chore(release): 0.10.26 / chart 0.3.36 — retract stale-source 0.10.25

The published 0.10.25 Docker images
(boilinginsights/boilstream:aarch64-linux-0.10.25 +
boilinginsights/boilstream:x64-linux-0.10.25) were built from a
stale source tarball — `s3://boilingdata-demo/source-packages/` was
a day behind `main` when the EC2 build kicked, so those binaries
ship pre-fix code under the post-fix tag. They DO NOT contain the
bare-:5432-removal or the SPA per-pod round-robin advertised in the
0.10.25 CHANGELOG entry.

Tag is immutable (we don't overwrite published artefacts), so the
intended 0.10.25 changes are re-released as 0.10.26 with no source
delta beyond version bumps:

  Cargo.toml            0.10.25 → 0.10.26
  charts/Chart.yaml     0.3.35  → 0.3.36 / app 0.10.26
  values-hetzner-example.yaml   image.tag → aarch64-linux-0.10.26
  CHANGELOG.md          [0.10.26] entry; [0.10.25] flagged RETRACTED

Follow-up: `make sync-s3` becomes a hard prereq for `make ec2-release`
upstream so a future build can't compile against a stale tarball.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dforsber

CHANGELOG.md

@@ -5,7 +5,35 @@ All notable changes to BoilStream will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [0.10.25] - 2026-04-28
+## [0.10.26] - 2026-04-28
+
+Re-release of 0.10.25. The `0.10.25` images on Docker Hub were built
+from a stale source tarball (the EC2 build host pulls source from
+`s3://boilingdata-demo/source-packages/` and that prefix was a day
+behind `main`), so the binaries shipped under that tag are
+*pre-fix code* — broker entries don't carry `public_tcp_port`, the
+SPA still vends `port: 5432`, and the bare-`:5432`-removal in this
+release set is not effective on a cluster running 0.10.25. **Use
+0.10.26 instead.** Same scope as the original 0.10.25 entry below;
+no new product changes.
+
+Operational note added to the release pipeline: `make sync-s3` is
+now a hard prereq for `make ec2-release` so subsequent EC2 builds
+can't compile against a stale tarball.
+
+### Notes
+
+- Chart version **0.3.36** tracks appVersion `0.10.26`.
+
+## [0.10.25] - 2026-04-28 — RETRACTED
+
+> **Do not use the published `0.10.25` Docker images** —
+> `boilinginsights/boilstream:aarch64-linux-0.10.25` and
+> `boilinginsights/boilstream:x64-linux-0.10.25` were built from a
+> stale source tarball (S3 source-packages prefix was 1 day behind
+> `main`) and ship pre-fix code under the new version label. The
+> originally-intended changes are released as **0.10.26** instead;
+> upgrade to that tag.
 
 ### Breaking — public PGWire endpoint
 

README.md

@@ -44,7 +44,7 @@ See [GitHub releases](https://github.com/boilingdata/boilstream/releases) for th
 #                    Apple Silicon under Docker.
 #   linux-x64        Linux x86_64
 #   windows-x64      Windows
-# Replace {VERSION} with the latest release (see GitHub releases above, e.g. 0.10.25)
+# Replace {VERSION} with the latest release (see GitHub releases above, e.g. 0.10.26)
 curl -L -o boilstream https://www.boilstream.com/binaries/darwin-aarch64/boilstream-{VERSION}
 curl -L -o boilstream-admin https://www.boilstream.com/binaries/darwin-aarch64/boilstream-admin-{VERSION}
 chmod +x boilstream boilstream-admin

charts/boilstream/Chart.yaml

@@ -6,8 +6,8 @@ description: |
   support. Each pod participates in S3-based leader election and serves
   per-user catalogs; failed pods are recovered from S3 backups.
 type: application
-version: 0.3.35
-appVersion: "0.10.25"
+version: 0.3.36
+appVersion: "0.10.26"
 kubeVersion: ">=1.27.0"
 keywords:
   - streaming

charts/boilstream/values-hetzner-example.yaml

@@ -12,7 +12,7 @@
 #   helm install boilstream ./charts/boilstream \
 #     -f charts/boilstream/values-hetzner-example.yaml \
 #     --set image.repository=<your-cfcr-tenant>.europe.registry.cloudfleet.dev/boilstream \
-#     --set image.tag=aarch64-linux-0.10.25 \
+#     --set image.tag=aarch64-linux-0.10.26 \
 #     --set superadmin.existingSecret=boilstream-superadmin
 
 replicas: 2                              # 2 nodes, 1 pod each
@@ -26,7 +26,7 @@ image:
   # SHA3 / SHA512 paths. There is no separate "-generic-" variant — this
   # is the only ARM64 image we publish.
   repository: docker.io/boilinginsights/boilstream
-  tag: aarch64-linux-0.10.25
+  tag: aarch64-linux-0.10.26
   pullPolicy: IfNotPresent
   pullSecrets: []                        # Docker Hub is public; no pull secret needed