chore: release main

[snowdream]

📦 Release Preparation

This PR was autogenerated by release-please.

⚠️ Critical Actions Before Merging

1. Verify Quality: Ensure all CI checks (Lint, Test, Security) are passing.
2. Review Changelog: Confirm that the generated notes below accurately reflect the changes.
3. Sanity Check: If this is a major version, verify that breaking changes are correctly documented.

Merging this PR will create a GitHub Release and a Git Tag. 🚀

0.0.4

0.0.4 (2026-07-22)

🚀 Features

• add distribution name lookup as fallback and update default service manager to systemd (551b8e6)
• add package source support, update download URL structure, and implement automated hello app installation tasks (bc43df5)
• apps: add template and hello seed packages (0b61c21)
• app: synchronize app_loader fallback matrix with os_loader for ultimate precision (97d81d3)
• ci: add AlmaLinux to E2E matrix (f6b04ee)
• ci: add AWS, Alibaba, Tencent and openEuler to E2E matrix (2e0d285)
• ci: add Azure Linux and Anolis OS to E2E matrix (0057c97)
• ci: add oraclelinux:9 to E2E testing matrix (ab8bc57)
• ci: add RHEL UBI9 and CentOS Stream 9 to E2E matrix (78348e8)
• ci: add SUSE Linux Enterprise Server (SLES) to E2E matrix (e855e2e)
• client: implement registry update and download commands (35dc492)
• core: add minor version precision to os_loader fallback matrix (3dad1c3)
• core: comprehensively enhance os_loader fallback matrix for ultimate flexibility (1699daf)
• define registry data structures and document multi-registry security architecture (af4f2b8)
• handle Alibaba Cloud Linux VPC mirror fallback automatically in repositories role (dde64be)
• implement ansible execution hook and complete tasks (8985ca0)
• implement automatic offline fallback for ansible collection installation via source build (5eb2ef7)
• install: implement local and remote package installation (0f4e87e)
• lifecycle: implement list, uninstall, and upgrade commands (789e619)
• registry: implement pure Go registry builder with SQLite and zstd compression (030b2b0)
• replace example stack configuration with new test-hello playbook (6e2d04f)
• skip OpenRC service management tasks if init system is not running (2a6f44d)
• source: auto-sync database on source add and update (ea245d1)
• source: implement multi-source registry CRUD and query logic (7a32bb7)
• source: intelligent local path support (file:// scheme translation) (57436ef)
• source: update default sources to core and community (73fbaa2)
• speckit: implementation progress (bee80c4)
• speckit: implementation progress (32a3ff8)
• speckit: implementation progress (00d25d4)
• speckit: implementation progress (5e4cc34)
• speckit: implementation progress (81ecdad)
• speckit: implementation progress (7a42d47)
• speckit: implementation progress (cc63cda)
• speckit: implementation progress (7f73d04)
• speckit: implementation progress (656a1c2)
• speckit: implementation progress (17ffcff)
• speckit: implementation progress (6b371e4)
• update: add --name flag to update specific configured source (9f22b45)

🐛 Bug Fixes

• ansible/native: fix tdnf idempotency check on azure linux (bd76f85)
• ansible: add loop_control/loop_var to all loops to prevent item collision warnings (09ea8d6)
• ansible: allow sudo usage for non-root users inside containers (deaacc1)
• ansible: handle azurelinux package manager detection gracefully without ugly core defaults (127b0bf)
• ansible: remove duplicate YAML document separator in foundation defaults (2978cfc)
• ansible: remove forced first-run cache update across all package managers (43df596)
• ansible: resolve become_enabled boolean casting in CI environments (03367cf)
• ansible: resolve openssh keygen race condition and idempotency failure by utilizing ssh-keygen -A (af2f63e)
• apps/openssh: fix variable names and formats (32dad5a)
• apps: remove orphaned list items from foundation vars and add yaml doc headers (c1f5ab4)
• bootstrap: remove aggressive pip timeout to prevent CI OOM/SIGKILL (f586581)
• bootstrap: skip sudo elevation on macOS to support homebrew (1a3857a)
• CI: resolve foundation package and OS dependencies across multiple distributions (d927d51)
• clear default darwin ssh service name and update service lookup logic (f8e5ec9)
• core: migrate from os_distribution to os_distribution_id to prevent path spacing issues (27af384)
• core: resolve native loader pathing, container service startups and package dependencies (bd6fa7e)
• downgrade missing systemctl failure to a warning and gate service checks by systemctl availability (5601464)
• foundation: refactor openssh handler, fix template paths and os_loader contexts (3bc8903)
• gentoo: initialize portage tree if missing before emerge (b32bd32)
• lifecycle: refactor ansible hook to comply with package format spec (afb3020)
• loader: resolve nested app variable discovery (3456ce8)
• loader: resolve role context issue by using relative role name for built-in apps (fd70911)
• loader: revert os_loader path resolution back to [0] (ff075ee)
• native: add missing log_loader.yml to native role (3daab33)
• native: check if systemd is pid1 before running daemon-reload and state changes (b3ea6df)
• playbook: remove premature play-level become in foundation.yml (1bbf473)
• resolve ensurepip issue on ubuntu and apk lock issue on alpine (41dbc1a)
• service_loader: remove invalid failed_when from include_tasks in default.yml (67b3ba9)
• source: relax name validation to allow dots (6c0121f)
• source: validate source names and improve Windows local path handling (816d02e)
• update: change fallback source name from 'default' to 'core' (ef2171e)

🛠 Refactoring

• ansible: extract fallback package manager logic into a table-driven map for scalability (90010d9)
• apps/foundation: convert to metapackage and cleanup obsolete files (bc68f71)
• apps/mirror: extract mirror configuration into standalone role (b63f6fc)
• apps/openssh: extract openssh configuration into standalone role (800bd54)
• apps/repositories: extract repositories configuration into standalone role (4197f55)
• apps/sudo: extract sudo configuration into standalone role (207cd88)
• apps/user: extract user configuration into standalone role (fbbade7)
• consolidate RedHat package installation by removing EL8 specific command logic and unifying DNF module usage (ee6bf3f)
• foundation: leverage os_loader for OS-specific package sets, removing curl_conflict_loader (32a5f99)
• loader: replace include_tasks with include_role (5601e00)
• loader: simplify dynamic role inclusion by directly using absolute source path (d0f27f5)
• normalize become_enabled variable usage with default boolean cast across all tasks (dc46e3b)
• reformat ansible loader configurations for improved readability (d1c08fd)
• reformat loop item syntax in app_loader.yml for improved readability (5d8348d)
• remove hello application installation tasks (341a0ea)
• rename update_cache to sync in Gentoo portage package loader (e11bc46)
• reorder foundation base package installation after repository configuration (cb4c39b)
• simplify app path resolution and standardize hierarchy loading in app_loader.yml (6ee2992)
• simplify os_family and os_pkg_mgr definitions by removing complex conditional overrides (06b4c38)
• simplify upgrade command to use internal InstallPackage logic (515742e)
• standardize become_enabled logic and remove redundant debugging playbooks (7cad301)
• standardize default fallback values for OS and architecture variables in task loaders (c04bc2e)
• update core loader variables to use explicit type and path definitions across native task loaders (3a9ab5e)
• update OS context defaults from default to skip to improve lookup flexibility (ca2a0bf)

📖 Documentation

• add specification for ansible execution hook (1d59ac7)
• add tasks for ansible execution hook (d6e1325)
• clarify package versioning requirements and backend parsing logic in specification (1916739)
• generate implementation plan for ansible execution hook (8bd42a4)
• lifecycle: format tasks.md per speckit checklist rules (459d648)
• plan: add implementation plan for local package installation (5e22547)
• restructure documentation for i18n and remove proprietary content (416bd46)
• spec: add specification for local package installation (df27f32)
• speckit: add implementation plan (33fb317)
• speckit: add implementation plan (6d807c9)
• speckit: add implementation plan (b42b016)
• speckit: add implementation plan (df26088)
• speckit: add implementation plan (9e1d42e)
• speckit: add implementation plan (9520acf)
• speckit: add specification (aa348fa)
• speckit: add specification (473a52b)
• speckit: add specification (e2d982d)
• speckit: add specification (14c6361)
• speckit: add specification (2b8d8ef)
• speckit: add specification (73db464)
• speckit: add specification (67249f7)
• speckit: add tasks (352b2e9)
• speckit: add tasks (d3942e9)
• speckit: add tasks (333c7ac)
• speckit: add tasks (84f348a)
• speckit: clarify specification (bb0da12)
• tasks: generate tasks for local package installation (5bd068a)

♻️ Miscellaneous Chores

• bump release version to 0.0.4 in .release-please-config.json (f96b4bb)
• changelog: deduplicate commit entries across versions (e65ea1e)
• deps: sync dependabot config and unirtm toolchain (2d299ab)
• release: bump release-please config to 0.0.5 (3f766b7)
• revert release-as version to 0.0.4 in release-please-config.json (173e0fd)
• skip .ansible directory in trivy scans (fe8aa11)
• speckit: auto-commit after fix(ansible): pass native_app_name from foundation to native (a9ffee5)
• speckit: manual auto-commit trigger (7352668)
• speckit: manual auto-commit trigger (fdd54e8)
• suppress root user hadolint warnings and add missing YAML front matter to defaults (c620b21)
• update Alibaba Cloud Linux 3 image and add Alibaba Cloud Linux 4 support in CI/CD workflows (64bb458)
• update ansible dependencies in requirements.txt (da527a9)
• update openssh service variable and initialize core role defaults (9f36863)
• update openssh_sshd_service to ssh for darwin compatibility (e5dc824)

---

This PR was generated with Release Please. See documentation.