RepoWrangler v1.0.10

Released 2026-07-17. This is the current supported RepoWrangler patch and the first release that can be consumed without a source checkout by Ranch Hand or user-owned artifact automation.

Deployment artifacts

The GitHub Release publishes:

• a digest-pinned multi-architecture GHCR server image;
• a local/remote Docker Compose bundle;
• a compiled Azure Container Apps ARM bundle;
• a built Cloudflare Worker, static-assets, and D1-migrations bundle;
• a four-target release-manifest.json with exact sizes and SHA-256 values;
• SHA256SUMS, an SPDX 2.3 SBOM, and Sigstore/SLSA provenance.

All downloadable checksums, manifest artifact identities, and GitHub attestations were independently verified after publication.

Primary Windows deployment path

The release does not contain a Windows installer. The independently released Ranch Hand Public Preview is the primary recommended Windows path for deploying these artifacts without cloning source. Its current v0.1.0-rc.20 is the current stable public Preview download, but it is unsigned, not production-supported, and not GA. The Ranch Hand guide records every remaining GA gate. Manual artifact, clone/fork, and user-owned CI/CD deployment remain supported alternatives.

Upgrade boundary

Publishing v1.0.10 did not automatically upgrade the public demo or the HCS production instance; both remained on their separately verified v1.0.8 downstream deployment locks at publication time. Upgrade your own environment only through the upgrade and rollback runbook.

v1.0.9 withdrawal

The v1.0.9 artifact workflow stopped after publishing its image but before creating a GitHub Release, manifest, or deployment bundles. Its immutable tag was preserved as withdrawn. Do not deploy v1.0.9; use v1.0.10.