All Workflows cve-triage gate images merge-gate renovate

Management

Job queue

546 workflow runs

Actor

All actors gitea-admin jakman85 pm-agent renovate-bot

Status

All status Success Failure Canceled Skipped Waiting Running Blocked Canceling

Branch

All branches bugfix/arr-to-plex chore/adopt-spec-sync chore/cilium-split-merge2 chore/decisions-log-conflict-free chore/pm-agent-digest-99 chore/pm-agent-go-live chore/pm-agent-runner-digest chore/renovate-config-cleanup chore/rotate-cloudflared-tunnel docs/agents-work-in-their-own-workspace docs/ci-delivery-flow-for-agents docs/ci-reality-vs-phase-0 docs/close-out-ci-hardening docs/handoff-2026-09-29 docs/memattr-6-12-backport docs/node2-memory-refine docs/oauth2-sidecar-scrape-verified docs/phase-7-open-prod-node-1 docs/pihole-ha-verified docs/pm-agent-registry-pull-prereq docs/poststart-incident docs/reconcile-with-reality docs/runbooks-pr-flow docs/source-comment-audit feat/automated-upgrades feat/ci-is-the-approver feat/cilium-own-kustomization feat/cilium-roll-out-on-config-change feat/cloudflare-tunnel feat/conformance-job-template feat/conformance-run-ledger feat/conformance-runner-image feat/conformance-trigger-admission-boundary feat/conformance-trigger-kubeconfig feat/devcontainer-velero-cli feat/dns-via-cloudflare-tunnel feat/flux-deploy-notifications feat/gate-toolbox-container feat/gitea-28 feat/gitea-settings-drift-check feat/graceful-cluster-shutdown feat/hubble-flow-export-plex feat/image-pipeline feat/intel-gpu-device-plugin feat/keycloak-passkey-reconcile feat/keycloak-passkeys feat/l0-externaldns-annotation-prefix feat/ledger-section-parsing feat/node-health-render-device feat/oauth2-proxy-api-route-per-app feat/oauth2-proxy-auth-failure-visible feat/parallel-l0-checks feat/pihole-declare-state feat/pihole-explicit-lan-names feat/pihole-multi-replica feat/pin-pihole-jackett-plex feat/plex-claim-sops-secret feat/plex-claim-token-013124 feat/plex-quicksync feat/plex-remote-access-l4 feat/plex-vip-hostname-and-lan-networks feat/pm-agent-issue-to-pr feat/pm-agent-pr-mentions feat/pm-agent-registry-pull-secret feat/prod-hardening feat/prod-memattr-and-nodes feat/prod-node-2 feat/public-dns-wan-target feat/quicksync-via-device-plugin feat/r-state-03-proven feat/renovate-track-keycloak-operator feat/runner-capacity-2 feat/sd-hardware-capability feat/vpn-remote-access-wireguard feat/vuln-visibility feature/add-private-key-for-wireguard feature/cloudflare-tunnel-config feature/pm-agent-credentials fix/admin-approval-override fix/bulk-nfs-truenas fix/cilium-cgroup-hostroot fix/cloudflared-creds-permission fix/cluster-available-would-fake-a-green fix/conformance-context-is-fail-open fix/coredns-ha fix/crafty-bedrock-19132 fix/crafty-oauth2-proxy-signin fix/dind-native-sidecar fix/flux-deploy-notification-inhibited fix/gate-push-trigger-matches-feat-prefix fix/gitea-admins-could-override-the-gate fix/gitea-admit-buildkit fix/gitea-settings-comment-names-impossible-secret fix/ha-check-catastrophic-regex fix/jackett-oauth2-proxy-session fix/keycloak-operator-crds fix/keycloak-servicemonitor-owner fix/kyverno-policy-was-never-applied fix/new-peer-ignores-template-comments fix/node-keycloak-hosts-pin fix/oauth2-proxy-cookie-collision-fleet fix/oauth2-proxy-oidc-startup-race fix/oauth2-sidecar-metrics-scrape-netpol fix/peers-configmap-content-hash fix/pihole-local-ttl fix/plex-advertise-plexdirect fix/plex-quicksync-verification fix/plex-resolver-independent-advertise fix/plex-unblock-app-tier fix/pm-agent-triage-exit fix/poststart-exit-status fix/public-dns-wan-a-record fix/render-selftest-runs-in-gate fix/renovate-auth fix/renovate-config-filename fix/renovate-cron-window fix/renovate-first-run fix/renovate-hold-auth-and-self fix/renovate-invalid-config fix/renovate-run-hygiene fix/secret-name-and-require-gitea-settings fix/strict-postbuild-substitutions fix/unattended-upgrades-debian-sentinel fix/vpn-ingress-ip-forward fix/vpn-ingress-l2-lease-collision fix/vpn-runbook-ansible-command fix/vpn-server-key-in-sops fix/wg-client-mtu-docs fix/wg-home-peer-pihole-sources main migration/dns-apex-inversion plex/volume-expamsion prod/deliver-fixes renovate/ghcr.io-renovatebot-renovate-44.x renovate/gitea.home.keithjackson.dev-home-network-toolbox-main renovate/kube-prometheus-stack-93.x rescued/fix/act-runner-dind-readiness rescued/fix/node-dns-resilient-upstream sync-39-onto-main vpn/add-keith-phone

Merge pull request 'fix(renovate): never auto-merge the oauth2-proxy sidecar or Renovate's own version' (#87) from fix/renovate-hold-auth-and-self into main

gate #366:Commit a4d5206294 pushed by jakman85

main

2026-10-30 08:29:49 +00:00

3m18s

View workflow file

chore(deps): Update gitea.home.keithjackson.dev/home-network/agent-runner:main Docker digest to c4eba5b

gate #365:Commit 5f03997a32 pushed by renovate-bot

#90

2026-10-31 14:14:05 +00:00

13m29s

View workflow file

chore(deps): Pin dependencies

images #364:Commit 47eb6afa02 pushed by renovate-bot

#89

2026-10-30 08:25:36 +00:00

1m42s

View workflow file

chore(deps): Pin dependencies

gate #363:Commit 47eb6afa02 pushed by renovate-bot

#89

2026-10-31 15:33:05 +00:00

9m12s

View workflow file

Merge pull request 'feat(renovate): track the Keycloak operator (the real Keycloak version), never auto-merge it' (#88) from feat/renovate-track-keycloak-operator into main

renovate #362:Scheduled

main

2026-10-30 08:20:44 +00:00

50s

View workflow file

Merge branch 'main' into fix/renovate-hold-auth-and-self

gate #361:Commit 74ba90c0b3 pushed by jakman85

#87

2026-10-30 08:20:47 +00:00

3m48s

View workflow file

Merge pull request 'feat(renovate): track the Keycloak operator (the real Keycloak version), never auto-merge it' (#88) from feat/renovate-track-keycloak-operator into main

gate #360:Commit fb45d7441b pushed by jakman85

main

2026-10-30 08:20:45 +00:00

6m40s

View workflow file

docs(decisions): handoff for feat/renovate-track-keycloak-operator

gate #359:Commit 8ed4e30201 pushed by gitea-admin

#88

2026-10-30 08:13:30 +00:00

2m58s

View workflow file

fix(renovate): never auto-merge the oauth2-proxy sidecar or Renovate's own version

gate #358:Commit df96be98bf pushed by gitea-admin

#87

2026-10-30 08:01:10 +00:00

2m54s

View workflow file

Merge pull request 'fix(renovate): edit catalog sources, track CNPG imageName, honour update.range, guard real-run auto-merges' (#86) from fix/renovate-run-hygiene into main

renovate #357:Commit b4ff2879be pushed by jakman85

main

2026-10-30 07:47:16 +00:00

51s

View workflow file

Merge pull request 'fix(renovate): edit catalog sources, track CNPG imageName, honour update.range, guard real-run auto-merges' (#86) from fix/renovate-run-hygiene into main

gate #356:Commit b4ff2879be pushed by jakman85

main

2026-10-30 07:47:16 +00:00

3m44s

View workflow file

fix(renovate): edit catalog sources, track CNPG imageName, honour update.range, guard real-run auto-merges

gate #355:Commit d9571fc6d8 pushed by gitea-admin

#86

2026-10-30 07:41:58 +00:00

2m58s

View workflow file

Merge pull request 'fix(renovate): document and probe the five token scopes Renovate needs; lint daemon-bound actions' (#85) from fix/renovate-auth into main

renovate #354:Commit 593d0fad15 pushed by jakman85

main

2026-10-30 07:24:26 +00:00

42s

View workflow file

Merge pull request 'fix(renovate): document and probe the five token scopes Renovate needs; lint daemon-bound actions' (#85) from fix/renovate-auth into main

renovate #353:Commit 593d0fad15 pushed by jakman85

main

2026-10-30 07:13:38 +00:00

40s

View workflow file

Merge pull request 'fix(renovate): document and probe the five token scopes Renovate needs; lint daemon-bound actions' (#85) from fix/renovate-auth into main

gate #352:Commit 593d0fad15 pushed by jakman85

main

2026-10-30 07:13:38 +00:00

3m34s

View workflow file

fix(renovate): document and probe the five token scopes Renovate needs; lint daemon-bound actions

gate #351:Commit 0c6ee4921d pushed by gitea-admin

#85

2026-10-30 07:07:18 +00:00

5m53s

View workflow file

Merge pull request 'fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get' (#84) from fix/renovate-first-run into main

renovate #350:Commit d550a501e2 pushed by jakman85

main

2026-10-30 06:49:33 +00:00

6s

View workflow file

Merge pull request 'fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get' (#84) from fix/renovate-first-run into main

renovate #349:Commit d550a501e2 pushed by jakman85

main

2026-10-30 06:43:53 +00:00

6s

View workflow file

Merge pull request 'fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get' (#84) from fix/renovate-first-run into main

renovate #348:Commit d550a501e2 pushed by jakman85

main

2026-10-30 06:39:31 +00:00

27s

View workflow file

Merge pull request 'fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get' (#84) from fix/renovate-first-run into main

gate #347:Commit d550a501e2 pushed by jakman85

main

2026-10-30 06:39:31 +00:00

3m19s

View workflow file

fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get

gate #346:Commit 365e43cdea pushed by gitea-admin

#84

2026-10-30 06:36:05 +00:00

5m53s

View workflow file

feat(pm-agent): pin the first published agent-runner digest, start dry, and fix the token scopes

images #345:Commit 7f0cbc7ba2 pushed by gitea-admin

#61

2026-10-30 06:23:20 +00:00

32s

View workflow file

feat(pm-agent): pin the first published agent-runner digest, start dry, and fix the token scopes

gate #344:Commit 7f0cbc7ba2 pushed by gitea-admin

#61

2026-10-30 06:23:21 +00:00

2m56s

View workflow file

Merge pull request 'fix(keycloak-passkey): passkey reconciler with review fixes — bind only on git's say-so (default false), protect real sub-flows, body-id screening, failure alert' (#82) from feat/keycloak-passkey-reconcile into main

renovate #343:Commit dfc432c6ea pushed by jakman85

main

2026-10-30 06:14:30 +00:00

7s

View workflow file

Merge pull request 'fix(keycloak-passkey): passkey reconciler with review fixes — bind only on git's say-so (default false), protect real sub-flows, body-id screening, failure alert' (#82) from feat/keycloak-passkey-reconcile into main

gate #342:Commit dfc432c6ea pushed by jakman85

main

2026-10-30 06:02:05 +00:00

2m53s

View workflow file

Merge branch 'main' into feat/keycloak-passkey-reconcile

gate #341:Commit 262c6e4a97 pushed by jakman85

#82

2026-10-30 05:59:02 +00:00

2m58s

View workflow file

Merge pull request 'fix(buildkit): allow buildkitd egress to Gitea so the Gateway stops 403ing the registry push' (#83) from fix/gitea-admit-buildkit into main

images #340:Commit 523cd9118f pushed by jakman85

main

2026-10-30 05:54:44 +00:00

1m29s

View workflow file

Merge pull request 'fix(buildkit): allow buildkitd egress to Gitea so the Gateway stops 403ing the registry push' (#83) from fix/gitea-admit-buildkit into main

gate #339:Commit 523cd9118f pushed by jakman85

main

2026-10-30 05:52:13 +00:00

1m58s

View workflow file

fix(buildkit): allow buildkitd egress to Gitea's backend so the Gateway stops 403ing the push

gate #338:Commit d2c4bd5194 pushed by gitea-admin

#83

2026-10-30 05:43:23 +00:00

1m59s

View workflow file

Merge pull request 'feat(images): build, verify and publish the three images in CI on rootless BuildKit; Renovate carries the digests' (#81) from feat/image-pipeline into main

images #337:Commit 0dd57fbaf0 pushed by jakman85

main

2026-10-30 05:30:38 +00:00

1m32s

View workflow file