[saurabhmaheshwari-obin]

Version bump for v0.19.6. version-tag.yml cuts the tag from the commit this merges into main, once the codefly core suite is green there.

What ships since v0.19.5

• fix(architecture): a configuration reference against an external declaration closes no cycle #811 fix(architecture): a configuration reference against an external declaration closes no cycle
• feat(solutionhost, workloadidentity)!: one signed module manifest replaces presence, authority and endpoint delivery; workload identity attestations #812 feat(solutionhost, workloadidentity)!: one signed module manifest replaces presence, authority and endpoint delivery; workload identity attestations (marked breaking)
• fix(agents): a Buildx acknowledgement is owed only by an in-agent image build #831 fix(agents): a Buildx acknowledgement is owed only by an in-agent image build
• feat(builder): a recipe declares the locked git sources it fetches (contract v6) #832 feat: an agent declares a locked dependency that comes from a git repository, and the build's downloads fetch it

Consumers waiting on it

• codefly-dev/cli #1106 (git-source mirrors) pins core main today and moves to this tag.
• codefly-dev/service-python-fastapi Release the promotable Kubernetes manifest contract #103 (declares uv git sources) does the same.

Testing

make check-version-tag: the file declares 0.19.6 and the latest published tag is v0.19.5. go test ./version/ passes. codefly core is green on main at 51aa81a, the commit this bumps.

Not verified

The full suite on the merge commit; that run is the tag's gate.

This was made by hand, not with codefly publish, because publish pushes its release branch to this repository and the tag from the operator's machine. Here the branch comes from a fork and version-tag.yml cuts the tag.

🤖 Generated with Claude Code