[Kevin Cho (chokevin)]

Summary

Current main includes #433, but coordinated install defaults still select 0.4.6 and the last published GitHub release is v0.4.5. Prepare v0.4.7 with aligned chart/dependency versions, image pins, CLI and infrastructure defaults, install examples, and assertions. Add curated notes covering #433 and changes since v0.4.5; preserve the existing v0.4.6 tag and all independently versioned components.

This is release preparation, not evidence that v0.4.7 artifacts are published. After integration, the annotated tag must point to the verified preparation commit on main; publish and verify all coordinated images/charts before dispatching the release workflow from that exact tag.

Related issue

Includes merged #433. No issue is closed by the version bump.

Validation

Local validation used macOS, Go 1.27.3, Helm 4.2.0, and helm-unittest 1.1.1.

bash scripts/ci/vendor-taugrid-dependencies.sh charts/taugrid — passed
helm lint charts/tau-core-controller charts/taugrid-core charts/taugrid — passed
helm unittest charts/tau-core-controller charts/taugrid-core charts/taugrid — passed, 167 tests
helm template release charts/taugrid --namespace tau-system — passed
bash scripts/ci/tests/vendor-taugrid-dependencies_test.sh — passed
go test -C cli ./internal/cli — passed
go vet -C cli ./internal/cli — passed
go test -C core ./... — passed
make -C cli test-installer — passed
make toolchain-pins — passed
terraform -chdir=terraform/aks fmt -check variables.tf — passed
bash -n cli/scripts/kind-smoke-e2e.sh — passed
python3 scripts/check-license-headers.py — passed, 902 source files
git diff --check — passed
go test -C cli -count=1 ./... — failed locally: TestWrapShellScriptTerminatesNestedForegroundProcess returned success instead of 143
go test -C cli -count=10 -run '^TestWrapShellScriptTerminatesNestedForegroundProcess$' ./internal/raylogoffload — intermittent failure reproduced

The failing package is identical to main; current main Linux CLI CI passed. The local process-termination failure remains unresolved and is not hidden or fixed by this version-only preparation. Candidate CI, including reproducible release assets and platform checks, must pass before integration. No live-cluster validation or publication has been performed.

Compatibility and operational impact

Default installs select 0.4.7 after publication. Controller image and read-only source-workload RBAC must be upgraded together to include #433. Independent SDK, monitoring-chart, telemetry-chart, and Ray-image versions remain unchanged. Do not overwrite any existing release tag, image, chart, or release asset. Existing installations are not changed by merging this preparation.

Checklist

• The change is focused and does not include unrelated edits.
• Tests cover the changed behavior, or I explained why tests are not needed.
• Documentation and examples are updated when public behavior changes.
• Generated files are updated from their source and included in this pull request.
• New dependencies are publicly available and their license and provenance were reviewed.
• The diff contains no secrets, private endpoints, customer data, or Microsoft-internal information.
• Fork-based CI can validate the change without repository secrets, or maintainer-only validation is clearly identified.

No new dependencies were introduced. Dependency archives were regenerated for local validation and are ignored by the repository. Privacy review found no new operational identities in the diff, branch, commit subject, or evidence.

AI assistance: GitHub Copilot prepared the coordinated version bump, release notes, validation, and this description. No human review is implied.

[Kevin Cho (chokevin)]

16-second evidence: the exact chart/CLI version diff followed by images rendered from the updated chart. Registry hostnames are redacted; this demonstrates release preparation, not published artifact availability.

release-pins.mp4

[Kevin Cho (chokevin)]

Candidate CI completed successfully, including the full Linux CLI suite, Windows CLI/installer checks, Helm checks, and reproducible release assets: https://github.com/Azure/taugrid/actions/runs/40472471452 . The local macOS process-termination caveat above remains documented. Version tags are now protected against updates and deletion with no bypass actors. Publication remains gated on verified coordinated image/chart availability.