6543

🚀 Woodpecker 3.19.0 is out!

More control over your CI:
• Enforce agent labels on the server
• Choose custom shell paths with the local backend
• Mask secrets in CLI exec logs

🔒 A security fix blocks matrix environment variable injection into the default clone step. Plus fixes for missing logs and pipeline crashes.

Upgrade and explore the changes:
https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.19.0

#WoodpeckerCI #release #CICD

@OpenCloud

Thanks for the shout out on #OpenSUSE Conference ( https://media.ccc.de/v/5219-ci-cd-with-a-safety-net#t=357 ) 🎉.

#OpenCloud #WoodpeckerCI #independence

PS: the starlak config service is a frequently asked extension we could not bring time up do do it on our own, it would be nice if you could add a link to our awesome page :)

🐝 Woodpecker CI 3.18.1 is here! This patch release squashes bugs: fixed workflow when.status, faster log migration, timezone data in Docker images & improved GitLab group handling. Update now! #WoodpeckerCI #release #opensource #bugfixes

Woodpecker CI v3.18.0 is live! 🎉

🔒 Enhanced k8s security
📥 Pipeline log downloads
⚙️ Configurable Kubernetes domains
✏️ Custom manual pipeline messages

Upgrade your CI/CD stack! 🚀

#WoodpeckerCI #release #DevOps #CICD #OpenSource

I self-host now: this account runs on my own server and my own domain, @mbr

The old instance is shutting down and the auto-migration only carried a fraction of you across. If you can read this, you're already in the right place.

Everyone else has to re-follow by hand. Please BOOST this to help me get back everyone :)

SPREAD THE CODE
PRAISE THE CODE

#Fediverse #SelfHosted #Mastodon #mbr #masterbootrecord

🚀 Woodpecker CI v3.17.0 is here!

✨ WebUI now displays runtime workflow errors
🔒 Auto-generated gRPC secrets for better security
🐳 Docker AppArmor profile options added
📊 Enhanced Prometheus metrics with step labels

Update today! 🎉

https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.17.0

#WoodpeckerCI #DevOps #OpenSource #Release #Kubernetes

It's been a while since an update! While the automated status updates on this account have stopped (four years ago), the site has been running in the background all this time. Work has been done by the new owners to fix some of the performance related issues, and to modernize the site. Latest updates, in addition to fixing loading times, include icons for most of the major platforms and a search box for instance names.

Check it out and join the Matrix chat room.

https://the-federation.info

#thefederation #fediverse #activitypub #diaspora #decentralization

Looks like Hugging Face scraped ~all of GitHub into an AI training dataset...

https://huggingface.co/spaces/HuggingFaceCode/in-the-stack

There is an opt-out link. You might want to use it.

🇪🇺BKA (German Federal Criminal Police) releases new stats on #ChatControl: NCMEC/US tech reports have never been so unreliable! In 2025, 52% of flags were legally irrelevant. As a result, 113,000 private photos, videos & chats were wrongfully exposed (+14%)—a new record. 🧵 1/6

Sorry for the inconvenience ... 😑

If you have a public grpc facing woodpecker server, set `WOODPECKER_GRPC_SECRET` with a random string and restart ... this was not well documented that you should do so!!!

#WoodpeckerCI #security #advisory

We will work on a patch to auto generate a random meanwhile.

🚀 Woodpecker v3.16.0 is here! Highlights: workflow concurrency limits ⚡, Unix socket support 🔌, Prometheus metrics 📊, k8s userns support 🔐 — plus security hardening & many bug fixes. Update now! #WoodpeckerCI #release #DevOps #CI

If somebody knows someone ...

who is interested in #devOps and speaks #Japanese, #Hindi, #Korean, #Arabic or #Urdu

and is willing to #translate: we just added these languages to make #WoodpeckerCI more user friendly for non-native English speakers :)

And if your language is missing, just tell us, as long as you are willing to translate ...

https://translate.woodpecker-ci.org/engage/woodpecker-ci/

Some of you noticed that @HolosDiscover is following you. It's a Fediverse search engine we built to solve a problem: when you start your own server with #Holos, your index is empty. #HolosDiscover provides a ready-to-use content catalog for everyone.
Only public posts from consenting users are indexed. Deletions and edits are reflected in real-time through ActivityPub activities.

How it works: https://discover.holos.social/how-it-works

Open-source (AGPL-3.0): https://codeberg.org/tom79/Holos-Discover

Das bessere Social Media ist unbekannt

Warum fühlen sich soziale Netzwerke heute so kaputt an — und gibt es eine echte Alternative zu Instagram, TikTok, YouTube und X? In diesem Video geht es um Algorithmen, Abhängigkeit, Creator-Druck und das Fediverse: ein offenes Netz aus Mastodon, PeerTube, Lemmy, Pixelfed und mehr. Ich zeige, warum eigene Server mehr digitale Unabhängigkeit versprechen, wo das System noch scheitert und was es wirklich kostet, Social Media wieder selbst zu besitzen.

[Werbung]
Hier geht's zu unserem Partner, Hostinger: https://www.hostg.xyz/SHJLp
10% Rabatt Code: Morpheus10

MorphReader im PlayStore: https://play.google.com/store/apps/details?id=de.themorpheus.morph_reader_app&hl=de

MorphReader im App Store: https://apps.apple.com/de/app/morphreader/id6741467699?platform=iphone

RSS-Feed: https://www.patreon.com/collection/880029?view=expanded

Bootstrap Academy: https://bootstrap.academy/
https://github.com/Bootstrap-Academy/

Instagram: https://www.instagram.com/themorpheustuts/

Quellen:
https://kdrive.infomaniak.com/app/share/1794086/d7cff06c-7daf-4929-af81-c0466e73ed9d

Meine anderen Kanäle und Projekte: the-morpheus.de/

Selbst kostenlos Informatik lernen auf meiner Website: https://bootstrap.academy/

Discord:
https://the-morpheus.de/discord.html

Unterstützt mich - Danke!:
https://www.patreon.com/user?u=5322110
https://www.paypal.me/TheMorpheus

@ppulfer @WoodpeckerCI well a "git pull/fetch" forge backend can be added, it just needs to implement: user accounting, repo state management, ... so this is less a thing for woodpecker itselfe amd more a smal side brojekt that akts as kind of proxy ...

if it's not about status being reported back, just run a local forgejo/gitea and use the mirror function i would say ...

@schenklklopfer already done, still CVEs are for tooling to check if you have voulnerable tools etc, so i deem it still to be quite important.

-> not everyone uses auto-update or follows the project on mastodon ;)

I try to get a #CVE for weeks, no response!
Neither mitre nor github is responding at all :/

Does someone know more?!?!

#security #mitre #github #report #foss #WoodpeckerCI

@mauvehed

do you have a link to those 3d files?

thx