v2.9.0 8ebdfe0

2026-02-01

8ebdfe0Merge pull request #42 from bnema/fix/plan-secrets-registry-auth-token merge GPG Unverifiedtag v2.9.0bnema

2026-01-31

1f18a18ci(release): configure pre-release detection with GoReleaser v2 GPG Verifiedbnema
1e443d6feat(install): add support for pre-release and custom version installation GPG Verifiedbnema
378df3ffeat(loader): add attachment container support to pass environment loader GPG Verifiedbnema
80d7794feat(secrets): implement attachment secrets for pass store backend GPG Verifiedbnema
985c8e4test(container): add sanitization and collision detection tests GPG Verifiedbnema
db67927fix(migration): correct attachment container name prefix handling GPG Verifiedbnema
4d94bdcfix(secrets): improve error handling in attachment file path resolution GPG Verifiedbnema
584c131fix(domain): add ErrInvalidContainerName for better error semantics GPG Verifiedbnema
8541735refactor(secrets): extract shared sanitization logic to domain package GPG Verifiedbnema
0a85e4efix(review): address coderabbit code review feedback GPG Verifiedbnema
d2f6768fix(review): address all code review issues from PR GPG Verifiedbnema

2026-01-30

078b950fix(review): address Copilot and CodeRabbit PR feedback GPG Verifiedbnema
3659333fix(secrets): harden pass storage and auth GPG Verifiedbnema
e442f1cdocs(auth): clarify token secret sources GPG Verifiedbnema
18f31a9docs(auth): simplify authentication setup GPG Verifiedbnema
5498bc4feat(auth): add token login and registry pull token GPG Verifiedbnema
6ee1d33feat(secrets): add pass-backed domain secrets migration GPG Verifiedbnema

2026-01-29

6aced72Merge pull request #41 from bnema/feature/auth-status merge GPG Unverifiedtag v2.8.0bnema
529bf12fix(cli): improve error message specificity for missing remotes GPG Verifiedbrice
9233704fix(cli): address code review feedback for auth status command GPG Verifiedbrice

2026-01-28

530de44refactor(auth): move context keys to domain and fix review feedback GPG Verifiedbnema
7c9064btest(middleware): add GetAuthStatus to stubAuthService and fix error message capitalization GPG Verifiedbnema
c726949feat(cli): add auth status command to verify session validity GPG Verifiedbnema
ed1cab5Merge pull request #40 from bnema/fix/routes-add-positional-image merge GPG Unverifiedbnema
af6e90afix(cli): improve backward compatibility and add validation guards GPG Verifiedbnema
39076abcli(routes): allow image as positional argument instead of --image flag GPG Verifiedbnema
339400cMerge pull request #39 from bnema/fix/validate-image-exists-on-route-add merge GPG Unverifiedbnema
5d5d9c2fix(admin): add image validation to PUT endpoint and improve error handling GPG Verifiedbnema
0df4d83feat(admin): validate image exists in registry before adding route GPG Verifiedbnema

2026-01-21

43f3ec2Merge pull request #38 from bnema/docs/wiki-cleanup-and-guides merge GPG Unverifiedbnema
a7709dcfix(wiki): remove broken development.md link GPG Verifiedbnema
db23f3adocs(wiki): cleanup broken links and add secure-vps-setup guide GPG Verifiedbnema

2026-01-18

63c01baMerge pull request #37 from bnema/chore/update-module-path-and-deps merge GPG Unverifiedbnema
fb423a0chore: update module path to github.com/bnema/gordon and bump dependencies GPG Verifiedbrice
b3a38c8Merge pull request #36 from bnema/fix/registry-auth-scope-and-cache merge GPG Unverifiedtag v2.7.1bnema
c57e4befix(tokenstore): fix race condition and cache sync in revocation GPG Verifiedbrice
21240d8fix(auth): add token cache and fix scope validation GPG Verifiedbrice
f514a0afix(auth): add token cache and fix scope validation GPG Verifiedbrice
b310320docs: fix outdated references and broken links GPG Verifiedbrice
0a90c36docs: add upgrading guide for v2.7.0 breaking changes GPG Verifiedbrice
fac7705Merge pull request #35 from bnema/fix/minor-qa-issues merge GPG Unverifiedtag v2.7.0bnema
bb7bc50test: address Copilot review feedback GPG Verifiedbrice
07eb07dfix(proxy): remove duplicate security headers on registry proxy GPG Verifiedbrice
7a52171feat(secrets): auto-discover and display attachment secrets GPG Verifiedbrice
37c310dfix(admin): return 404 for route not found on delete GPG Verifiedbrice
11f41defix(config): add Reload method to properly re-read config from disk GPG Verifiedbrice
edb08f9fix(config): remove default auth.type that broke type inference GPG Verifiedbrice
6247cf8Merge pull request #34 from bnema/refactor/ratelimit-clean-architecture merge GPG Unverifiedbnema
9f5497edocs: update auth config to use inferred type and new CLI commands GPG Verifiedbnema

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close