PastureStack/node-agent v0.13.34

Exact tested and scanned producer bc895e9, run 40148577856. The immutable release tag has the same source tree. No deployment.

PastureStack/node-agent v0.13.33

Exact tested and scanned producer 0aadd6f, run 39984353202. The immutable release tag has the same source tree. No deployment.

PastureStack/node-agent v0.13.32

Exact tested and scanned producer e3853e2, run 39962305642. The immutable release tag has the same source tree. No deployment.

v0.13.31

Linux Node supervisor requires exactly Host API 0.38.7; installer, checksum and process-lifecycle contracts remain unchanged.

Producer: 68ae58d886621540208b98378ed517b3525244e0
Merged main: 3a785b0e26fab6c3e9ffaefa2f80012178f03625 (identical tree).

The Linux archive and Windows cross-build ZIP are the original scanned packages from successful Security run 39721775023. Verify both with SHA256SUMS. Normal validation, security and required CodeQL passed. The Windows ZIP preserves its declared checkout line endings; cross-build verification is not Windows native runtime acceptance.

Node Agent v0.13.30

Node Agent 0.13.30 updates the official compiler to checksum-pinned Go 1.27.3 for the Linux amd64 binary and Windows amd64 cross-build. It preserves the dependency graph and business behavior, and binds the existing strict Linux Host API version guard to official Host API 0.38.6 without relaxing equality or enabling fallback.

Only actual blocking official Ubuntu fixes were applied: curl 8.18.0-1ubuntu2.8, OpenSSL 3.5.5-1ubuntu3.7, and builder-only linux-libc-dev 7.0.0-38.38. Signed snapshot/TLS settings and security thresholds remain unchanged. The existing builder-only no-kernel-code policy covers the exact 295 currently unfixed header findings; all fixable High/Critical findings and all applicable High/Critical/secret findings are zero. No new waiver or runtime exception was added.

These assets are the original, unchanged packages retained by Security release gate run 39680289223 (package artifact 12383831714; security evidence 12383776725). They were not locally rebuilt or substituted with a different workflow's archives. Both binaries record Go 1.27.3, exact producer revision, and vcs.modified=false.

Actual binary/archive producer: 246df59
Producer tree: 195696a464277991ea30abdf1b12ec3046ffc2f4
Verified signed integration main: 73e3a7c (PR #14; identical tree)

The original complete CI, Linux binary reproducibility, runtime --version smoke, source/product-rootfs/runtime/builder security gates, and required plus extended CodeQL checks passed. Validate run 39680289287 remains separate evidence and is not the asset source.

Windows qualification is cross-build, package and PE/Go metadata verification only; this release does not establish new Windows native acceptance, stream delegation, or durable terminal evidence support. No Server deployment or QA acceptance is claimed.

Verify the attached SHA256SUMS before use. Component publication and Server assembly/deployment remain separate evidence boundaries.

node-agent 0.13.29

Linux Host disk usage is measured in the enumerated process mount namespace. Unreadable mounts retain other valid data; read-only Snap images do not inflate physical capacity. Available local storage is reported in MiB, preserving explicit override precedence. Focused hostinfo/ping tests and Linux/Windows cross-packaging passed. This release publishes the validated Linux package only; Windows runtime support is not newly certified. No scheduler, authorization, Host API delegation or firewall changes.

Signed producer: 514a3c1605809628693430007b30a33f4b1efbb4. Protected PR #12 merged with the identical tested tree bfeed46fa2d766820996773e5dfab749e3ad6541. CI: https://github.com/PastureStack/node-agent/actions/runs/39411416316. Required checks were not bypassed.

Archive SHA-256: 95884c07307d48ae68ecb79b4fa1778cf748d87ea839489dd7bc84c83ea85943; 4397921 bytes. The asset is the original CI output, not a rebuild. Server assembly, deployment and historical acceptance items retain separate evidence. Unchanged tracked dependency findings are not claimed to be fixed by this correctness patch.

v0.13.28

Published from existing, checksum-verified producer archives; no rebuild.

Producer commit: bb4e057c089e5384bc9836b42db206326c690387.
Producer tree: a619a0f04c5c8bb386db8fc7ba7cc27eeffc1ccb.
Integration: #11; merge 57f6c88534df4e5ac21b78b234a85c21ede0640b.
The tag deliberately identifies the original artifact producer, not the squash merge.
Source relationship: EXACT_TREE.

Successful producer checks: Analyze (actions), Analyze (go), Analyze (python).
Successful integration-head checks at bb4e057c089e5384bc9836b42db206326c690387: Analyze (actions), Analyze (go), Analyze (python).

SHA256 (original assets):

• a16ae6be5fb72fa2ba38bd1076fd3b9e0536c48e70995ffa49d17b8063e2f8d0 node-agent-0.13.28.tar.gz

Node Agent v0.13.27

Node Agent v0.13.27

This release completes Docker inspect event compatibility for storage events.

• Route volume activate and remove payloads through the same typed Docker
  decoder used by instance lifecycle events.
• Accept current Docker network address, hardware address, and empty port-set
  values when they appear below a volume's attached instance.
• Preserve the existing storage and instance API contracts while preventing a
  connected host from repeatedly rejecting queued volume reconciliation.

Node Agent v0.13.26

Node Agent v0.13.26

This release restores event handling against current Docker inspect payloads.

• Decode current typed Docker network addresses, hardware addresses, and port
  sets without rejecting the control-plane event representation.
• Preserve existing event models and API fields while accepting empty Docker
  set values.
• Cover the exact network and exposed-port payload that previously left a
  reconnected host online but unable to finish workload reconciliation.

Node Agent v0.13.25

Node Agent v0.13.25

This release corrects the Linux compatibility archive consumed by existing
PastureStack host installers.

• Keep the legacy SHA1SUMS and SHA1SUMSSUM files for older hosts.
• Add SHA256SUMS and SHA256SUMSSUM for current hosts.
• Verify both checksum chains against the extracted release archive in CI.
• Refresh the transparent build-only linux-libc-dev OpenVEX review for the
  exact Ubuntu snapshot package used by the disposable Dapper image.

Runtime hardware inventory and Docker request behavior are unchanged from
v0.13.24.