[helix-a]

Summary

• Release Ghost 6.70.0:0 with the official ghost:6.70.0-alpine image, verified on Docker Hub for amd64 and arm64.
• Scrutiny tier: Minor. Read the upstream release notes and changelog: React editor/billing rollout, navigation suggestions, Settings/search improvements, newsletter and local image-editor fixes. These are exposed through Ghost Admin without new wrapper configuration; no new dependency requirement or wrapper data migration was identified.
• Bump start-sdk to 3.0.6, after reading the 3.0.5–3.0.6 changelog. Stabilize the lockfile with repeated installs and retain a single SDK copy.
• Add the SDK-required launchable: false to the masked password-reset result; passwords are not links.
• Replace localized release notes in place. The reference beta registry already serves the previous package release; no unpublished notes need carrying forward. No approved issues are open, and no other open PR claims this version.

Upstream notes: https://github.com/TryGhost/Ghost/releases/tag/v6.70.0

Helix-Harness: pi
Helix-Model: openai-codex/gpt-6.1-sol

Testing

• Passed: helix-build -- npx tsc --noEmit (TS_CHECK), after fixing the required action-result field; git diff --check also passed. No Docker build, s9pk pack, or runtime testing was performed in this sweep.
• Ghost 6.70.0:0 upgrade: Upgrade an existing configured install with MySQL data, posts, members, a theme and uploaded images. Confirm startup/readiness, owner login at the primary URL, retained content and settings, React editor publishing, navigation suggestions and local image editing; restart and confirm persistence. Also exercise fresh-install setup with a chosen primary URL.
• Newsletter fixes: On a configured install with working newsletter delivery and tier-specific recipients, publish/send a newsletter and confirm completion and progress reporting.
• SDK startup/restart fix: Restart Ghost during startup and confirm the previous daemon does not remain running alongside its replacement.
• Password-reset compatibility: On a running install with an owner account, reset its password, confirm the result remains masked/copyable without a launch button, and log in with it.

Merge with a merge commit — do not squash. next is long-lived: a merge commit leaves it a true ancestor of master, so it fast-forwards cleanly afterwards. A squash re-lands the same content under a new commit, so the branch is left carrying history master will never contain.

[helix-a]

Cross-review requested.

[helix-a]

All current checks passed on 6a73596: DiscoverMatrix and both x86 and arm builds. No CI fixes are needed. Cross-review remains pending.

[helix-a]

Reviewed head 6a73596 against master.

• Merges cleanly (git merge-tree --write-tree origin/master HEAD exit 0).
• ghost:6.70.0-alpine exists on Docker Hub with amd64 and arm64 images, matching the manifest's arches.
• SDK pin 3.0.6 is the npm latest. After npm install, npm ls shows one SDK copy; tsc --noEmit passes. launchable is a required field in 3.0.6's action-result type, so adding launchable: false to the masked password result is correct.
• current.ts edits the version in place. Its up is still the empty template, and the beta registry's best is 6.69.0:0, so replacing the notes in place is right and no new version file is needed.
• Release notes match the upstream v6.70.0 notes in all five locales. No other place in the repo references the Ghost version.
• make x86 packs successfully (SDK 3.0.6, 333M).

Not run: runtime install/upgrade on a VM.

Helix-Harness: claude-code
Helix-Model: claude-opus-5-5
Helix-Identity: helix-b

[helix-a]

Cross-review approved and all three CI checks passed. GitHub reports this PR mergeable. Requested @MattDHill for final review. Runtime install/upgrade testing was not performed.