All Workflows cve-triage gate images merge-gate renovate

Management

Job queue

546 workflow runs

Actor

All actors gitea-admin jakman85 pm-agent renovate-bot

Status

All status Success Failure Canceled Skipped Waiting Running Blocked Canceling

Branch

All branches bugfix/arr-to-plex chore/adopt-spec-sync chore/cilium-split-merge2 chore/decisions-log-conflict-free chore/pm-agent-digest-99 chore/pm-agent-go-live chore/pm-agent-runner-digest chore/renovate-config-cleanup chore/rotate-cloudflared-tunnel docs/agents-work-in-their-own-workspace docs/ci-delivery-flow-for-agents docs/ci-reality-vs-phase-0 docs/close-out-ci-hardening docs/handoff-2026-09-29 docs/memattr-6-12-backport docs/node2-memory-refine docs/oauth2-sidecar-scrape-verified docs/phase-7-open-prod-node-1 docs/pihole-ha-verified docs/pm-agent-registry-pull-prereq docs/poststart-incident docs/reconcile-with-reality docs/runbooks-pr-flow docs/source-comment-audit feat/automated-upgrades feat/ci-is-the-approver feat/cilium-own-kustomization feat/cilium-roll-out-on-config-change feat/cloudflare-tunnel feat/conformance-job-template feat/conformance-run-ledger feat/conformance-runner-image feat/conformance-trigger-admission-boundary feat/conformance-trigger-kubeconfig feat/devcontainer-velero-cli feat/dns-via-cloudflare-tunnel feat/flux-deploy-notifications feat/gate-toolbox-container feat/gitea-28 feat/gitea-settings-drift-check feat/graceful-cluster-shutdown feat/hubble-flow-export-plex feat/image-pipeline feat/intel-gpu-device-plugin feat/keycloak-passkey-reconcile feat/keycloak-passkeys feat/l0-externaldns-annotation-prefix feat/ledger-section-parsing feat/node-health-render-device feat/oauth2-proxy-api-route-per-app feat/oauth2-proxy-auth-failure-visible feat/parallel-l0-checks feat/pihole-declare-state feat/pihole-explicit-lan-names feat/pihole-multi-replica feat/pin-pihole-jackett-plex feat/plex-claim-sops-secret feat/plex-claim-token-013124 feat/plex-quicksync feat/plex-remote-access-l4 feat/plex-vip-hostname-and-lan-networks feat/pm-agent-issue-to-pr feat/pm-agent-pr-mentions feat/pm-agent-registry-pull-secret feat/prod-hardening feat/prod-memattr-and-nodes feat/prod-node-2 feat/public-dns-wan-target feat/quicksync-via-device-plugin feat/r-state-03-proven feat/renovate-track-keycloak-operator feat/runner-capacity-2 feat/sd-hardware-capability feat/vpn-remote-access-wireguard feat/vuln-visibility feature/add-private-key-for-wireguard feature/cloudflare-tunnel-config feature/pm-agent-credentials fix/admin-approval-override fix/bulk-nfs-truenas fix/cilium-cgroup-hostroot fix/cloudflared-creds-permission fix/cluster-available-would-fake-a-green fix/conformance-context-is-fail-open fix/coredns-ha fix/crafty-bedrock-19132 fix/crafty-oauth2-proxy-signin fix/dind-native-sidecar fix/flux-deploy-notification-inhibited fix/gate-push-trigger-matches-feat-prefix fix/gitea-admins-could-override-the-gate fix/gitea-admit-buildkit fix/gitea-settings-comment-names-impossible-secret fix/ha-check-catastrophic-regex fix/jackett-oauth2-proxy-session fix/keycloak-operator-crds fix/keycloak-servicemonitor-owner fix/kyverno-policy-was-never-applied fix/new-peer-ignores-template-comments fix/node-keycloak-hosts-pin fix/oauth2-proxy-cookie-collision-fleet fix/oauth2-proxy-oidc-startup-race fix/oauth2-sidecar-metrics-scrape-netpol fix/peers-configmap-content-hash fix/pihole-local-ttl fix/plex-advertise-plexdirect fix/plex-quicksync-verification fix/plex-resolver-independent-advertise fix/plex-unblock-app-tier fix/pm-agent-triage-exit fix/poststart-exit-status fix/public-dns-wan-a-record fix/render-selftest-runs-in-gate fix/renovate-auth fix/renovate-config-filename fix/renovate-cron-window fix/renovate-first-run fix/renovate-hold-auth-and-self fix/renovate-invalid-config fix/renovate-run-hygiene fix/secret-name-and-require-gitea-settings fix/strict-postbuild-substitutions fix/unattended-upgrades-debian-sentinel fix/vpn-ingress-ip-forward fix/vpn-ingress-l2-lease-collision fix/vpn-runbook-ansible-command fix/vpn-server-key-in-sops fix/wg-client-mtu-docs fix/wg-home-peer-pihole-sources main migration/dns-apex-inversion plex/volume-expamsion prod/deliver-fixes renovate/ghcr.io-renovatebot-renovate-44.x renovate/gitea.home.keithjackson.dev-home-network-toolbox-main renovate/kube-prometheus-stack-93.x rescued/fix/act-runner-dind-readiness rescued/fix/node-dns-resilient-upstream sync-39-onto-main vpn/add-keith-phone

Merge pull request 'feat(vuln): automated CVE visibility for production (R-VULN-*, ADR-0027)' (#165) from feat/vuln-visibility into main

gate #546:Commit 190cd6b81a pushed by jakman85

main

2026-11-09 22:42:52 +00:00

58s

View workflow file

Whitespace linting fix

gate #545:Commit 6680f361a1 pushed by gitea-admin

#165

2026-11-09 22:41:27 +00:00

58s

View workflow file

Updated SPEC_PIN

gate #544:Commit fd462a4ede pushed by gitea-admin

#165

2026-11-09 22:33:53 +00:00

0s

View workflow file

Added required keycloak config

gate #543:Commit 1ace03569c pushed by gitea-admin

#165

2026-11-09 22:30:40 +00:00

1m0s

View workflow file

docs(vuln): handoff for automated CVE visibility

gate #542:Commit e1adc3963c pushed by gitea-admin

#165

2026-11-09 22:18:59 +00:00

1m5s

View workflow file

chore(deps): Update Helm release kube-prometheus-stack to v93

gate #541:Commit 112ed3b6b4 pushed by renovate-bot

#164

2026-11-09 08:24:18 +00:00

55s

View workflow file

chore(deps): Update ghcr.io/renovatebot/renovate Docker tag to v44.222.5

gate #540:Commit 0a27eca65d pushed by renovate-bot

#163

2026-11-09 08:23:32 +00:00

1m3s

View workflow file

Merge pull request 'chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3030-ls30' (#162) from renovate/lscr.io-linuxserver-jackett-0.x into main

gate #539:Commit 4c3a284cad pushed by renovate-bot

main

2026-11-09 08:21:13 +00:00

1m4s

View workflow file

chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3030-ls30

gate #538:Commit 4a89aacfbc pushed by renovate-bot

#162

2026-11-09 08:20:07 +00:00

46s

View workflow file

chore(deps): Update gitea.home.keithjackson.dev/home-network/toolbox:main Docker digest to 83a3501

images #537:Commit 1bdecb475a pushed by renovate-bot

#161

2026-11-09 08:19:21 +00:00

2m2s

View workflow file

chore(deps): Update gitea.home.keithjackson.dev/home-network/toolbox:main Docker digest to 83a3501

gate #536:Commit 1bdecb475a pushed by renovate-bot

#161

2026-11-09 08:17:19 +00:00

58s

View workflow file

Merge pull request 'fix(vpn): default client profiles to MTU 1280; correct the VPN runbook' (#159) from fix/wg-client-mtu-docs into main

renovate #535:Scheduled

main

2026-11-09 08:23:23 +00:00

7m52s

View workflow file

chore(spec): adopt the spec sync: registry parity and ADR cross-references

gate #534:Commit 8cd5ab2e41 pushed by gitea-admin

#160

2026-11-09 04:50:21 +00:00

1m4s

View workflow file

Merge pull request 'fix(vpn): default client profiles to MTU 1280; correct the VPN runbook' (#159) from fix/wg-client-mtu-docs into main

gate #533:Commit 50c8719b12 pushed by jakman85

main

2026-11-09 03:27:01 +00:00

58s

View workflow file

fix(vpn): default client profiles to MTU 1280; correct the VPN runbook

gate #532:Commit 8f60e6103a pushed by gitea-admin

#159

2026-11-09 03:17:11 +00:00

57s

View workflow file

Merge pull request 'fix(vpn): enrol keith-phone-home and admit the WireGuard subnet to PiHole DNS' (#158) from fix/wg-home-peer-pihole-sources into main

gate #531:Commit da0515c8c8 pushed by jakman85

main

2026-11-09 02:51:05 +00:00

55s

View workflow file

Merge pull request 'feat(dns): PiHole answers an explicit LAN name list, not a zone wildcard' (#157) from feat/pihole-explicit-lan-names into main

gate #530:Commit 3a2ec5a12c pushed by jakman85

main

2026-11-09 02:50:06 +00:00

25s

View workflow file

fix(vpn): enrol keith-phone-home and admit the WireGuard subnet to PiHole DNS

gate #529:Commit f13d336630 pushed by gitea-admin

#158

2026-11-09 02:50:04 +00:00

1m13s

View workflow file

feat(dns): PiHole answers an explicit LAN name list, not a zone wildcard

gate #528:Commit 8fe8d5df8a pushed by gitea-admin

#157

2026-11-09 02:49:39 +00:00

1m14s

View workflow file

Merge pull request 'feat(dns): public names via the Cloudflare Tunnel (Phase 2) — proxied CNAMEs, Plex/Headlamp LAN-only' (#156) from feat/dns-via-cloudflare-tunnel into main

gate #527:Commit 020e736541 pushed by jakman85

main

2026-11-09 01:27:49 +00:00

40s

View workflow file

feat(dns): publish public names as proxied CNAMEs to the Cloudflare Tunnel

gate #526:Commit 92944486d1 pushed by gitea-admin

#156

2026-11-09 01:27:06 +00:00

45s

View workflow file

Merge pull request 'chore(cloudflared): rotate tunnel credential (old secret exposed in a transcript)' (#155) from feature/cloudflare-tunnel-config into main

gate #525:Commit 2e777e13ca pushed by jakman85

main

2026-11-08 22:12:06 +00:00

41s

View workflow file

chore(cloudflared): rotate tunnel credential (old secret exposed in a transcript)

gate #524:Commit 063c8acf77 pushed by jakman85

#155

2026-11-08 22:11:24 +00:00

41s

View workflow file

Merge pull request 'fix(cloudflared): fsGroup so uid 65532 can read the 0440 credentials Secret' (#154) from fix/cloudflared-creds-permission into main

gate #523:Commit 16222606ae pushed by jakman85

main

2026-11-08 21:58:28 +00:00

41s

View workflow file

fix(cloudflared): fsGroup so uid 65532 can read the 0440 credentials Secret

gate #522:Commit d9ab57f2d1 pushed by gitea-admin

#154

2026-11-08 21:57:46 +00:00

42s

View workflow file

Merge pull request 'Added cloudflare creds and tunnel config' (#153) from feature/cloudflare-tunnel-config into main

gate #521:Commit 9724445a08 pushed by jakman85

main

2026-11-08 21:35:08 +00:00

40s

View workflow file

Added cloudflare creds and tunnel config

gate #520:Commit 32b7d5bac1 pushed by jakman85

#153

2026-11-08 21:33:38 +00:00

42s

View workflow file

Merge pull request 'feat(cloudflared): Cloudflare Tunnel connector, Phase 1 (isolated, no traffic change)' (#152) from feat/cloudflare-tunnel into main

gate #519:Commit 83e0ac194f pushed by jakman85

main

2026-11-08 18:44:26 +00:00

40s

View workflow file

fix(cloudflared): auditable Service+ServiceMonitor scrape; placeholder-only template value

gate #518:Commit 09f219fe7f pushed by gitea-admin

#152

2026-11-08 18:43:42 +00:00

42s

View workflow file

Merge pull request 'chore(deps): Update gitea.home.keithjackson.dev/home-network/conformance-runner:main Docker digest to 63e1aa7' (#151) from renovate/gitea.home.keithjackson.dev-home-network-conformance-runner-main into main

gate #517:Commit eb62c13c6b pushed by renovate-bot

main

2026-11-08 14:16:02 +00:00

41s

View workflow file