6.0.0 (2026-04-25)

[6.0.0] - 2026-04-25

This release expands the application portfolio with new civic, ERP, feedback, and observability roles, replaces legacy generated runtime data with lookup-driven configuration and service loading, broadens Playwright end-to-end coverage across the stack, and hardens CI, local development, and deployment reliability.

Major Changes

  • Added major new application roles including web-app-odoo, web-app-decidim, web-app-fider, and web-app-prometheus

  • Replaced legacy generated applications / users setup flows with cached lookup-driven runtime data, centralized service-registry semantics, and nested compose.services.* configuration paths

  • Replaced the legacy Cypress-based browser test path with the dedicated test-e2e-playwright role and role-local Playwright specs / env files

  • Expanded shared platform integrations for SMTP, Prometheus / native metrics, OIDC, LDAP, and role-based RBAC provisioning

  • Hardened CI and local development with better WSL2 bootstrap support, safer swap / disk handling, stronger GHCR mirroring and release workflows, and updated fork / PR automation

Added

  • Added web-app-odoo with Docker Compose deployment, Redis integration, LDAP support, Keycloak / OIDC auto-provisioning, HTTPS-safe OAuth customization, and Playwright login / logout coverage

  • Added web-app-decidim with dedicated Docker image, OIDC bootstrap wiring, Ruby helper scripts, administrator setup, and Playwright coverage

  • Added web-app-fider as a new feedback platform role with deployment, OIDC setup, and end-to-end browser coverage

  • Added web-app-prometheus with alerting, alertmanager, blackbox, UI integration assets, and Playwright coverage

  • Added the dedicated test-e2e-playwright runner role plus broad new Playwright suites for apps including Pixelfed, Taiga, Mailu, Mattermost, Friendica, Joomla, Odoo, Decidim, PeerTube, Nextcloud, Matrix, BigBlueButton, and dashboard-linked flows

  • Added lookup(email) as the shared SMTP resolution layer and wired email integration into roles such as openwebui, flowise, pretix, and gitlab

  • Added generic OIDC group-to-RBAC auto-provisioning for WordPress through OpenLDAP-backed role mapping

  • Added issue templates, split PR templates by contribution type, and introduced CODEOWNERS

  • Added broader GHCR tooling including mirror cleanup, Docker image version fixing, and release / update workflow helpers

Changed

  • Migrated runtime resolution away from legacy generated dictionaries and setup CLIs toward cached lookup plugins such as applications, users, domains, image, service, and service_registry

  • Reworked shared service discovery and loading around the new sys-utils-service-loader flow and the required service semantics

  • Reorganized role configuration toward clearer service-scoped keys under compose.services.*

  • Extended Docker image version handling to support ghcr.io, depth-aware comparisons, and flavored semver tags such as 5.4.5-php8.3-apache

  • Expanded Prometheus / native metrics integration across application roles, especially communication-oriented apps

  • Reworked contributor, agent, and operations documentation into granular SPOT-style guides covering workflow, testing, debugging, sandboxing, PR creation, and environment setup

  • Improved WSL2 and local development bootstrap flow with better Docker, DNS, CA trust, package installation, and smoke-test coverage

  • Adopted git-maintainer-tools for fork / upstream remote routing and signed-push workflow handling

Fixed

  • Fixed the Joomla install / re-deploy flow across the open regression classes: raw-git-tree refusal handling, re-deploy idempotency, dash pipefail incompatibility, cleanup-phase crashes, and fresh-install password-reset races

  • Fixed PeerTube plugin-install reliability with explicit image pinning, improved diagnostics, memory-cap-aware install handling, and local OOM reproduction support

  • Fixed Mattermost SSO button regressions, Mailu DNS behavior, Nextcloud Talk TURN publishing, Friendica LDAP addon activation, Baserow bootstrap timing, BigBlueButton database race conditions, and multiple Odoo OAuth / provisioning edge cases

  • Fixed GHCR mirror visibility publication, propagation timing, and authenticated package handling

  • Fixed PR / branch cancellation behavior, branch-scope CI gating, fork prerequisite handling, and several GitHub Actions orchestration edge cases

  • Fixed multiple domain, CSP, email, lookup, and proxy wiring issues uncovered during the applications / users migration

CI and Tests

  • Added the external Docker image version-check workflow, a weekly CodeQL safety cron, dedicated PR close / branch delete cancel workflows, and stronger development-environment testing

  • Expanded lint, unit, and integration coverage around service-registry behavior, compose resource limits, email integration requirements, no_log policy, lookup usage, min-storage validation, and non-bash pipefail regressions

  • Improved CI diagnostics, runner-state dumps, disk / swap handling, image wait logic, and mirror / release backfill workflows for fork-based development

  • Centralized more CI helper logic into reusable scripts and utility modules to reduce workflow duplication

Contributors