chore: pin decdn to v0.3.1

ansible/inventory/group_vars/decdn_gateway_hosts.yml

@@ -14,7 +14,7 @@
 # --- Binary ------------------------------------------------------------------------
 # "release" (default) installs the decdn CLI of the decdn_node role's release line.
 # To hold the host on one exact release:
-# decdn_gateway_version: "0.3.0"
+# decdn_gateway_version: "0.3.1"
 
 # --- Public address (REQUIRED) ----------------------------------------------------
 # Per host. <domain> and *.<domain> must resolve to the host; the playbooks open

ansible/inventory/group_vars/sponsord_hosts.yml

@@ -15,11 +15,11 @@
 # the role pins (sponsord_version "X.Y", the decdn_node role's line: one release ships
 # the node, sponsord and the onramp), on each deploy; set an exact one only to hold
 # the host on it, together with sponsord_onramp_version:
-# sponsord_version: "0.3.0"
+# sponsord_version: "0.3.1"
 # Or build on the host from a git ref (tag, branch or SHA; sponsord_version is not
 # checked in this mode):
 # sponsord_install_method: source
-# sponsord_source_ref: v0.3.0
+# sponsord_source_ref: v0.3.1
 # Or copy a control-machine build: a decdn/decdn checkout's target dir
 # (`cargo build --release -p sponsord`; the role checks the ELF matches the host).
 # sponsord_install_method: manual

ansible/inventory/group_vars/sponsord_onramp_hosts.yml

@@ -12,10 +12,10 @@
 # --- Binary ------------------------------------------------------------------------
 # The same three methods as sponsord. "release" (default) installs the same release
 # as the sponsord role; set both versions together to hold the host on another:
-# sponsord_onramp_version: "0.3.0"
+# sponsord_onramp_version: "0.3.1"
 # Or build on the host (its own checkout, so it may pin a different ref):
 # sponsord_onramp_install_method: source
-# sponsord_onramp_source_ref: v0.3.0
+# sponsord_onramp_source_ref: v0.3.1
 # Or manual, which follows sponsord_release_target_dir (`cargo build --release` in
 # a decdn/decdn checkout builds both binaries):
 # sponsord_onramp_install_method: manual
@@ -38,6 +38,6 @@
 # role's sponsord_onramp_decdn_release line (decdn/decdn, the decdn_node role's default
 # line; a host's decdn_node_version does not move it), with the SHA-256 of its
 # verified SHA256SUMS, on each deploy. To serve one exact release, set its tag and digest:
-# sponsord_onramp_decdn_release: v0.3.0
+# sponsord_onramp_decdn_release: v0.3.1
 # sponsord_onramp_decdn_sums_sha256: "…"
 # CapacityBond and SlashJudge come from sponsord_network (group_vars/sponsord_hosts.yml).

ansible/inventory/host_vars/decdn-node-1/main.yml

@@ -24,13 +24,13 @@
 # line the role pins ("X.Y": its newest release, installed by each deploy); set an
 # exact one only to hold a node on it.
 decdn_node_install_method: release
-# decdn_node_version: "0.3.0"
+# decdn_node_version: "0.3.1"
 #
 # Alternative: build on the node from a git ref (any tag, branch or SHA), as an
 # unprivileged build user with a pinned toolchain (decdn_node_version is not checked
 # in this mode):
 #     decdn_node_install_method: source
-#     decdn_node_source_ref: v0.3.0
+#     decdn_node_source_ref: v0.3.1
 # Alternative: copy binaries built on this control machine
 # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout):
 #     decdn_node_install_method: manual

ansible/inventory/host_vars/origin-1/main.yml

@@ -26,13 +26,13 @@
 # line the role pins ("X.Y": its newest release, installed by each deploy); set an
 # exact one only to hold a node on it.
 decdn_node_install_method: release
-# decdn_node_version: "0.3.0"
+# decdn_node_version: "0.3.1"
 #
 # Alternative: build on the node from a git ref (any tag, branch or SHA), as an
 # unprivileged build user with a pinned toolchain (decdn_node_version is not checked
 # in this mode):
 #     decdn_node_install_method: source
-#     decdn_node_source_ref: v0.3.0
+#     decdn_node_source_ref: v0.3.1
 # Alternative: copy binaries built on this control machine
 # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout):
 #     decdn_node_install_method: manual

ansible/roles/decdn_gateway/vars/main/networks.yml

@@ -1,6 +1,6 @@
 ---
 # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit.
-# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c
+# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35
 #   crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses)
 #   + contracts/deployments/<chainId>.json
 #

ansible/roles/decdn_node/vars/main/networks.yml

@@ -1,6 +1,6 @@
 ---
 # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit.
-# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c
+# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35
 #   crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses)
 #   + contracts/deployments/<chainId>.json
 #

ansible/roles/sponsord/vars/main/networks.yml

@@ -1,6 +1,6 @@
 ---
 # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit.
-# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c
+# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35
 #   crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses)
 #   + contracts/deployments/<chainId>.json
 #

ansible/roles/sponsord_onramp/vars/main/networks.yml

@@ -1,6 +1,6 @@
 ---
 # GENERATED by scripts/sync-network-profiles.py -- do not hand-edit.
-# Source: decdn/decdn @ d96e78d09ad59f3950a519ab1ef42fa50e74514c
+# Source: decdn/decdn @ e7e67e642b416db7b8e3c8d65c499e915c8b5d35
 #   crates/cli/src/known_chains.rs (KNOWN_CHAINS, KnownChain::addresses)
 #   + contracts/deployments/<chainId>.json
 #

charts/decdn-node/values.yaml

@@ -14,8 +14,8 @@ image:
   tag: ""
   # sha256:... — takes precedence over tag when set. Prefer it: a tag can be moved.
   # Take it from the release's signed decdn-node-image-digest.txt (v0.0.1:
-  # image-digest.txt), e.g. for v0.3.0
-  # sha256:275ababfaea41ee3cd0d47213814eda1337aaf533c364b3235bc514c2a54429e
+  # image-digest.txt), e.g. for v0.3.1
+  # sha256:df8900be7140f58a135bf7487dc1342e70c49b01305a250a47df51f14cb5745e
   digest: ""
   # "" picks Always for a release-line tag (X.Y, the default), so a restarted pod
   # pulls the newest release in it rather than whatever the node cached first, and

cloud-init/user-data-publisher.yaml

@@ -145,7 +145,7 @@ write_files:
           # the digest read from it. To serve one exact release, set its tag with the
           # SHA-256 of its SHA256SUMS (`sha256sum SHA256SUMS` once its SHA256SUMS.asc
           # verifies), e.g.:
-          # sponsord_onramp_decdn_release: "v0.3.0"
+          # sponsord_onramp_decdn_release: "v0.3.1"
           # sponsord_onramp_decdn_sums_sha256: "<64 lowercase hex>"
 
   # What an interactive login prints while the bootstrap is unfinished. It is written

compose/.env.example

@@ -33,8 +33,8 @@ COMPOSE_PROFILES=node
 # Compose names one release of it (README.md, the node's "Operate").
 
 # --- node -----------------------------------------------------------------------
-# decdn/decdn v0.3.0
-DECDN_IMAGE_DIGEST=sha256:275ababfaea41ee3cd0d47213814eda1337aaf533c364b3235bc514c2a54429e
+# decdn/decdn v0.3.1
+DECDN_IMAGE_DIGEST=sha256:df8900be7140f58a135bf7487dc1342e70c49b01305a250a47df51f14cb5745e
 # DECDN_IMAGE_REPO=ghcr.io/decdn/decdn-node
 
 # uid/gid of the host's dedicated `decdn` system account, which owns /var/lib/decdn
@@ -49,9 +49,9 @@ DECDN_ENV_FILE=/etc/decdn/decdn.env
 # From the same decdn/decdn release as the node's digest above: one release ships
 # all three images (sponsord_version = decdn_node_version). Each from the release's
 # signed sponsord-image-digest.txt / sponsord-onramp-image-digest.txt.
-SPONSORD_IMAGE_DIGEST=sha256:56f5d0cbe82959ca9383a0705f80116a5d94a8ff64a6b5219e185c7bffc4e4d3
+SPONSORD_IMAGE_DIGEST=sha256:73909acb22f87b53a06edd7d33ab946df721492a4648d61001c6cdd21c462169
 # SPONSORD_IMAGE_REPO=ghcr.io/decdn/sponsord
-SPONSORD_ONRAMP_IMAGE_DIGEST=sha256:76f8f8c545f4c3a0e9955f2c6e6ab768200cf83a415a6fb76c69be3c3187ce14
+SPONSORD_ONRAMP_IMAGE_DIGEST=sha256:f73f6aafb0f60f887945bbf3fc66e4b6b3c0b94b539793a8e2da3ead967ee826
 # SPONSORD_ONRAMP_IMAGE_REPO=ghcr.io/decdn/sponsord-onramp
 
 # uid/gid of the host's dedicated `sponsord` system account, which owns the

compose/sponsord-onramp.env.example

@@ -22,9 +22,9 @@ ONRAMP_TURNSTILE_SITEKEY=
 # SHA-256 of that release's SHA256SUMS file (`sha256sum SHA256SUMS` once its .asc
 # verifies). The Ansible role serves the newest release of its decdn line; Compose
 # has no resolver, so this names one, the newest when this file last moved:
-# decdn/decdn v0.3.0.
-ONRAMP_DECDN_RELEASE=v0.3.0
-ONRAMP_DECDN_SUMS_SHA256=bc89cd91e23e5b51aacabc78d0e54ccdb4e74de1c22e7121041cc5bfe20a0f52
+# decdn/decdn v0.3.1.
+ONRAMP_DECDN_RELEASE=v0.3.1
+ONRAMP_DECDN_SUMS_SHA256=95e000ffa6ff65e83b7ca9effa7b9b745fd90f11891205c86ebc32f7697e1ace
 
 # --- Client address ---------------------------------------------------------------
 # The header the proxy puts the client address in; the onramp rate limits by it.

examples/collection-fleet/inventory/group_vars/decdn_gateway_hosts.yml

@@ -14,7 +14,7 @@
 # --- Binary ------------------------------------------------------------------------
 # "release" (default) installs the decdn CLI of the decdn_node role's release line.
 # To hold the host on one exact release:
-# decdn_gateway_version: "0.3.0"
+# decdn_gateway_version: "0.3.1"
 
 # --- Public address (REQUIRED) ----------------------------------------------------
 # Per host. <domain> and *.<domain> must resolve to the host; the playbooks open

examples/collection-fleet/inventory/group_vars/sponsord_hosts.yml

@@ -15,11 +15,11 @@
 # the role pins (sponsord_version "X.Y", the decdn_node role's line: one release ships
 # the node, sponsord and the onramp), on each deploy; set an exact one only to hold
 # the host on it, together with sponsord_onramp_version:
-# sponsord_version: "0.3.0"
+# sponsord_version: "0.3.1"
 # Or build on the host from a git ref (tag, branch or SHA; sponsord_version is not
 # checked in this mode):
 # sponsord_install_method: source
-# sponsord_source_ref: v0.3.0
+# sponsord_source_ref: v0.3.1
 # Or copy a control-machine build: a decdn/decdn checkout's target dir
 # (`cargo build --release -p sponsord`; the role checks the ELF matches the host).
 # sponsord_install_method: manual

examples/collection-fleet/inventory/group_vars/sponsord_onramp_hosts.yml

@@ -12,10 +12,10 @@
 # --- Binary ------------------------------------------------------------------------
 # The same three methods as sponsord. "release" (default) installs the same release
 # as the sponsord role; set both versions together to hold the host on another:
-# sponsord_onramp_version: "0.3.0"
+# sponsord_onramp_version: "0.3.1"
 # Or build on the host (its own checkout, so it may pin a different ref):
 # sponsord_onramp_install_method: source
-# sponsord_onramp_source_ref: v0.3.0
+# sponsord_onramp_source_ref: v0.3.1
 # Or manual, which follows sponsord_release_target_dir (`cargo build --release` in
 # a decdn/decdn checkout builds both binaries):
 # sponsord_onramp_install_method: manual
@@ -38,6 +38,6 @@
 # role's sponsord_onramp_decdn_release line (decdn/decdn, the decdn_node role's default
 # line; a host's decdn_node_version does not move it), with the SHA-256 of its
 # verified SHA256SUMS, on each deploy. To serve one exact release, set its tag and digest:
-# sponsord_onramp_decdn_release: v0.3.0
+# sponsord_onramp_decdn_release: v0.3.1
 # sponsord_onramp_decdn_sums_sha256: "…"
 # CapacityBond and SlashJudge come from sponsord_network (group_vars/sponsord_hosts.yml).

examples/collection-fleet/inventory/host_vars/decdn-node-1/main.yml

@@ -24,13 +24,13 @@
 # line the role pins ("X.Y": its newest release, installed by each deploy); set an
 # exact one only to hold a node on it.
 decdn_node_install_method: release
-# decdn_node_version: "0.3.0"
+# decdn_node_version: "0.3.1"
 #
 # Alternative: build on the node from a git ref (any tag, branch or SHA), as an
 # unprivileged build user with a pinned toolchain (decdn_node_version is not checked
 # in this mode):
 #     decdn_node_install_method: source
-#     decdn_node_source_ref: v0.3.0
+#     decdn_node_source_ref: v0.3.1
 # Alternative: copy binaries built on this control machine
 # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout):
 #     decdn_node_install_method: manual

examples/collection-fleet/inventory/host_vars/origin-1/main.yml

@@ -26,13 +26,13 @@
 # line the role pins ("X.Y": its newest release, installed by each deploy); set an
 # exact one only to hold a node on it.
 decdn_node_install_method: release
-# decdn_node_version: "0.3.0"
+# decdn_node_version: "0.3.1"
 #
 # Alternative: build on the node from a git ref (any tag, branch or SHA), as an
 # unprivileged build user with a pinned toolchain (decdn_node_version is not checked
 # in this mode):
 #     decdn_node_install_method: source
-#     decdn_node_source_ref: v0.3.0
+#     decdn_node_source_ref: v0.3.1
 # Alternative: copy binaries built on this control machine
 # (`cargo build --release -p decdn-node -p decdn-cli` in a decdn/decdn checkout):
 #     decdn_node_install_method: manual