jakman85 merged pull request Home-Network/home-network-k3s-impl#85 2026-10-30 07:10:02 +00:00
fix(renovate): document and probe the five token scopes Renovate needs; lint daemon-bound actions
jakman85 pushed to main at Home-Network/home-network-k3s-impl 2026-10-30 06:36:12 +00:00
d550a501e2 Merge pull request 'fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get' (#84) from fix/renovate-first-run into main
365e43cdea fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get
Compare 2 commits »
jakman85 merged pull request Home-Network/home-network-k3s-impl#84 2026-10-30 06:36:11 +00:00
fix(renovate): run Renovate as the job container; the action needs a Docker daemon jobs do not get
jakman85 pushed to main at Home-Network/home-network-k3s-impl 2026-10-30 05:59:12 +00:00
dfc432c6ea Merge pull request 'fix(keycloak-passkey): passkey reconciler with review fixes — bind only on git's say-so (default false), protect real sub-flows, body-id screening, failure alert' (#82) from feat/keycloak-passkey-reconcile into main
262c6e4a97 Merge branch 'main' into feat/keycloak-passkey-reconcile
6bb8af1d70 docs(decisions): handoff for the passkey reconciler review fixes
7c4eb439b2 feat(monitoring): alert when the keycloak passkey reconciler's Job fails
17eed6e8ae fix(keycloak-passkey): bind only on git's say-so; protect real sub-flows; screen the requirement PUT by body id
Compare 6 commits »
jakman85 merged pull request Home-Network/home-network-k3s-impl#82 2026-10-30 05:59:11 +00:00
fix(keycloak-passkey): passkey reconciler with review fixes — bind only on git's say-so (default false), protect real sub-flows, body-id screening, failure alert
262c6e4a97 Merge branch 'main' into feat/keycloak-passkey-reconcile
523cd9118f Merge pull request 'fix(buildkit): allow buildkitd egress to Gitea so the Gateway stops 403ing the registry push' (#83) from fix/gitea-admit-buildkit into main
d2c4bd5194 fix(buildkit): allow buildkitd egress to Gitea's backend so the Gateway stops 403ing the push
0dd57fbaf0 Merge pull request 'feat(images): build, verify and publish the three images in CI on rootless BuildKit; Renovate carries the digests' (#81) from feat/image-pipeline into main
04eb38584a fix(conformance): workload-mTLS certificates may use a private CA, if they prove they are workload-internal
Compare 11 commits »
jakman85 pushed to main at Home-Network/home-network-k3s-impl 2026-10-30 05:50:13 +00:00
523cd9118f Merge pull request 'fix(buildkit): allow buildkitd egress to Gitea so the Gateway stops 403ing the registry push' (#83) from fix/gitea-admit-buildkit into main
d2c4bd5194 fix(buildkit): allow buildkitd egress to Gitea's backend so the Gateway stops 403ing the push
Compare 2 commits »
jakman85 merged pull request Home-Network/home-network-k3s-impl#83 2026-10-30 05:50:12 +00:00
fix(buildkit): allow buildkitd egress to Gitea so the Gateway stops 403ing the registry push
jakman85 pushed to main at Home-Network/home-network-k3s-impl 2026-10-30 05:15:18 +00:00
0dd57fbaf0 Merge pull request 'feat(images): build, verify and publish the three images in CI on rootless BuildKit; Renovate carries the digests' (#81) from feat/image-pipeline into main
04eb38584a fix(conformance): workload-mTLS certificates may use a private CA, if they prove they are workload-internal
f65c12b395 feat(images): build on rootless BuildKit over mTLS; verification moves into Containerfile verify stages
8f35234fcc fix(images): name the measured runner blocker; the job container gets no Docker daemon
e539109830 feat(images): build, verify and publish the three images in CI; Renovate carries the digests
Compare 5 commits »
jakman85 merged pull request Home-Network/home-network-k3s-impl#81 2026-10-30 05:15:16 +00:00
feat(images): build, verify and publish the three images in CI on rootless BuildKit; Renovate carries the digests
jakman85 pushed to main at Home-Network/home-network-k3s-impl 2026-10-30 04:48:43 +00:00
27da5555a4 Merge pull request 'fix(renovate): the workflow still named renovate.json, so every run since #79 died with ENOENT' (#80) from fix/renovate-config-filename into main
da1b36eb64 fix(renovate): pin renovate-version — the action's default (39) rejects renovate.json5
aacf361bb8 fix(renovate): the workflow still named renovate.json, so every run since #79 died with ENOENT
Compare 3 commits »
jakman85 merged pull request Home-Network/home-network-k3s-impl#80 2026-10-30 04:48:43 +00:00
fix(renovate): the workflow still named renovate.json, so every run since #79 died with ENOENT
jakman85 pushed to main at Home-Network/home-network-k3s-impl 2026-10-18 14:29:35 +00:00
1301af9a4c Merge pull request 'fix(renovate): the config was INVALID, so the first manual run errored out' (#79) from fix/renovate-invalid-config into main
713b0c3dba fix(renovate): the config was INVALID, so the first manual run errored out
Compare 2 commits »
jakman85 merged pull request Home-Network/home-network-k3s-impl#79 2026-10-18 14:29:35 +00:00
fix(renovate): the config was INVALID, so the first manual run errored out