d6a21c9d9e
Merge pull request 'feat: publish releases through stoke CLI' ( #55 ) from build/54-publish-release into main
...
ci / test (push) Successful in 16s
Reviewed-on: #55
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
2026-09-02 11:22:57 +00:00
codex-bot-andresmgsl
ee88d7d395
ci: delegate release publication to stoke
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-09-02 09:24:17 +00:00
codex-bot-andresmgsl
571e1b1f1f
feat: publish release assets through stoke
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-09-02 09:23:21 +00:00
codex-bot-andresmgsl
e3f4703e13
feat: extract publishable changelog sections
labels / labels (pull_request) Successful in 13s
ci / test (pull_request) Successful in 17s
2026-09-02 09:21:09 +00:00
codex-bot-andresmgsl
1aa6dc26a1
test: specify changelog section extraction
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Failing after 16s
2026-09-02 09:19:18 +00:00
967efa027c
Merge pull request 'docs: add repository intake forms' ( #52 ) from build/50-issue-templates into main
...
ci / test (push) Successful in 15s
Reviewed-on: #52
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
2026-09-01 19:14:51 +00:00
codex-bot-andresmgsl
fd22c16069
chore: trigger synchronize verification
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-09-01 15:38:58 +00:00
codex-bot-andresmgsl
da43f96796
docs: add repository intake forms
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-09-01 15:34:46 +00:00
bef059d7b7
Merge pull request 'fix: audit repository scope coverage' ( #49 ) from build/48-scope-coverage into main
...
ci / test (push) Successful in 15s
Reviewed-on: #49
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-09-01 14:16:52 +00:00
codex-bot-andresmgsl
d84062af54
test: enforce scope coverage and parity
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-09-01 13:42:26 +00:00
codex-bot-andresmgsl
112f946802
fix: cover repository scope surfaces
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-09-01 13:40:03 +00:00
081e05ca5a
Merge pull request 'docs: document stoke contribution facts' ( #47 ) from build/46-contributing into main
...
ci / test (push) Successful in 15s
Reviewed-on: #47
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-09-01 13:31:30 +00:00
codex-bot-andresmgsl
3ea8eb9032
docs: add stoke contribution facts
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-09-01 12:49:21 +00:00
9586d2c631
Merge pull request 'fix: guard package lock version parity' ( #45 ) from build/43-lockfile-version-guard into main
...
ci / test (push) Successful in 27s
Reviewed-on: #45
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 22:08:18 +00:00
01b25cac43
Merge pull request 'docs: update renamed Kimi login in README' ( #44 ) from build/33-readme-login into main
...
ci / test (push) Successful in 17s
Reviewed-on: #44
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 20:15:22 +00:00
codex-bot-andresmgsl
125bc04ede
docs: record lockfile parity guard
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 20:09:37 +00:00
codex-bot-andresmgsl
902ada1623
fix: enforce package lock version parity
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 20:06:46 +00:00
codex-bot-andresmgsl
6bffd8adb0
docs: update renamed kimi login
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 17s
2026-08-31 19:48:00 +00:00
21b91e870e
Merge pull request 'docs: pin governance records to Forgejo ceremony 0.6.3' ( #42 ) from build/36-ceremony-pin-proof into main
...
ci / test (push) Successful in 16s
Reviewed-on: #42
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 19:46:36 +00:00
codex-bot-andresmgsl
c900f47d77
test: reject ceremony pin suffix drift
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 19:30:33 +00:00
codex-bot-andresmgsl
21fcb1fdb1
docs: qualify every ceremony source record
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 19:29:55 +00:00
codex-bot-andresmgsl
ed16f824ef
docs: record governance pin enforcement
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 15s
2026-08-31 19:27:00 +00:00
codex-bot-andresmgsl
c5e0d25c49
Merge remote-tracking branch 'origin/main' into build/36-ceremony-pin-proof
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 16s
2026-08-31 19:25:51 +00:00
c34a8b04d2
Merge pull request 'feat: add fast-forward repo sync' ( #41 ) from build/23-repo-sync into main
...
ci / test (push) Successful in 28s
Reviewed-on: #41
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
2026-08-31 18:42:40 +00:00
codex-bot-andresmgsl
3fac8096f7
test: require exact ceremony workflow pins
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 18s
2026-08-31 18:38:54 +00:00
codex-bot-andresmgsl
52e8d45b78
test: pin ceremony governance source
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 18s
2026-08-31 18:32:58 +00:00
codex-bot-andresmgsl
316bec5855
fix: reconcile repository sync races
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 17:14:13 +00:00
codex-bot-andresmgsl
04e6ba60e8
docs: explain repository sync boundaries
labels / labels (pull_request) Successful in 16s
ci / test (pull_request) Successful in 28s
2026-08-31 16:59:10 +00:00
codex-bot-andresmgsl
b21a1387a5
feat: sync safe tags and support dry runs
labels / labels (pull_request) Successful in 16s
ci / test (pull_request) Successful in 30s
2026-08-31 16:57:02 +00:00
523a45587f
Merge pull request 'release: prepare stoke 1.4.0' ( #40 ) from build/32-release-1-4-0 into main
...
ci / test (push) Successful in 27s
release / deb (push) Failing after 27s
Reviewed-on: #40
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 16:56:50 +00:00
codex-bot-andresmgsl
ea6c1a4fe9
feat: resolve repository default branch
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 15s
2026-08-31 16:54:34 +00:00
codex-bot-andresmgsl
64b3d9df94
feat: fast-forward repository branches
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 16s
2026-08-31 16:51:04 +00:00
codex-bot-andresmgsl
3f943cf921
release: prepare stoke 1.4.0
ci / test (pull_request) Successful in 21s
labels / labels (pull_request) Successful in 10s
2026-08-31 16:30:20 +00:00
fb5cb4746b
Merge pull request 'fix: preserve apt signature verification' ( #38 ) from build/1-apt-signed-install into main
...
ci / test (push) Successful in 16s
Reviewed-on: #38
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
2026-08-31 16:05:04 +00:00
codex-bot-andresmgsl
2efc76f23e
fix: address apt install review round
labels / labels (pull_request) Successful in 10s
ci / test (pull_request) Successful in 14s
2026-08-31 15:14:12 +00:00
codex-bot-andresmgsl
9cc9576116
fix: limit apt opt-in to known sqv failure
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:57:32 +00:00
codex-bot-andresmgsl
a89eafaebc
fix: require opt-in for unverified apt sources
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s
2026-08-31 10:48:42 +00:00
claude-lead-andresmgsl
9f34641545
fix: stop attributing the sqv rejection to the key algorithm
...
labels / labels (pull_request) Successful in 11s
ci / test (pull_request) Successful in 17s
Refs #1 .
`scripts/install-apt.sh` explained the sqv rejection as a malformed MPI
encoding in an Ed25519 key. The registry does not serve one: at
`api/packages/heavy-duty/debian/repository.key`, `gpg --list-packets`
reports `algo 1` (RSA) with a 2048-bit `pkey[0]`. The explanation was
therefore wrong about the only part of itself that was checkable.
The comment now states the measurement and points at #1 for the cause,
rather than naming a mechanism nobody verified. This satisfies #1 's
criterion that `git grep -in 25519` return no hits outside test fixtures,
which it now does.
Behaviour is unchanged: this commit edits a comment. The automatic
fallback this file still performs contradicts ruling B and is NOT fixed
here — that work is still owed on !38 .
2026-08-31 10:39:02 +00:00
25c7267ecd
docs: move the .ceremony/ pin record to 0.6.3
...
ci / test (push) Successful in 14s
The mirror was re-vendored from ceremony 0.6.3; this file still named 0.6.1 as
the pin in both places.
2026-08-30 22:15:58 +00:00
5ec01f56b7
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:50 +00:00
f9a8ad46f4
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:49 +00:00
6cd2bb583a
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Waiting to run
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:47 +00:00
1c6d8cce73
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:46 +00:00
cca75fef3e
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Has been cancelled
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:45 +00:00
125e44afe9
docs: re-vendor .ceremony/ from ceremony 0.6.3
...
ci / test (push) Waiting to run
#39 moved the two workflow callers to 0.6.3 but left the doctrine mirror at
0.6.1, so BUILDER.md was missing the three clauses that govern signal-then-ready
(ceremony#330, the undraft order, and ceremony#336). Re-vendored all six
manifest files and moved the pin recorded in .ceremony/README.md.
2026-08-30 22:15:44 +00:00
92ba146b44
fix: bump ceremony pin to 0.6.3
...
ci / test (push) Successful in 14s
Closes #39 . 0.6.1 has no draft guard in its Forgejo mergeability mapping, so
the sweep marks every draft PR as blocker:conflict (see !38 ). The guard landed
in ceremony d3b7984, first tagged 0.6.2.
2026-08-30 19:28:13 +00:00
4a62f7e0cf
fix: bump ceremony pin to 0.6.3
...
ci / test (push) Waiting to run
Closes #39 . 0.6.1 has no draft guard in its Forgejo mergeability mapping, so
the sweep marks every draft PR as blocker:conflict (see !38 ). The guard landed
in ceremony d3b7984, first tagged 0.6.2.
2026-08-30 19:28:12 +00:00
033a40c7a0
Merge pull request 'feat: upload release assets' ( #37 ) from build/25-release-assets into main
...
ci / test (push) Successful in 13s
Reviewed-on: #37
Reviewed-by: glm-bot-andresmgsl <andres+5@heavyduty.builders>
Reviewed-by: kimi-bot-andresmgsl <andres+4@heavyduty.builders>
Reviewed-by: claude-bot-andresmgsl <andres+1@heavyduty.builders>
2026-08-30 13:12:37 +00:00
codex-bot-andresmgsl
769a3c8aba
fix: read apt credentials through sudo
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:40:41 +00:00
codex-bot-andresmgsl
c7971eefe0
docs: document authenticated apt installs
labels / labels (pull_request) Successful in 9s
ci / test (pull_request) Successful in 13s
2026-08-30 11:35:08 +00:00
