Skip to content

chore(release): pin v0.6.0 image digests #336

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
davidamacey merged 1 commit into from
Oct 17, 2026
Merged

chore(release): pin v0.6.0 image digests #336

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions docs/releases/v0.6.0.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -142,9 +142,12 @@ Then open `http://localhost:4603/docs`. Full guide: `INSTALLATION.md`.
## Verification summary

- Scale ladder (10k and 100k): recorded above and in `docs/PERFORMANCE.md`.
- Pending, to fill at release: offline test count, pre-commit, contracts, `make release-verify`,
`make release-dry-run` (Trivy), the scripted acceptance run, and the published-image digest check
against `images.lock`.
- Offline suite on the release commit: 9,034 passed, 13 skipped, 0 failed; stubbed browser suite: 297 passed; `pre-commit --all-files`, `make contracts-check`, the docs checker and the docs-site build are clean.
- `make release-verify`: untouched assets verify; a tampered tarball and a tampered installer are refused (exit 7).
- `make release-dry-run` (Trivy): all six images (`api`, `triton`, `evaluator`, `segmenter`, `trainer`, `cropwright`) built and scanned with no un-allowlisted CRITICAL findings.
- Images pushed as `0.6.0` and `latest`; `images.lock` pins the six images and the 11 third-party images by digest.
- Live checks on a dev stack: S3 source against MinIO (register, preview, bulk ingest, allow-list refusal, webhook, poll and cron), an assist run with a real VLM (dry run, sampled classify, cluster proposal, explicit apply), a bulk-ingest preview, and a browser pass of every Cropwright page at 1600 and 430 px on public data.
- The scripted installer acceptance run into an isolated stack was not run for this release; the clean-host install of the published assets (#44) is the post-release verification.

## Credits and attribution

Expand Down
12 changes: 6 additions & 6 deletions images.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
alloy=grafana/alloy:v1.17.1@sha256:4f6ddc56ffdcf8a6316748fc5162972e20cb301523cac1bb4a31957df733ae9b
api=davidamacey/openprocessor:0.5.0@sha256:b0af838e0ec80ecd75ac574238075502de0e7ab0aec73f8c7fb87271a7af7e3f
cropwright=davidamacey/cropwright:0.5.0@sha256:6cb8ea990c9a743bb6f461f6f11d839c16bf02317e17fd5edf058278161ba6aa
api=davidamacey/openprocessor:0.6.0@sha256:42d687e5e9dd12d619653c8e7b693da51271a1331521dbd1718436ed5b223cd9
cropwright=davidamacey/cropwright:0.6.0@sha256:b39b3999021c07b3ccbbc3907a5f97bb51fe1bca4c1aebef784f220691e2dad8
dcgm_exporter=nvcr.io/nvidia/k8s/dcgm-exporter:3.3.5-3.4.0-ubuntu22.04@sha256:ab1e183c2ccd5820db379027f58cb928af29c2e8a87dd6decc39afac9f15d677
evaluator=davidamacey/openprocessor-evaluator:0.5.0@sha256:c2e025b2a76ad85696a08632629aa32ad1560d6e87f3554188e7bcbfa1353851
evaluator=davidamacey/openprocessor-evaluator:0.6.0@sha256:1d4c04146d097306fe65210dc85d33347becdd79d34d1dcef4a8c58b7e8bfed4
grafana=grafana/grafana:13.1.0@sha256:121a7a9ece6dc10b969f1f96eed64b4f07dfac0d0b8abc070f7cb83bbde86f63
loki=grafana/loki:3.6.12@sha256:2483b71b28b15dee230f85512cae2b20c4b5f6e98a6eabe686cbccfa5ea3ba4a
mlflow=ghcr.io/mlflow/mlflow:v3.17.0@sha256:78803b7afd156eced665b023554bc199a4723d4466e7cba3732f7284f3cddd11
node_exporter=prom/node-exporter:v1.10.2@sha256:3ac34ce007accad95afed72149e0d2b927b7e42fd1c866149b945b84737c62c3
opensearch_dashboards=opensearchproject/opensearch-dashboards:3.6.0@sha256:1ddd64e3a07fd98bc20ccf5174760b51795630a602b81102b37d1e9ee82cb7a9
opensearch=opensearchproject/opensearch:3.6.0@sha256:b5dd1512af2a99748c942cfbbd7f32162623336b210667d0fc6333c6321f171d
prometheus=prom/prometheus:v3.12.0@sha256:69f5241418838263316593f7274a304b095c40bcf22e57272865da91bd60a8ac
segmenter=davidamacey/openprocessor-segmenter:0.5.0@sha256:423c30e9faf41586d5029243ac1c1d0e257ab7551124691e34dad1488f9778c5
trainer=davidamacey/openprocessor-trainer:0.5.0@sha256:4c6ac262abb3ef4dc7be88c29a4ef839e81765fcced1e2794ca92d7ce2ad46b3
triton=davidamacey/openprocessor-triton:0.5.0@sha256:1ac56ac9fda810c55a8e3e1bb7dab5084bee5e0d0c52baaa5b131647572c8eb3
segmenter=davidamacey/openprocessor-segmenter:0.6.0@sha256:efd05d846fbc111ffdf20d54a9fd3fbe2e82305e45f349058c410cb1980a26a8
trainer=davidamacey/openprocessor-trainer:0.6.0@sha256:7001da7417692ebd2c9ebd94c059227e2de87f7ef2ea7239edf1e879d76d783a
triton=davidamacey/openprocessor-triton:0.6.0@sha256:d4330ddaf19b8407ead664c1e6482387e9e8567057b7ff3a791ac950ddb3896b
vlm_gemma4=vllm/vllm-openai:gemma4-cu130@sha256:0d152595cd940ea1e0890fa190a37b7a86e3f7f0f5048ac3e2e4c14529fea833
vlm_generic=vllm/vllm-openai:gemma4-cu130@sha256:0d152595cd940ea1e0890fa190a37b7a86e3f7f0f5048ac3e2e4c14529fea833
Loading