[rmcdaniel]

Chart 2.1.0 advances the default native Server image from 3.10.0 to 3.11.0. No schema step is needed from 3.10.x, and existing values and resource contracts remain compatible. Earlier releases retain the stopped-replica, backup, explicit schema-upgrade and restore-on-rollback requirements.

The five-file change updates the authoritative chart/app record, generated image defaults, example, changelog and migration notes. It documents completed plain timer reuse, full fractional replay clocks, persisted run-start authority and the limit that already-lost fractions cannot be reconstructed. PHP remains frozen at 2.11.8. Templates and runtime code are unchanged.

Validation: source-release synchronization, all 30 existing chart release controls, committed version advancement 2.0.0 to 2.1.0, and git diff --check pass. Independent exact-source Security PASS is recorded at d21a299e / tree 472e1d1c. All 19 current hosted checks pass with eight intended path skips and no pending/failure, including normal chart lint/render/Kubernetes installation and source CI.

Merge and OCI publication are held. Native release preparation #1218 now has complete immutable image, exact-tag corpus and four-cell Compose qualification, with independent producer PASS. The exact tuple is handed to the SDK owners; actual published PHP/Python/Rust cold-process fractional replay gates under #980 still gate aliases and the final GitHub Release. This chart must wait for the complete native disposition. Chart OCI/package/content/install proof and Docs selection remain separate. Current published selection stays Server 3.10.0 / Chart 2.0.0. No #1204, Cloud or broader redrive acceptance is inferred.

[rmcdaniel]

Security source/contract review of exact d21a299ea8ab2e731d665034bae58d07865fdab7 / tree 472e1d1c9e198b3f279e430fc1da03a88d01be48: PASS for the five-file Chart 2.1.0 / app 3.11.0 preparation only.

The delta is limited to Chart/version identity, the README example, one new upgrade-note section, the values default and the synchronized source-release record; templates, permissions, PHP runtime selection and resource defaults are unchanged. Chart MINOR is consistent with the existing policy for crossing a Server MINOR without a chart-breaking values/resource change.

The notes agree with the reviewed 3.11 source contract: no schema step from 3.10.x; retained SQLite 14 / PostgreSQL+MariaDB 15 / MySQL 16; earlier stopped-replica, backup and restore-required schema boundaries remain explicit; plain ordered timer-pair reuse creates no timer row/task; original/repeated clock authority and fractional precision limits are preserved; Worker protocol 1.20/control plane 2 and PHP 2.11.8 remain unchanged. Chart.yaml, values.yaml and source-release.json consistently select chart 2.1.0 / native 3.11.0 while keeping Server PHP 2.11.8.

The exact delta passes git diff --check; current chart source lint/render is green. Merge and OCI publication remain held for complete current CI, native parity/corpus, exact published PHP/Python/Rust precision receipts, final native aliases/Release and normal tested-tree verification. No chart selection or consumer adoption is inferred.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[rmcdaniel]

Exact d21a299ea8ab2e731d665034bae58d07865fdab7 / tree 472e1d1c9e198b3f279e430fc1da03a88d01be48 has all 19 current checks successful and eight intended path skips, with no pending or failed check. The five-file diff is unchanged from Security source-contract PASS. Local synchronization, all 30 release controls, committed chart version advancement and diff checks also pass. This closes current source/CI preparation only.

The draft, merge and OCI hold remain. The qualified native producer tuple is now handed to PHP/Python/Rust; their actual accepted published-package full-precision cold-process receipts still gate native aliases and final Release. Chart normal merge/tested-tree equality, protected publication, exact package/source correspondence, anonymous OCI/install readback and Docs selection follow the final native disposition. No chart or downstream tuple is selected from this source pass. Current selection remains Server 3.10.0 / Chart 2.0.0.