release: prepare mb3r-stack v0.3.1

Author: a-a-k

README.md

@@ -3,8 +3,8 @@
 [![Release](https://img.shields.io/github/v/release/MB3R-Lab/mb3r-stack)](https://github.com/MB3R-Lab/mb3r-stack/releases)
 [![release](https://img.shields.io/github/actions/workflow/status/MB3R-Lab/mb3r-stack/release.yml?label=release)](https://github.com/MB3R-Lab/mb3r-stack/actions/workflows/release.yml)
 [![ci](https://img.shields.io/github/actions/workflow/status/MB3R-Lab/mb3r-stack/ci.yml?branch=main&label=ci)](https://github.com/MB3R-Lab/mb3r-stack/actions/workflows/ci.yml)
-[![Status](https://img.shields.io/badge/status-candidate-orange)](https://github.com/MB3R-Lab/mb3r-stack/releases/tag/v0.3.0)
-[![Upstream pins](https://img.shields.io/badge/Bering%20%7C%20Sheaft-0.3.1%20%7C%200.2.1-blue)](https://github.com/MB3R-Lab/mb3r-stack/blob/main/compat/stack-manifest.json)
+[![Status](https://img.shields.io/badge/status-candidate-orange)](https://github.com/MB3R-Lab/mb3r-stack/releases/tag/v0.3.1)
+[![Upstream pins](https://img.shields.io/badge/Bering%20%7C%20Sheaft-0.3.2%20%7C%200.2.2-blue)](https://github.com/MB3R-Lab/mb3r-stack/blob/main/compat/stack-manifest.json)
 [![Adapter contracts](https://img.shields.io/badge/adapter_contracts-v1alpha1-blue)](https://github.com/MB3R-Lab/mb3r-stack/blob/main/compat/compatibility-matrix.json)
 
 `mb3r-stack` is the MB3R integration and distribution repository.
@@ -38,12 +38,12 @@ A stack release publishes:
 - application business logic
 - the canonical release cadence of upstream Bering or Sheaft artifacts
 
-Current bundle candidate pins published upstream artifacts explicitly: Bering `0.3.1` and Sheaft `0.2.1`, including immutable image digests and contract evidence in `compat/`.
+Current bundle candidate pins published upstream artifacts explicitly: Bering `0.3.2` and Sheaft `0.2.2`, including immutable image digests and contract evidence in `compat/`.
 
-Current packaged release assets for `v0.3.0` are:
+Current packaged release assets for `v0.3.1` are:
 
-- `dist/charts/mb3r-stack-0.3.0.tgz`
-- `dist/assets/mb3r-assets-0.3.0.tgz`
+- `dist/charts/mb3r-stack-0.3.1.tgz`
+- `dist/assets/mb3r-assets-0.3.1.tgz`
 - `dist/release-manifest.json`
 - `dist/SHA256SUMS.txt`
 - `dist/sbom.cdx.json`
@@ -105,7 +105,7 @@ python scripts/tasks.py release-dry-run
 
 ## Compatibility Notes
 
-The compatibility files in `compat/` are the source of truth for stack-level assertions. The current `0.3.0` bundle is recorded as a `candidate` integration statement backed by upstream release manifests, live generic smoke evidence, and Sheaft's published compatibility manifest, not as a broader verified operations guarantee. OpenTelemetry Demo remains one example profile and one acceptance scenario, not the design center of the core bundle.
+The compatibility files in `compat/` are the source of truth for stack-level assertions. The current `0.3.1` bundle is recorded as a `candidate` integration statement backed by upstream release manifests, repository validation, release dry-run, adapter e2e, and Sheaft's published compatibility manifest, not as a broader verified operations guarantee. OpenTelemetry Demo remains one example profile and one acceptance scenario, not the design center of the core bundle.
 
 ## License
 

charts/mb3r-stack/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: mb3r-stack
 description: Generic integration bundle that wires upstream Bering and Sheaft into OTLP-based or artifact-based Kubernetes environments.
 type: application
-version: 0.3.0
-appVersion: "0.3.0"
+version: 0.3.1
+appVersion: "0.3.1"
 keywords:
   - mb3r
   - otlp

charts/mb3r-stack/values.yaml

@@ -39,8 +39,8 @@ bering:
   image:
     registry: ""
     repository: "ghcr.io/mb3r-lab/bering"
-    tag: "v0.3.1"
-    digest: "sha256:ac960e908df7fb7defb4ce950d2e54ff8d8f65f7cd5e5f723d424cb425248bad"
+    tag: "v0.3.2"
+    digest: "sha256:98e443461bf59d92cc19b20f425602de91b22a272ecd9a79df5cc20f96c735a8"
     pullPolicy: IfNotPresent
   podLabels: {}
   podAnnotations: {}
@@ -107,8 +107,8 @@ sheaft:
   image:
     registry: ""
     repository: "ghcr.io/mb3r-lab/sheaft"
-    tag: "v0.2.1"
-    digest: "sha256:543771ca12722147578bf7a99dd07c5477c7fe15e7404cf6659a2a02f203a93b"
+    tag: "v0.2.2"
+    digest: "sha256:df6a7bbf21e4f307d1d33425f4245eeb34f5d051f46b8ad36ad536b33bf2c331"
     pullPolicy: IfNotPresent
   podLabels: {}
   podAnnotations: {}

compat/compatibility-matrix.json

@@ -1,8 +1,32 @@
 {
   "$schema": "../schemas/compatibility-matrix.schema.json",
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-03-22",
+  "generatedAt": "2026-05-01",
   "entries": [
+    {
+      "stackVersion": "0.3.1",
+      "beringVersion": "0.3.2",
+      "sheaftVersion": "0.2.2",
+      "chartVersion": "0.3.1",
+      "compatibilityState": "candidate",
+      "evidence": "Pinned to https://github.com/MB3R-Lab/Bering/releases/download/v0.3.2/release-manifest.json plus https://github.com/MB3R-Lab/Bering/releases/download/v0.3.2/contracts-manifest.json and https://github.com/MB3R-Lab/Sheaft/releases/download/v0.2.2/release-manifest.json and https://github.com/MB3R-Lab/Sheaft/releases/download/v0.2.2/compatibility-manifest.json; verified by repository validate, adapter e2e, release dry-run, and Helm template render checks on 2026-05-01.",
+      "contracts": {
+        "collectorExport": "v1alpha1",
+        "discoveryReport": "v1alpha1",
+        "gateDecision": "v1alpha1",
+        "reportPayload": "v1alpha1"
+      },
+      "dashboards": {
+        "bering": "1.0.0",
+        "sheaft": "1.0.0"
+      },
+      "notes": [
+        "Bering v0.3.2 publishes io.mb3r.bering.model and io.mb3r.bering.snapshot schema lines for both 1.0.0 and 1.1.0, and Sheaft v0.2.2 strictly accepts both lines.",
+        "Bering v0.3.2 and Sheaft v0.2.2 are patch hardening releases with no declared upstream contract break.",
+        "This remains a candidate integration statement rather than a GA support claim.",
+        "Sheaft serve/watch remains preview-grade upstream behavior and is not upgraded to a long-term stable contract by this bundle release."
+      ]
+    },
     {
       "stackVersion": "0.3.0",
       "beringVersion": "0.3.1",

compat/stack-manifest.json

@@ -3,28 +3,28 @@
   "schemaVersion": "1.0.0",
   "stack": {
     "name": "mb3r-stack",
-    "version": "0.3.0",
+    "version": "0.3.1",
     "status": "candidate",
-    "releaseDate": "2026-03-22",
+    "releaseDate": "2026-05-01",
     "notes": [
       "Generic integration and distribution layer only. No upstream Bering or Sheaft source code is vendored here.",
-      "Candidate bundle pinned to released Bering v0.3.1 and Sheaft v0.2.1 artifacts with immutable GHCR digests.",
+      "Candidate bundle pinned to released Bering v0.3.2 and Sheaft v0.2.2 artifacts with immutable GHCR digests.",
       "OpenTelemetry Demo is packaged as an example profile, not as the core contract.",
-      "Bering v0.3.1 adds the published 1.1.0 schema contract line without a declared CLI, API, or install-surface break.",
-      "Sheaft v0.2.1 strictly validates both the 1.0.0 and 1.1.0 Bering schema lines while keeping serve/watch in technical preview.",
-      "Pinned GHCR images are verified through live kind-based generic smoke with anonymous pull on 2026-03-22."
+      "Bering v0.3.2 keeps the published 1.0.0 and 1.1.0 schema contract lines while adding runtime and toolchain hardening.",
+      "Sheaft v0.2.2 strictly validates both the 1.0.0 and 1.1.0 Bering schema lines while keeping serve/watch in technical preview.",
+      "Pinned GHCR images are recorded from the upstream release manifests published on 2026-05-01."
     ]
   },
   "artifacts": {
     "chart": {
       "name": "mb3r-stack",
-      "version": "0.3.0",
+      "version": "0.3.1",
       "ociRepository": "oci://ghcr.io/mb3r-lab/charts",
-      "package": "mb3r-stack-0.3.0.tgz"
+      "package": "mb3r-stack-0.3.1.tgz"
     },
     "assetPack": {
-      "version": "0.3.0",
-      "archive": "mb3r-assets-0.3.0.tgz",
+      "version": "0.3.1",
+      "archive": "mb3r-assets-0.3.1.tgz",
       "includes": [
         "collector/",
         "dashboards/",
@@ -36,29 +36,29 @@
       "sheaft": "1.0.0"
     },
     "configPacks": {
-      "collector": "0.3.0",
-      "examples": "0.3.0"
+      "collector": "0.3.1",
+      "examples": "0.3.1"
     }
   },
   "components": {
     "bering": {
-      "version": "0.3.1",
+      "version": "0.3.2",
       "image": {
         "repository": "ghcr.io/mb3r-lab/bering",
-        "tag": "v0.3.1",
-        "digest": "sha256:ac960e908df7fb7defb4ce950d2e54ff8d8f65f7cd5e5f723d424cb425248bad"
+        "tag": "v0.3.2",
+        "digest": "sha256:98e443461bf59d92cc19b20f425602de91b22a272ecd9a79df5cc20f96c735a8"
       },
       "contracts": {
         "collectorExport": "v1alpha1",
         "discoveryReport": "v1alpha1"
       }
     },
     "sheaft": {
-      "version": "0.2.1",
+      "version": "0.2.2",
       "image": {
         "repository": "ghcr.io/mb3r-lab/sheaft",
-        "tag": "v0.2.1",
-        "digest": "sha256:543771ca12722147578bf7a99dd07c5477c7fe15e7404cf6659a2a02f203a93b"
+        "tag": "v0.2.2",
+        "digest": "sha256:df6a7bbf21e4f307d1d33425f4245eeb34f5d051f46b8ad36ad536b33bf2c331"
       },
       "contracts": {
         "gateDecision": "v1alpha1",

docs/compatibility.md

@@ -41,10 +41,10 @@ OpenTelemetry Demo can be part of the evidence set, but it is not sufficient by
 
 ## Current Bundle
 
-`mb3r-stack` `0.3.0` currently tracks:
+`mb3r-stack` `0.3.1` currently tracks:
 
-- Bering `0.3.1`
-- Sheaft `0.2.1`
+- Bering `0.3.2`
+- Sheaft `0.2.2`
 
 That bundle is marked `candidate` because the pins are backed by published upstream release metadata and strict contract alignment, while broader operational verification remains outside this repository's release contract. The current upstream pairing keeps the stack-level adapter envelopes on `v1alpha1` while aligning the Bering-to-Sheaft artifact handoff on the published `io.mb3r.bering.model` and `io.mb3r.bering.snapshot` schema lines for both `1.0.0` and `1.1.0`. That still does not change the formal maturity of the bundle or the upstream preview status of Sheaft `serve` behavior.
 

docs/getting-started.md

@@ -38,10 +38,10 @@ For first-time evaluation, use this sequence:
 
 The expected product outcome is a visible Bering -> Sheaft handoff and a Sheaft posture report. The OTel Demo profile is a showcase path, not the first proof of generic readiness.
 
-The current packaged bundle line is `v0.3.0`, which stages these release assets during `make release-dry-run`:
+The current packaged bundle line is `v0.3.1`, which stages these release assets during `make release-dry-run`:
 
-- `dist/charts/mb3r-stack-0.3.0.tgz`
-- `dist/assets/mb3r-assets-0.3.0.tgz`
+- `dist/charts/mb3r-stack-0.3.1.tgz`
+- `dist/assets/mb3r-assets-0.3.1.tgz`
 - `dist/release-manifest.json`
 
 ## Next Steps

docs/install-gitlab.md

@@ -22,7 +22,7 @@ Use component references pinned by tag, for example:
 
 ```yaml
 include:
-  - component: $CI_SERVER_FQDN/group/mb3r-stack/bering-discover@v0.3.0
+  - component: $CI_SERVER_FQDN/group/mb3r-stack/bering-discover@v0.3.1
 ```
 
 Keep the tag aligned with the `mb3r-stack` integration bundle release, not with any upstream Bering or Sheaft release number.

docs/install-jenkins.md

@@ -21,5 +21,5 @@ See `examples/jenkins/Jenkinsfile`.
 Use the library by tag:
 
 ```groovy
-@Library('mb3r-stack@v0.3.0') _
+@Library('mb3r-stack@v0.3.1') _
 ```

examples/README.md

@@ -2,7 +2,7 @@
 
 These examples are intentionally small and operator-editable.
 
-They track the current `mb3r-stack v0.3.0` bundle line and the pinned upstream pair Bering `0.3.1` plus Sheaft `0.2.1`.
+They track the current `mb3r-stack v0.3.1` bundle line and the pinned upstream pair Bering `0.3.2` plus Sheaft `0.2.2`.
 
 - `profiles/synthetic-otlp/` is the smallest generic profile and the non-OTel acceptance baseline.
 - `profiles/minimal-production-eval/` shows conservative pinning and external registry overrides.