v0.7.0

Changelog

• fcb27e6: docs(branch-protection): document --apply mode and admin-token caveat (#417) (@joshua-temple)
• d540466: feat(branch-protection): add --apply flag for direct branch-protection PUT (#416) (@joshua-temple)
• c7a87c0: test(e2e): add scenarios 42-44 covering consistency-fix, rollout strategy, and components reserve (#414) (@joshua-temple)
• efcc181: test(release): cover the auto-promote resolve decision logic (#415) (@joshua-temple)

v0.7.0-rc.0

Changelog

• fcb27e6: docs(branch-protection): document --apply mode and admin-token caveat (#417) (@joshua-temple)
• d540466: feat(branch-protection): add --apply flag for direct branch-protection PUT (#416) (@joshua-temple)
• c7a87c0: test(e2e): add scenarios 42-44 covering consistency-fix, rollout strategy, and components reserve (#414) (@joshua-temple)
• efcc181: test(release): cover the auto-promote resolve decision logic (#415) (@joshua-temple)

v0.6.0

Changelog

• 970c0d3: build(deps): bump actions/checkout to v7.0.0 and github-script to v9.0.0 (#402) (@joshua-temple)
• 0693c52: chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 (#270) (@dependabot[bot])
• da83f91: chore(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#273) (@dependabot[bot])
• b2f4cdf: chore(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0 in /e2e (#271) (@dependabot[bot])
• 4b585fc: chore(deps): bump github.com/testcontainers/testcontainers-go in /e2e (#269) (@dependabot[bot])
• 63732c8: ci(deps): scope dependabot to action-pins manifest (#403) (@joshua-temple)
• 260a5c8: ci(e2e): shard scenarios across a retrying matrix (#405) (@joshua-temple)
• 7db22e9: ci(fleet): retry heavy lane on suite failure (#407) (@joshua-temple)
• ee53391: feat(status): add consistency --fix to delete orphan env branches (#409) (@joshua-temple)
• dad01a1: fix(e2e): pin act runner image to a Node 24 digest (#399) (@joshua-temple)
• a89a4b1: fix(fleet): preserve cli_version_sha across state writes and restore the sha-pin repin (#393) (@joshua-temple)
• 40ebcd9: fix(fleet): raise dispatch-suite watch cap 75->180 min (#394) (@joshua-temple)
• 272f6ff: fix(hotfix): self-heal orphan env branches during plan (#408) (@joshua-temple)
• 2f23b55: refactor(generate): source action pins from an embedded manifest (#398) (@joshua-temple)
• f4087c0: refactor: converge artifact action versions and add pin consistency lint (#401) (@joshua-temple)

v0.6.0-rc.2

Changelog

• 970c0d3: build(deps): bump actions/checkout to v7.0.0 and github-script to v9.0.0 (#402) (@joshua-temple)
• 0693c52: chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 (#270) (@dependabot[bot])
• da83f91: chore(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 (#273) (@dependabot[bot])
• b2f4cdf: chore(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0 in /e2e (#271) (@dependabot[bot])
• 4b585fc: chore(deps): bump github.com/testcontainers/testcontainers-go in /e2e (#269) (@dependabot[bot])
• 63732c8: ci(deps): scope dependabot to action-pins manifest (#403) (@joshua-temple)
• 260a5c8: ci(e2e): shard scenarios across a retrying matrix (#405) (@joshua-temple)
• 7db22e9: ci(fleet): retry heavy lane on suite failure (#407) (@joshua-temple)
• ee53391: feat(status): add consistency --fix to delete orphan env branches (#409) (@joshua-temple)
• dad01a1: fix(e2e): pin act runner image to a Node 24 digest (#399) (@joshua-temple)
• a89a4b1: fix(fleet): preserve cli_version_sha across state writes and restore the sha-pin repin (#393) (@joshua-temple)
• 40ebcd9: fix(fleet): raise dispatch-suite watch cap 75->180 min (#394) (@joshua-temple)
• 272f6ff: fix(hotfix): self-heal orphan env branches during plan (#408) (@joshua-temple)
• 2f23b55: refactor(generate): source action pins from an embedded manifest (#398) (@joshua-temple)
• f4087c0: refactor: converge artifact action versions and add pin consistency lint (#401) (@joshua-temple)

v0.6.0-rc.1

Changelog

• 8589261: fix(fleet): repin rewrites stale dryrun refs, not just rc refs (#392) (@joshua-temple)

v0.6.0-rc.0

Changelog

• dd8c115: feat(fleet): add cascade-example-rollback-dispatch to the staged remainder (#379) (@joshua-temple)
• ead75ad: feat(release): nightly-gated rc-cutting and promotion with a dispatch test vector (#380) (@joshua-temple)
• e6f309b: fix(fleet): stage the fan-out and add a selective repos input (#378) (@joshua-temple)
• c110046: fix(fleet): tag-pin the example repos in the repin instead of SHA-pinning (#391) (@joshua-temple)
• 5702d41: fix(security): SHA-pin the setup-cli action in generated workflows (#384) (@joshua-temple)
• e491d12: fix(statewrite): route orchestrate and external state writes through WriteManifestState (#389) (@joshua-temple)
• 4e32f2e: fix(version): ignore non-version tags in latest-tag discovery (#382) (@joshua-temple)

v0.5.1

Changelog

• fd3154b: fix(fleet): raise per-repo suite watch cap to clear the longer 4env run (#368) (@joshua-temple)
• 3722c8e: fix(statewrite): preserve unmodeled manifest config across state writes (#371) (@joshua-temple)

v0.5.1-rc.0

Changelog

• fd3154b: fix(fleet): raise per-repo suite watch cap to clear the longer 4env run (#368) (@joshua-temple)
• 3722c8e: fix(statewrite): preserve unmodeled manifest config across state writes (#371) (@joshua-temple)

v0.5.0

Changelog

• 0629ff6: fix(hotfix): fail loudly when a remote env tip diverges from recorded state (#367) (@joshua-temple)
• 6badcf8: fix(statewrite): stamp the bot on orchestrate, release, and rollback state writes (#366) (@joshua-temple)

v0.5.0-rc.9

⚠️ Breaking Changes

• remove inline run callback emission path #161 — @joshua-temple

✨ Features (74)

e2e

• add hotfix runner step actions and expectation surface #115 — @joshua-temple
• plumb act event payload and env/* branch fetch #112 — @joshua-temple

fleet

• fan out to cascade-example-no-env and cascade-example-callbacks #345 — @joshua-temple

generate

• emit cascade-hotfix workflow for multi-env repos #106 — @joshua-temple

git

• add IsAncestor, BranchExists, and RemoteBranchSHA helpers #99 — @joshua-temple

graph

• add env and stages render granularities #356 — @joshua-temple
• add cascade graph command rendering the pipeline as mermaid #354 — @joshua-temple

hotfix

• add finalize verb writing diverged state, tag, and release #104 — @joshua-temple

promote

• rejoin and clean up diverged envs on inbound promotion #105 — @joshua-temple
• guard promotion against diverged environments #102 — @joshua-temple

simulate

• record build and deploy callbacks as stubbed effects with gating #360 — @joshua-temple
• add rollback, release, and hotfix what-if actions #355 — @joshua-temple
• add what-if engine for state diff and effect sequence #353 — @joshua-temple

visualize

• render the cross-repo flow as per-repo lanes #362 — @joshua-temple

• add theme layer with cascade and bland built-in themes #359 — @joshua-temple

• pipeline view model, pluggable emitter, and Mermaid emitter #352 — @joshua-temple

• add notify deploy_name and environment overrides #267 — @joshua-temple

• add fleet run-ledger reconcile gate #266 — @joshua-temple

• default release_token to state_token to arm the rc-to-release chain #258 — @joshua-temple

• emit least-privilege top-level workflow permissions #251 — @joshua-temple

• elevate a hotfix commit set across the env chain in the generated workflow #248 — @joshua-temple

• plan multi-commit hotfix elevation across the env chain #246 — @joshua-temple

• add cascade plan command to preview workflow diffs #243 — @joshua-temple

• add repository_dispatch trigger to the rollback workflow #242 — @joshua-temple

• emit native GitHub Deployment objects for promotions #241 — @joshua-temple

• support GitHub App token sources for state and release tokens #240 — @joshua-temple

• emit environments.json from the manifest #239 — @joshua-temple

• emit branch-protection.json from the manifest #238 — @joshua-temple

• complete cascade init starter scaffold #237 — @joshua-temple

• generate an opt-in PR drift-check workflow #236 — @joshua-temple

• detect orphaned generated workflows in cascade verify #235 — @joshua-temple

• reserve release version-override location pointer #234 — @joshua-temple

• reserve telemetry webhook and job-summary fields #233 — @joshua-temple

• reserve gitops deploy target branch and sha-tracking fields #232 — @joshua-temple

• reserve canary and blue-green deploy fields on rollout #231 — @joshua-temple

• add cascade verify command to detect workflow drift #225 — @joshua-temple

• reserve components schema shape for per-component versioning #222 — @joshua-temple

• run scoped deploy on external-update record #213 — @joshua-temple

• add fleet e2e orchestrator and rename test workflows #208 — @joshua-temple

• add cascade init command to scaffold a project #170 — @joshua-temple

• add internal/scaffold package for cascade init #169 — @joshua-temple

• add hand-authored manifest JSON schema for editor validation #168 — @joshua-temple

• manual rollback that deploys, arbitrary-depth and divergence-safe #158 — @joshua-temple

• populate per-environment deploy-history ring #157 — @joshua-temple

• add promote downgrade/monotonicity gate #156 — @joshua-temple

• thread immutable image digest to deploy jobs #152 — @joshua-temple

• add cascade hotfix plan verb #103 — @joshua-temple

• support rc-based hotfix version segment #101 — @joshua-temple

• add divergence fields to EnvState #100 — @joshua-temple

• per-callback explicit secrets map on reusable-workflow calls #82 — @joshua-temple

• emit opt-in read-only PR plan-preview workflow #86 — @joshua-temple

• add manifest-validation PR check and merge-queue validation lanes #85 — @joshua-temple

• refresh state..sha after auto-committing callbacks #84 — @joshua-temple

• wire rollout.max_parallel and rollout.fail_fast into deploy matrix strategy #83 — @joshua-temple

• resolve version tag before cache key in setup-cli action #81 — @joshua-temple

• pass dry_run to callbacks that declare supports_dry_run #79 — @joshua-temple

• honor negative path patterns in triggers and change detection #75 — @joshua-temple

• route third-party action refs through pin policy #77 — @joshua-temple

• emit GHA environment: on deploy jobs when gha_environment is configured #74 — @joshua-temple

• pass vars and prior-state expressions through to generated workflows #73 — @joshua-temple

• emit user-defined dispatch_inputs on the orchestrate workflow (#33) #70 — @joshua-temple

• emit owned-job timeouts and optional_depends_on sequencing #71 — @joshua-temple

• add rollback command for prior-version re-promotion #69 — @joshua-temple

• GHA artifact passing between build jobs within one orchestrate run #68 — @joshua-temple

• record per-deployable version on promote finalize #67 — @joshua-temple

• per-callback runs_on, permissions (incl. OIDC), and concurrency on inline jobs #66 — @joshua-temple

• emit inline run callbacks as cascade-owned steps #62 — @joshua-temple

• cascade status read-only state query CLI #61 — @joshua-temple

• [#14] emit strategy.matrix on build jobs in orchestrate workflow #60 — @joshua-temple

• emit concurrency blocks on promote, release, and external-update workflows #55 — @joshua-temple

• emit extra_triggers (schedule, repository_dispatch, workflow_run, merge_group) in orchestrate workflow #57 — @joshua-temple

• freeze v1 manifest schema field shapes #45 — @joshua-temple

• add schema_version field with compatibility enforcement #43 — @j...