14529fea833