release: v1.0.1 — Marketplace container-path fixes (#281)

.github/workflows/aws-rds-iam-live-smoke.yml

@@ -53,7 +53,7 @@ on:
       image_uri:
         description: Signals container image (pinned tag)
         required: false
-        default: ghcr.io/elevarq/signals:1.0.0
+        default: ghcr.io/elevarq/signals:1.0.1
 
 permissions:
   contents: read

CHANGELOG.md

@@ -6,6 +6,8 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-07-17
+
 ### Security
 
 - Go toolchain and container builder bumped 1.26.4 -> 1.26.5 (#253): remediates GO-2026-5856

deploy/aws/LIVE-SMOKE.md

@@ -79,7 +79,7 @@ fill the inputs:
 | `security_group_ids` | `["sg-0123…"]` | **JSON array** string |
 | `db_user` | `signals` | role granted `rds_iam` + `pg_monitor` |
 | `name_prefix` | `signals-livesmoke` | prefixes the throwaway resources |
-| `image_uri` | `ghcr.io/elevarq/signals:1.0.0` | pinned tag |
+| `image_uri` | `ghcr.io/elevarq/signals:1.0.1` | pinned tag |
 
 A green run means: the collector minted an RDS IAM token from its instance
 role, connected `verify-full` with **no password on disk**, and produced

deploy/aws/cloudformation/signals-rds-iam.yaml

@@ -38,7 +38,7 @@ Parameters:
     Default: t3.small
   ImageUri:
     Type: String
-    Default: ghcr.io/elevarq/signals:1.0.0
+    Default: ghcr.io/elevarq/signals:1.0.1
     Description: Elevarq Signals container image (pinned tag).
   Env:
     Type: String

deploy/aws/imagebuilder/README.md

@@ -34,7 +34,7 @@ same posture as the container and Helm deliveries.
 
 | Parameter | Default | Notes |
 |-----------|---------|-------|
-| `SignalsImage` | `ghcr.io/elevarq/signals:1.0.0` | Pinned version (no `latest`). Bump per release. |
+| `SignalsImage` | `ghcr.io/elevarq/signals:1.0.1` | Pinned version (no `latest`). Bump per release. |
 
 ### Baking locally / in a pipeline
 
@@ -44,7 +44,7 @@ Linux 2023 base image. Register it and reference it from a recipe:
 ```bash
 aws imagebuilder create-component \
   --name signals-collector \
-  --semantic-version 1.0.0 \
+  --semantic-version 1.0.1 \
   --platform Linux \
   --data file://signals-collector-component.yaml
 # -> ComponentArn, referenced by an image recipe + pipeline that produces the AMI.

deploy/aws/imagebuilder/signals-collector-component.yaml

@@ -18,7 +18,7 @@ schemaVersion: 1.0
 parameters:
   - SignalsImage:
       type: string
-      default: "ghcr.io/elevarq/signals:1.0.0"
+      default: "ghcr.io/elevarq/signals:1.0.1"
       description: >-
         Pinned Signals image reference to pre-pull into the AMI. MUST be a
         specific version tag (no 'latest') so the AMI is reproducible (R-AMI-02).

deploy/aws/terraform/variables.tf

@@ -64,7 +64,7 @@ variable "instance_type" {
 variable "image_uri" {
   type        = string
   description = "Elevarq Signals container image (pinned tag)."
-  default     = "ghcr.io/elevarq/signals:1.0.0"
+  default     = "ghcr.io/elevarq/signals:1.0.1"
 }
 
 variable "env" {

deploy/azure/bicep/main.bicep

@@ -46,7 +46,7 @@ param adminUsername string = 'azureuser'
 param adminSshPublicKey string
 
 @description('Elevarq Signals container image (pinned tag).')
-param imageUri string = 'ghcr.io/elevarq/signals:1.0.0'
+param imageUri string = 'ghcr.io/elevarq/signals:1.0.1'
 
 @description('URL of the CA bundle for sslmode=verify-full. Default is the DigiCert Global Root G2 that Azure Database for PostgreSQL Flexible Server chains to.')
 param dbCaCertUrl string = 'https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem'

deploy/azure/terraform/variables.tf

@@ -66,7 +66,7 @@ variable "admin_ssh_public_key" {
 variable "image_uri" {
   type        = string
   description = "Elevarq Signals container image (pinned tag)."
-  default     = "ghcr.io/elevarq/signals:1.0.0"
+  default     = "ghcr.io/elevarq/signals:1.0.1"
 }
 
 variable "db_ca_cert_url" {

deploy/gcp/terraform/variables.tf

@@ -82,7 +82,7 @@ variable "image" {
 variable "image_uri" {
   type        = string
   description = "Elevarq Signals container image (pinned tag)."
-  default     = "ghcr.io/elevarq/signals:1.0.0"
+  default     = "ghcr.io/elevarq/signals:1.0.1"
 }
 
 variable "env" {

deploy/helm/signals/Chart.yaml

@@ -5,8 +5,8 @@ type: application
 # Policy: chart `version`, `appVersion`, and `image.tag` in values.yaml
 # are kept in lockstep with the released container image. Bump all three
 # together at release time; do not float chart version independently.
-version: 1.0.0
-appVersion: "1.0.0"
+version: 1.0.1
+appVersion: "1.0.1"
 keywords:
   - postgresql
   - monitoring

deploy/helm/signals/values.yaml

@@ -2,7 +2,7 @@
 
 image:
   repository: ghcr.io/elevarq/signals
-  tag: "1.0.0"
+  tag: "1.0.1"
   pullPolicy: IfNotPresent
 
 # PostgreSQL target configuration. Rendered into the mounted