v2026.6.19

What's Changed

• feat(actions): add skip-refresh input to provision-parent-stack by @universe-ops in #355

Full Changelog: 2026.6.18...2026.6.19

v2026.6.18

What's Changed

• fix(aws): skip STS pre-validation for ambient (OIDC) providers; don't bake creds by @Cre-eD in #354

Full Changelog: 2026.6.17...2026.6.18

v2026.6.17

What's Changed

• feat(aws): use ambient AWS credentials when static keys are empty by @Cre-eD in #349

Full Changelog: 2026.6.16...2026.6.17

v2026.6.16

What's Changed

• feat(secrets): keyless-secrets RFC + Phase-1 store version guard by @Cre-eD in #346

Full Changelog: 2026.6.15...2026.6.16

v2026.6.15

What's Changed

• fix(git): open absolute-path files via osfs root "/" (fixes "public key is not configured") by @universe-ops in #348

Full Changelog: 2026.6.14...2026.6.15

v2026.6.14

What's Changed

• fix(secrets): seal ed25519 recipients with X25519 ECDH by @Cre-eD in #345

Full Changelog: 2026.6.13...2026.6.14

v2026.6.13

What's Changed

• fix: sc upgrade crashes with syntax error for existing installs by @Cre-eD in #342

Full Changelog: 2026.6.12...2026.6.13

v2026.6.12

What's Changed

• feat(k8s): per-container VPA policies (exclude sidecars from the app's minAllowed floor) by @Cre-eD in #340

Full Changelog: 2026.6.11...2026.6.12

v2026.6.11

What's Changed

• docs: fix broken mermaid diagrams (restore startOnLoad) by @smecsia in #338

Full Changelog: 2026.6.10...2026.6.11

v2026.6.10

What's Changed

• fix(k8s): custom-stack VPA targets a non-existent (double-suffixed) deployment by @Cre-eD in #330

Full Changelog: 2026.6.9...2026.6.10