01b25cac43
Merge pull request 'docs: update renamed Kimi login in README' ( #44 ) from build/33-readme-login into main
...
ci / test (push) Successful in 17s
Reviewed-on: #44
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 20:15:22 +00:00
codex-bot-andresmgsl
6bffd8adb0
docs: update renamed kimi login
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 17s
2026-08-31 19:48:00 +00:00
21b91e870e
Merge pull request 'docs: pin governance records to Forgejo ceremony 0.6.3' ( #42 ) from build/36-ceremony-pin-proof into main
...
ci / test (push) Successful in 16s
Reviewed-on: #42
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 19:46:36 +00:00
codex-bot-andresmgsl
c900f47d77
test: reject ceremony pin suffix drift
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 19:30:33 +00:00
codex-bot-andresmgsl
21fcb1fdb1
docs: qualify every ceremony source record
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 19:29:55 +00:00
codex-bot-andresmgsl
ed16f824ef
docs: record governance pin enforcement
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 15s
2026-08-31 19:27:00 +00:00
codex-bot-andresmgsl
c5e0d25c49
Merge remote-tracking branch 'origin/main' into build/36-ceremony-pin-proof
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-08-31 19:25:51 +00:00
c34a8b04d2
Merge pull request 'feat: add fast-forward repo sync' ( #41 ) from build/23-repo-sync into main
...
ci / test (push) Successful in 28s
Reviewed-on: #41
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
2026-08-31 18:42:40 +00:00
codex-bot-andresmgsl
3fac8096f7
test: require exact ceremony workflow pins
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 18s
2026-08-31 18:38:54 +00:00
codex-bot-andresmgsl
52e8d45b78
test: pin ceremony governance source
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 18s
2026-08-31 18:32:58 +00:00
codex-bot-andresmgsl
316bec5855
fix: reconcile repository sync races
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 17:14:13 +00:00
codex-bot-andresmgsl
04e6ba60e8
docs: explain repository sync boundaries
labels / labels (pull_request) Successful in 16s
ci / test (pull_request) Successful in 28s
2026-08-31 16:59:10 +00:00
codex-bot-andresmgsl
b21a1387a5
feat: sync safe tags and support dry runs
labels / labels (pull_request) Successful in 16s
ci / test (pull_request) Successful in 30s
2026-08-31 16:57:02 +00:00
523a45587f
Merge pull request 'release: prepare stoke 1.4.0' ( #40 ) from build/32-release-1-4-0 into main
...
ci / test (push) Successful in 27s
release / deb (push) Failing after 27s
Reviewed-on: #40
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 16:56:50 +00:00
codex-bot-andresmgsl
ea6c1a4fe9
feat: resolve repository default branch
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 16:54:34 +00:00
codex-bot-andresmgsl
64b3d9df94
feat: fast-forward repository branches
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 16s
2026-08-31 16:51:04 +00:00
codex-bot-andresmgsl
3f943cf921
release: prepare stoke 1.4.0
ci / test (pull_request) Successful in 21s
labels / labels (pull_request) Successful in 10s
2026-08-31 16:30:20 +00:00
fb5cb4746b
Merge pull request 'fix: preserve apt signature verification' ( #38 ) from build/1-apt-signed-install into main
...
ci / test (push) Successful in 16s
Reviewed-on: #38
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 16:05:04 +00:00
codex-bot-andresmgsl
2efc76f23e
fix: address apt install review round
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 14s
2026-08-31 15:14:12 +00:00
codex-bot-andresmgsl
9cc9576116
fix: limit apt opt-in to known sqv failure
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:57:32 +00:00
codex-bot-andresmgsl
a89eafaebc
fix: require opt-in for unverified apt sources
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:48:42 +00:00
claude-lead-andresmgsl
9f34641545
fix: stop attributing the sqv rejection to the key algorithm
...
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 17s
Refs #1 .
`scripts/install-apt.sh` explained the sqv rejection as a malformed MPI
encoding in an Ed25519 key. The registry does not serve one: at
`api/packages/heavy-duty/debian/repository.key`, `gpg --list-packets`
reports `algo 1` (RSA) with a 2048-bit `pkey[0]`. The explanation was
therefore wrong about the only part of itself that was checkable.
The comment now states the measurement and points at #1 for the cause,
rather than naming a mechanism nobody verified. This satisfies #1 's
criterion that `git grep -in 25519` return no hits outside test fixtures,
which it now does.
Behaviour is unchanged: this commit edits a comment. The automatic
fallback this file still performs contradicts ruling B and is NOT fixed
here — that work is still owed on !38 .
2026-08-31 10:39:02 +00:00
25c7267ecd
docs: move the .ceremony/ pin record to 0.6.3
...
ci / test (push) Successful in 14s
The mirror was re-vendored from ceremony 0.6.3; this file still named 0.6.1 as
the pin in both places.
2026-08-30 22:15:58 +00:00
5ec01f56b7
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:50 +00:00
f9a8ad46f4
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:49 +00:00
6cd2bb583a
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Waiting to run
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:47 +00:00
1c6d8cce73
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:46 +00:00
cca75fef3e
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:45 +00:00
125e44afe9
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Waiting to run
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:44 +00:00
92ba146b44
fix: bump ceremony pin to 0.6.3
...
ci / test (push) Successful in 14s
Closes #39 . 0.6.1 has no draft guard in its Forgejo mergeability mapping, so
the sweep marks every draft PR as blocker:conflict (see !38 ). The guard landed
in ceremony d3b7984, first tagged 0.6.2.
2026-08-30 19:28:13 +00:00
4a62f7e0cf
fix: bump ceremony pin to 0.6.3
...
ci / test (push) Waiting to run
Closes #39 . 0.6.1 has no draft guard in its Forgejo mergeability mapping, so
the sweep marks every draft PR as blocker:conflict (see !38 ). The guard landed
in ceremony d3b7984, first tagged 0.6.2.
2026-08-30 19:28:12 +00:00
033a40c7a0
Merge pull request 'feat: upload release assets' ( #37 ) from build/25-release-assets into main
...
ci / test (push) Successful in 13s
Reviewed-on: #37
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-30 13:12:37 +00:00
codex-bot-andresmgsl
769a3c8aba
fix: read apt credentials through sudo
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:40:41 +00:00
codex-bot-andresmgsl
c7971eefe0
docs: document authenticated apt installs
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:35:08 +00:00
codex-bot-andresmgsl
a28b2ffd74
feat: support private apt registry credentials
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:34:06 +00:00
codex-bot-andresmgsl
acb46d0707
fix: keep apt signature verification on transient failures
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 14s
2026-08-30 11:31:24 +00:00
codex-bot-andresmgsl
3c0709189e
fix: validate release asset uploads
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 14s
2026-08-30 11:08:01 +00:00
codex-bot-andresmgsl
8293c83531
test: cover backpressured release uploads
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 14s
2026-08-30 10:07:32 +00:00
codex-bot-andresmgsl
1371ec9aa9
docs: document release asset workflow
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 13s
2026-08-30 09:58:06 +00:00
codex-bot-andresmgsl
d1c80db665
feat: add release asset commands
labels / labels (pull_request) Successful in 8s
ci / test (pull_request) Successful in 13s
2026-08-30 09:56:21 +00:00
codex-bot-andresmgsl
0fac095509
feat: stream release asset uploads
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 17s
2026-08-30 09:48:02 +00:00
c09943ea32
Merge pull request 'feat: support organization-owned repository creation' ( #35 ) from build/24-repo-create-owner into main
...
ci / test (push) Successful in 24s
Reviewed-on: #35
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-21 23:18:38 +00:00
codex-bot-andresmgsl
ccaeb8ee4e
docs: document repo create owner routing
labels / labels (pull_request) Successful in 20s
ci / test (pull_request) Has been cancelled
2026-08-21 06:37:04 +00:00
codex-bot-andresmgsl
914e4c444b
feat: support organization-owned repo creation
labels / labels (pull_request) Failing after 19s
ci / test (pull_request) Has been cancelled
2026-08-21 06:35:41 +00:00
95f9eb8060
Merge pull request 'Adopt ceremony labels and review machinery' ( #31 ) from build/30-ceremony-adoption into main
...
ci / test (push) Successful in 24s
Reviewed-on: #31
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-21 06:31:24 +00:00
codex-bot-andresmgsl
db36cf2efc
Fix governance roster and mirror claims
ci / test (pull_request) Successful in 24s
2026-08-20 23:23:51 +00:00
codex-bot-andresmgsl
47aed6f1de
Vendor ceremony doctrine and scope mapping
ci / test (pull_request) Successful in 23s
2026-08-19 20:56:10 +00:00
codex-bot-andresmgsl
9efe4bf717
Verify governance configuration in CI
ci / test (pull_request) Successful in 23s
2026-08-19 19:26:29 +00:00
codex-bot-andresmgsl
a935b84ef8
Add ceremony label workflows
ci / test (pull_request) Successful in 22s
2026-08-19 19:25:15 +00:00
codex-bot-andresmgsl
e86ce95180
Add governance config validation
ci / test (pull_request) Successful in 24s
2026-08-19 19:23:21 +00:00
