May 2026 monthly summary for the developer team highlights key features delivered, major bugs fixed, and overall impact across four Terraform providers and the chelm testing framework. The focus was on delivering business value through reliability, scalability, and performance improvements, as well as tightening security and developer productivity in CI/CD workflows.

April 2026 focused on stability, security, and observability across Chainguard's Terraform providers and related tooling. Key outcomes include disk-backed registry storage to eliminate in-memory flakiness and enable handling larger datasets; updated dependencies across providers (apko 1.2.6, chainguard.sdk 0.1.54) to improve security and functionality; release process hardening with an audit policy and enabled egress auditing for better monitoring and compliance; a 7-day Dependabot cooldown to reduce update churn; and CI/CD quality improvements including linting fixes and enum mapping fixes to ensure valid inputs. These efforts collectively improve reliability, security posture, and release velocity for production workloads.

January 2026 monthly summary for chainguard-dev/terraform-provider-apko: Implemented stability and dependency management improvements focused on deterministic builds and SBOM compliance. Key actions include pinning wolfi-baselayout to r24 to stabilize test digests, upgrading apko to 1.0.4 to address deprecations, and introducing a new SPDX generator to replace deprecated SBOM handling. These changes reduce test flakiness, ensure reproducible builds, and improve compliance, enabling faster, more reliable releases.

December 2025 monthly summary for chainguard-dev/terraform-provider-apko focused on stability, integration, and maintainability improvements. Key changes center on APKO integration enhancements and test stability across the provider. Upgraded APKO to 0.30.31 to improve provider functionality and reliability, and performed a staged schema simplification by removing the certificates field to address optional-type handling during redesign. Additionally, stabilized the test Suite by pinning the latest libdrm package to resolve build/test instability.

Month: 2025-11 Concise monthly summary focusing on key accomplishments and business impact for two Terraform providers: chainguard-dev/terraform-provider-chainguard and chainguard-dev/terraform-provider-apko. Key outcomes: integrated modernize linter to improve code quality and type safety; applied type-safety and modern Go patterns to logging and map handling; ensured traceable, commit-backed changes ready for CI validation and future improvements.

September 2025: Delivered two changes with direct business value across Chainguard repos that boost release velocity and attestation integrity. Implemented Active Tag Publishing in the chainguard-images/images release workflow with a new make target for enabling active tag updates and an override file added to gitignore to support dynamic tag publishing during releases. Fixed a critical bug in chainguard-dev/terraform-provider-cosign by changing the default conflict resolution to SKIPSAME for both attest and sign, ensuring attestations are replaced rather than appended and preventing incorrect attestations. Commit references map to key changes: 60e9477791fdd9634f1ecc7157b4271e10d6ec63 (Enable active_tags publishing (#3015)) and dd0d7a8fe6a4b5444e11705233410d7f7ffce31d (Change default conflict mode to "SKIPSAME" (#393)).

In August 2025, delivered significant data-source enhancements for the Chainguard Terraform provider, improving image repository queries, debugging, and multi-repo access. Implemented active_tags plumbing in image_repo data source, added debugging InputParams, introduced aliases for chainguard_image_repo, and launched chainguard_image_repos data source with optional filters. Updated docs and usage examples, improving developer experience and reducing toil for operators.

2025-07 monthly summary: Reinstated apkofs.DirFS across melange build, tests, license checks, and linting to restore stability after reverting a previous change to os.DirFS. This stabilized CI, fixed build/test failures, and preserved tooling compatibility, enabling reliable shipping.

June 2025: Reliability-focused improvements for Cloud Events ingestion in chainguard-dev/terraform-infra-common. Implemented a robust retry across the full upload lifecycle and adjusted deletion semantics to occur only after a successful close, reducing risk of state loss and orphaned files.