IvanHunters e93db88480 fix(marketplace): preserve verify and reset the pin on repeat connect (API) ...

The connect API replaced the whole OCIRepository spec on a repeat connect, so
a spec.verify signature policy added earlier was silently dropped. It now
updates url, interval, ref and secretRef from the request while preserving an
existing spec.verify: a repeat connect never silently downgrades trust.

An explicit digest reference is pinned on the source directly; a tag-only
connect is left for the operator to pin. Replacing the whole ref on a repeat
connect drops the operator's prior digest pin so the newly requested tag re-
resolves, and the pinned-digest annotation is cleared alongside the
materialized-revision annotation so the operator re-pins and re-materializes.

Assisted-by: LLM
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>

2026-10-22 22:06:16 +03:00

..

apis

refactor(api): keep each app's kind without the apimachinery fork

2026-09-26 16:08:24 +03:00

apiserver

refactor(api): keep each app's kind without the apimachinery fork

2026-09-26 16:08:24 +03:00

cmd/server

docs(api): clarify kind-wide Helm timeout overrides

2026-10-10 22:36:54 +03:00

config

docs(api): clarify kind-wide Helm timeout overrides

2026-10-10 22:36:54 +03:00

generated

chore(deps): move the Kubernetes libraries to v0.37.1

2026-09-26 16:08:25 +03:00

lineage

perf(lineage): cache owner GETs and short-circuit re-admission

2026-09-29 17:32:13 +02:00

ovnstatus

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

registry

fix(marketplace): preserve verify and reset the pin on repeat connect (API)

2026-10-22 22:06:16 +03:00

version

test(version): clear ambient COZYSTACK_VERSION in the unset case

2026-07-06 10:03:56 +05:00