chore(release): Release v0.1.4

Signed-off-by: Release-plz <release-plz@noreply.huizinga.dev>

.gitea/workflows/audit.yaml

@@ -7,6 +7,7 @@ on:
       - "**/Cargo.lock"
   schedule:
     - cron: "0 0 * * *"
+  workflow_dispatch:
 
 jobs:
   audit:
@@ -22,6 +23,6 @@ jobs:
       - name: Setup rust cache
         uses: Swatinem/rust-cache@v2
       - name: Audit check
-        uses: rustsec/audit-check@v2.0.0
+        uses: https://git.huizinga.dev/infra/rust-audit-check@v3.0.0
         with:
           token: ${{ secrets.GITEA_TOKEN }}

.gitea/workflows/committed.yaml

@@ -11,9 +11,9 @@ jobs:
     name: committed
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
-      with:
-        fetch-depth: 0
-    - uses: crate-ci/committed@master
-      with:
-        commits: "origin/${{ gitea.base_ref }}..HEAD"
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: crate-ci/committed@v1.1.11
+        with:
+          commits: "origin/${{ gitea.base_ref }}..HEAD"

.gitea/workflows/release.yaml

@@ -20,6 +20,6 @@ jobs:
           path: .
       - name: Upload package
         run: |
-          curl --user ${{ gitea.actor }}:${{ secrets.GITEA_TOKEN }} \
+          curl --user ${{ gitea.actor }}:${{ secrets.REGISTRY_TOKEN }} \
           --upload-file "$(ls | grep -E 'crete-[0-9]+\.[0-9]+\.[0-9]+-[0-9]+-.*.pkg.tar.zst')" \
           https://git.huizinga.dev/api/packages/infra/arch/core

.pre-commit-config.yaml

@@ -76,6 +76,6 @@ repos:
           glob: .gitea/workflows/*.yaml
 
   - repo: https://github.com/crate-ci/committed
-    rev: v1.1.8
+    rev: v1.1.11
     hooks:
       - id: committed

CHANGELOG.md

@@ -7,6 +7,39 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.4](https://git.huizinga.dev/infra/crete/compare/v0.1.3...v0.1.4) - 2026-10-04
+
+### <!-- 2 -->Bug Fixes
+
+- Pin committed action
+
+### <!-- 5 -->Miscellaneous Tasks
+
+- Migrate to rust audit fork
+
+## [0.1.3](https://git.huizinga.dev/infra/crete/compare/v0.1.2...v0.1.3) - 2026-04-21
+
+### <!-- 0 -->Features
+
+- Add function that applies netmask to ip
+
+### <!-- 3 -->Refactor
+
+- Use ViaDeserialize to convert ip address
+
+## [0.1.2](https://git.huizinga.dev/infra/crete/compare/v0.1.1...v0.1.2) - 2026-04-17
+
+### <!-- 0 -->Features
+
+- Make dns optional
+- Allow more than two dns entries
+
+## [0.1.1](https://git.huizinga.dev/infra/crete/compare/v0.1.0...v0.1.1) - 2026-04-13
+
+### <!-- 2 -->Bug Fixes
+
+- No default value for advertise routes
+
 ## [0.1.0](https://git.huizinga.dev/infra/crete/releases/tag/v0.1.0) - 2026-04-07
 
 ### <!-- 0 -->Features

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "crete"
-version = "0.1.0"
+version = "0.1.4"
 edition = "2024"
 default-run = "crete"
 publish = ["infra"]
@@ -10,26 +10,26 @@ license = "GPL-3.0-or-later"
 members = ["xtask"]
 
 [workspace.dependencies]
-schemars = { version = "1.2.1", features = ["semver1"] }
-serde_json = "1.0.149"
+schemars = { version = "1.2.2", features = ["semver1"] }
+serde_json = "1.0.151"
 
 [dependencies]
-clap = { version = "4.6.0", features = ["derive"] }
-clap_complete = "4.6.0"
-gix-discover = { version = "0.49.0", features = ["sha1"] }
-minijinja = { version = "2.18.0", features = ["json", "loader"] }
+clap = { version = "4.6.7", features = ["derive"] }
+clap_complete = "4.6.11"
+gix-discover = { version = "0.56.0", features = ["sha1"] }
+minijinja = { version = "2.24.0", features = ["json", "loader"] }
 optional_struct = "0.5.2"
-reqwest = { version = "0.13.2", default-features = false, features = [
+reqwest = { version = "0.13.5", default-features = false, features = [
   "blocking",
   "stream",
   "native-tls",
 ] }
 schemars = { workspace = true }
-semver = { version = "1.0.27", features = ["serde"] }
-serde = { version = "1.0.228", features = ["derive"] }
+semver = { version = "1.0.28", features = ["serde"] }
+serde = { version = "1.0.229", features = ["derive"] }
 serde_json = { workspace = true }
 serde_yaml = "0.9.34"
-thiserror = "2.0.18"
+thiserror = "2.0.21"
 walkdir = "2.5.0"
 
 [lib]

rust-toolchain.toml

@@ -1,4 +1,4 @@
 [toolchain]
-channel = "nightly-2026-03-12"
+channel = "nightly-2026-10-01"
 profile = "default"
 components = ["rust-analyzer"]

schemas/cluster.json

@@ -140,12 +140,11 @@
             "array",
             "null"
           ],
+          "default": null,
           "items": {
             "type": "string",
             "format": "ipv4"
-          },
-          "maxItems": 2,
-          "minItems": 2
+          }
         },
         "gateway": {
           "type": [

schemas/node.json

@@ -136,12 +136,11 @@
             "array",
             "null"
           ],
+          "default": null,
           "items": {
             "type": "string",
             "format": "ipv4"
-          },
-          "maxItems": 2,
-          "minItems": 2
+          }
         },
         "gateway": {
           "type": [

src/environment.rs

@@ -1,8 +1,8 @@
 use std::net::Ipv4Addr;
 use std::ops::Deref;
 use std::path::{Path, PathBuf};
-use std::str::FromStr;
 
+use minijinja::value::ViaDeserialize;
 use minijinja::{AutoEscape, Environment, path_loader};
 use walkdir::WalkDir;
 
@@ -16,6 +16,13 @@ pub struct PathEnvironment<'a> {
     path: PathBuf,
 }
 
+fn apply_netmask(
+    ip: ViaDeserialize<Ipv4Addr>,
+    netmask: ViaDeserialize<Ipv4Addr>,
+) -> Result<String, minijinja::Error> {
+    Ok((*ip & *netmask).to_string())
+}
+
 impl<'a> PathEnvironment<'a> {
     pub fn new(path: &Path) -> Self {
         let mut env = Environment::new();
@@ -27,10 +34,7 @@ impl<'a> PathEnvironment<'a> {
         env.set_auto_escape_callback(|_| AutoEscape::None);
 
         // Add filters
-        env.add_filter("to_prefix", |netmask: String| {
-            let netmask = Ipv4Addr::from_str(&netmask).map_err(|err| {
-                minijinja::Error::new(minijinja::ErrorKind::InvalidOperation, err.to_string())
-            })?;
+        env.add_filter("to_prefix", |netmask: ViaDeserialize<Ipv4Addr>| {
             let mask = netmask.to_bits();
             let prefix = mask.leading_ones();
 
@@ -44,6 +48,8 @@ impl<'a> PathEnvironment<'a> {
             }
         });
 
+        env.add_function("apply_netmask", apply_netmask);
+
         // Helper function for getting the path to kubeconfig files
         env.add_filter("kubeconfig", move |names: Vec<String>| {
             names

src/node.rs

@@ -53,7 +53,8 @@ struct Network {
     ip: Ipv4Addr,
     netmask: Ipv4Addr,
     gateway: Ipv4Addr,
-    dns: [Ipv4Addr; 2],
+    #[serde(default)]
+    dns: Option<Vec<Ipv4Addr>>,
     #[optional_rename(OptionalTailscale)]
     #[optional_wrap]
     tailscale: Tailscale,
@@ -128,6 +129,13 @@ impl Node {
         // Sadly we have to this manually
         // TODO: Find a better way of doing this
         let default = OptionalNodeDeserialize {
+            network: Some(OptionalNetwork {
+                tailscale: Some(OptionalTailscale {
+                    advertise_routes: Some(false),
+                    ..Default::default()
+                }),
+                ..Default::default()
+            }),
             patches: Some(OptionalPatches {
                 all: Some(vec![]),
                 control_plane: Some(vec![]),

xtask/Cargo.toml

@@ -4,7 +4,7 @@ version = "0.1.0"
 edition = "2024"
 
 [dependencies]
-repo_path = "1.2.4"
+repo_path = "1.4.1"
 schemars = { workspace = true }
 serde_json = { workspace = true }
 crete = { path = ".." }