11126 Commits

Author SHA1 Message Date
pulse-triage[bot] 67de53a912 Merge pull request #2019 from rcourtman/maintainer/20260909T233300Z
Preserve import previews and PBS history while updating dependencies
2026-09-10 02:12:41 +00:00
pulse-triage[bot] 411f284fef style(web): format the PBS History integration
The combined frontend formatting gate found three files from the reviewed PBS History candidate that were not in canonical Prettier form. Apply formatting only so the required frontend job can execute its lint, test, type-check and build stages without changing target selection or runtime behaviour.

Contract-Neutral: Formatting-only correction to the already-reviewed PBS History implementation and tests; no runtime or user contract changes.
Change-source: pulse-maintainer
2026-09-10 02:14:59 +01:00
pulse-triage[bot] 8ed7bacdb5 test(api): gate readiness transport proof on client observation
Replace the sleeping evaluator and elapsed-time comparison with a client-released evaluation gate. Real HTTP headers and keepalive bytes must arrive before evaluation can finish; a bounded request context only guards against deadlock. Always release evaluation before server cleanup on assertion failure.

A controlled 350ms pre-stream delay fails the former assertion with otherwise correct transport and passes the gated test. Buffered-body and unstarted-response negative controls both fail under the race detector; all seven Issue1640 tests pass ten repetitions after restoring production source.

Contract-Neutral: Test-only ordering repair; readiness transport and runtime contracts are unchanged.
Change-source: pulse-maintainer
2026-09-10 02:01:25 +01:00
pulse-triage[bot] f8c91e3c76 Merge candidate 20260909T235527Z-web-product
Change-source: pulse-maintainer
2026-09-10 01:08:45 +01:00
pulse-triage[bot] 605643b017 fix(web): preserve PBS host history targets in Backups
Backups fetched only PBS service rows, leaving standalone host telemetry unavailable, and rejected agents merged into PVE guests. Include PBS agent rows and reuse the deduplicated Overview inventory for unique correlation without changing the PBS drawer identity. Keep guests without agent telemetry and ambiguous identities excluded. Focused drawer and surface regressions cover missing disk data and canonical history targets.

Change-source: pulse-maintainer
2026-09-10 01:03:55 +01:00
pulse-triage[bot] 786678e8bc Merge candidate 20260909T233511Z-core-runtime
Change-source: pulse-maintainer
2026-09-10 00:55:55 +01:00
pulse-triage[bot] 1dcf4db9ea Merge candidate 20260909T233145Z-delivery-trust
Change-source: pulse-maintainer
2026-09-10 00:44:45 +01:00
pulse-triage[bot] 3e39b854bf Merge candidate 20260909T232514Z-web-product
Change-source: pulse-maintainer
2026-09-10 00:44:44 +01:00
pulse-triage[bot] fb403b618e chore(deps): qualify ID OAuth and concurrency updates
Split the remaining non-database dependency proposal into a coherent main candidate. Retain testify's required YAML update and prove history ID round trips, OAuth refresh rotation and cancellation alongside existing concurrency consumers.

Contract-Neutral: Dependency and compatibility-test maintenance only; no authentication policy, API, deployment, platform support or privacy contract changes.
Change-source: pulse-maintainer
2026-09-10 00:39:00 +01:00
pulse-triage[bot] 4df1c877ab Merge current main before native metrics publication
Incorporate the protected landing of the reviewed base while retaining the accepted native dependency update unchanged.

Change-source: pulse-maintainer
2026-09-10 00:38:15 +01:00
pulse-triage[bot] 50270c2499 fix(web): discard obsolete import impact previews
Invalidate in-flight preview generations when the import plan changes or the editor unmounts. Ignore stale success, error and completion updates so another endpoint cannot inherit the prior request's impact.

The deferred-error regression fails before repair. Record the preview lifetime and unchanged setup authority in both owning contracts, with consumer boundary coverage. All 87 focused tests and two source-built Chromium desktop/narrow interaction cases pass; retain exact-content browser evidence.

Change-source: pulse-maintainer
2026-09-10 00:36:48 +01:00
pulse-triage[bot] ad1cfd33c3 fix(ci): qualify grouped release action pin consumers
The grouped action upgrade leaves signing, network and publication consumer assertions on superseded pins. Align those contracts and check every consumer against reviewed immutable upstream manifests, retaining exact dispatch and release trust boundaries without claiming hosted execution.

Change-source: pulse-maintainer
2026-09-10 00:35:47 +01:00
pulse-triage[bot] 311540476d Merge pull request #2017 from rcourtman/maintainer/20260909T225308Z
Keep Prometheus metrics exports compatible after dependency updates
2026-09-09 23:32:26 +00:00
pulse-triage[bot] a61f1c7c82 chore(deps): qualify the native metrics dependency update
Update gopsutil and x/sys together with the purego version required by Darwin. Keep all other selected module versions unchanged and exercise real Linux CPU, memory, network and mount parsers alongside existing collector regressions.

Contract-Neutral: Dependency and compatibility-test maintenance only; no API, collection policy, platform support, deployment or privacy contract changes.
Change-source: pulse-maintainer
2026-09-10 00:03:20 +01:00
pulse-triage[bot] 834d4d220b Merge remote-tracking branch 'origin/main'
Change-source: pulse-maintainer
2026-09-09 23:51:01 +01:00
pulse-triage[bot] 61373ac6ee Merge pull request #2015 from rcourtman/maintainer/20260909T215736Z
Keep Docker inventory compatible with Moby API 1.56
2026-09-09 22:47:49 +00:00
pulse-triage[bot] ab21ae4503 chore(deps): qualify the Prometheus dependency update
Update the coherent six-module Prometheus dependency set without changing other selected versions. Cover Pulse metric labels, protobuf and text scrape negotiation, gzip and existing identity fallback, plus the optional zstd codec. The baseline also leaves zstd disabled, so no production registration change is needed.

Contract-Neutral: Dependency and compatibility-test maintenance only; no public API, deployment, telemetry, privacy or scrape-format behaviour changes.
Change-source: pulse-maintainer
2026-09-09 23:30:53 +01:00
pulse-triage[bot] bdf03e54eb chore(deps): qualify isolated Moby API and client update
Separate Docker SDK maintenance from the grouped dependency update so unrelated modules remain pinned. Preserve older-daemon negotiation and container recreation payloads with real HTTP compatibility fixtures, and ensure dependency-only changes invalidate cached development binaries.

Change-source: pulse-maintainer
2026-09-09 22:29:18 +01:00
pulse-triage[bot] 393c3f9ad1 Merge pull request #2014 from rcourtman/maintainer/20260909T201540Z
Make MSP evaluation guidance accurate for current releases
2026-09-09 20:59:15 +00:00
pulse-triage[bot] 7570defee2 Merge origin/main before publication
Preserve reviewed MSP guidance and PBS alert policy while incorporating the protected landing of the shared runtime changes.\n\nChange-source: pulse-maintainer

Change-source: pulse-maintainer
2026-09-09 21:18:19 +01:00
pulse-triage[bot] 3d0eb6eb08 Merge pull request #2012 from rcourtman/maintainer/20260909T185522Z
Honor PBS capacity thresholds and keep dependency upgrades safe
2026-09-09 20:07:14 +00:00
pulse-triage[bot] 84acde5c45 Merge branch 'maintainer-async/20260909T192026Z-delivery-trust/pulse'
Change-source: pulse-maintainer
2026-09-09 20:40:04 +01:00
pulse-triage[bot] f38d202c63 style(web): format DOMPurify range regression
Apply the repository formatter to the reviewed security-floor cases so the frontend gate can exercise their assertions.

Change-source: pulse-maintainer
2026-09-09 20:33:21 +01:00
pulse-triage[bot] ac636f98b1 fix(alerts): honour PBS datastore capacity policy
Keep topology capacity bands as resource risk rather than duplicate parent and datastore alerts. The existing live PBS capacity evaluator owns thresholds, aliases and hysteresis; retain datastore state failures and reconcile old duplicates normally.

Reproduce the 97.9% report with real registry projection and exercise threshold changes through synthetic PBS HTTP polling. Release adaptations require the live-poll evaluator, not this filter alone.

Change-source: pulse-maintainer
2026-09-09 20:23:49 +01:00
pulse-triage[bot] 37d1874904 docs(msp): verify published evaluation bundle guidance
Replace obsolete v6.2.1 guidance using retained signed v6.4.1 delivery and payload evidence. Limit privacy claims to the evaluated licence request, synchronize the shipped guide, and adapt the registered deployment regression and contract without claiming installed onboarding acceptance.

Change-source: pulse-maintainer
2026-09-09 20:23:20 +01:00
pulse-triage[bot] eccb64d155 fix(alerts): honour PBS datastore capacity policy
Keep topology capacity bands as resource risk rather than duplicate parent and datastore alerts. The existing live PBS capacity evaluator owns thresholds, aliases and hysteresis; retain datastore state failures and reconcile old duplicates normally.

Reproduce the 97.9% report with real registry projection and exercise threshold changes through synthetic PBS HTTP polling. Release adaptations require the live-poll evaluator, not this filter alone.

Change-source: pulse-maintainer
2026-09-09 20:01:19 +01:00
pulse-triage[bot] c979c759b6 Merge DOMPurify security range contract
Integrate the independently reviewed test-only security floor correction.

Change-source: pulse-maintainer
2026-09-09 19:47:21 +01:00
pulse-triage[bot] c418ee01c6 Merge setup-node v7 consumer qualification
Integrate the independently reviewed setup-node workflow and contract update alongside the Kubernetes dependency repair.

Change-source: pulse-maintainer
2026-09-09 19:47:11 +01:00
pulse-triage[bot] e9a1310528 fix(deps): split Kubernetes update with discovery-compatible tests
client-go 0.37 extends the Discovery return interface, which broke the metrics test double in grouped dependency PR #1977. Use the real discovery client over an in-memory HTTP transport so the fixture follows the selected client API without losing metrics and error assertions.

Upgrade only the coordinated Kubernetes modules and their selected transitive dependencies. Leave the unrelated grouped updates unchanged and check cohort alignment in local runtime orchestration, including mixed and incomplete negative cases.

Change-source: pulse-maintainer
2026-09-09 19:30:02 +01:00
pulse-triage[bot] 9a6a5811a7 ci: qualify setup-node v7 consumer contracts
The standalone setup-node proposal lacked lifecycle and deployment evidence. Preserve Node 24, explicit cache controls and native Windows proof steps while upgrading the immutable action revision; add consumer regression coverage for the removed dummy auth-token assumption. Keep grouped signing and deployment action upgrades separate.

Change-source: pulse-maintainer
2026-09-09 19:29:17 +01:00
pulse-triage[bot] 98fc2757ae test(web): allow patched DOMPurify ranges in security floor contract
The dependency proposal advances DOMPurify beyond the historical fixed version, but the security test asserts exact manifest equality. Accept explicit patched 3.x caret floors while rejecting vulnerable ranges, prereleases and unreviewed majors; preserve locked-copy validation. Focused security and chat sanitisation tests pass 39/39.

Change-source: pulse-maintainer
2026-09-09 19:26:37 +01:00
pulse-triage[bot] b86a888619 Merge pull request #2011 from rcourtman/maintainer/20260909T172326Z
Add regression coverage for standalone Proxmox connection renames
2026-09-09 18:22:39 +00:00
pulse-triage[bot] 780b0cf098 test(web): cover standalone connection rename across polling
The existing update-path test submitted unchanged values, leaving standalone PVE rename behaviour unproved. Type a new name, refresh the same connection and assert the edited payload reaches saveNode with the existing target rather than the add path.

Change-source: pulse-maintainer
2026-09-09 18:16:42 +01:00
pulse-triage[bot] 87d1c0ea9a Merge pull request #2008 from rcourtman/maintainer/20260909T145416Z
Make power sensor checks deterministic
2026-09-09 15:36:56 +00:00
pulse-triage[bot] 2e3ff7494c test(sensors): synchronise energy counter snapshots
Sleeping fixture writers can expose only some updated domains to the second sample, producing false zero watts in CI. Run collection under synctest, wait for its sampling timer, update counters synchronously and join completion before assertions or cleanup.

Retain availability, routing and wraparound assertions, add exact delta checks, and apply the same ordering to AMD fallback and RAPL preference fixtures. Production collection and sampling semantics are unchanged.

Change-source: pulse-maintainer
2026-09-09 15:32:07 +01:00
pulse-triage[bot] 7a1d78944b Merge pull request #2007 from rcourtman/maintainer/20260909T134704Z
Prevent unrelated Proxmox providers from sharing agent identity
2026-09-09 14:21:58 +00:00
pulse-triage[bot] 4186be2d38 Merge candidate 20260909T132030Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 14:45:25 +01:00
pulse-triage[bot] 63c9c0e495 Reject host-local networks in Proxmox provider inference
The report matcher already filters host-local interfaces, but registry inference could lend a trusted agent identity to an unrelated provider using shared loopback, link-local or Docker bridge addresses. Apply the same bounded identity policy to strong and one-way provider corroboration, preserving reciprocal links, private management networks and explicit report-IP hints.

Four cross-provider cases and a one-way mismatched-hostname case fail before the repair. Focused race tests pass after it, including presentation separation and management compatibility. This is a synthetic defect reproduction, not proof of the cause or resolution of issue #1930.

Change-source: pulse-maintainer
2026-09-09 14:27:29 +01:00
pulse-triage[bot] e47733e267 Merge pull request #2005 from rcourtman/maintainer/20260909T120326Z
Keep organization controls visible and deliver critical alert escalations
2026-09-09 13:23:02 +00:00
pulse-triage[bot] 9d50177fb7 Merge publication formatting correction for PR #2005
Preserve the reviewed formatting commit while combining it with the already integrated alert escalation repair.

Change-source: pulse-maintainer
2026-09-09 13:21:43 +01:00
pulse-triage[bot] cbf995df5e style(web): format app architecture and layout tests
The whole-tree frontend formatting gate blocks PR #2005 on these two tests. Apply the locked Prettier output without changing assertions or production code; the formatting check and all 56 focused tests pass.

Contract-Neutral: formatting-only test changes; runtime behaviour and assertions unchanged.
Change-source: pulse-maintainer
2026-09-09 13:17:03 +01:00
pulse-triage[bot] e40002f529 Merge candidate 20260909T120512Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 13:15:05 +01:00
pulse-triage[bot] db0c4fd3bb fix(alerts): notify on health assessment escalation
A running custom sensor updated its canonical incident from warning to critical without dispatching the new severity (#1801). Enable upward transitions in the shared health adapter while keeping unchanged observations and downgrades quiet. Use the existing hourly budget and dispatch suppression rather than bypassing policy.

Pin CheckHost callback delivery, acknowledgement, snooze, inactive and flapping suppression, and shared ZFS rate exhaustion with focused regressions.

Change-source: pulse-maintainer
2026-09-09 13:10:03 +01:00
pulse-triage[bot] 78a6a9f34a Merge upstream Pulse main after proposal #2004 landing
Change-source: pulse-maintainer
2026-09-09 13:06:53 +01:00
pulse-triage[bot] b127884627 Merge pull request #2004 from rcourtman/maintainer/20260909T104741Z
Keep explicitly included disks visible and strengthen managed browser checks
2026-09-09 11:28:47 +00:00
pulse-triage[bot] c829c0d8c3 Merge candidate 20260909T103517Z-web-product
Change-source: pulse-maintainer
2026-09-09 11:58:59 +01:00
pulse-triage[bot] 3c197ed34b Merge candidate 20260909T103021Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 11:44:29 +01:00
pulse-triage[bot] cf88587a49 Merge candidate 20260909T101349Z-delivery-trust
Change-source: pulse-maintainer
2026-09-09 11:44:29 +01:00
pulse-triage[bot] 6cddb75fb1 fix(web): wrap entitled organization header on compact screens
Activate the offline default context before mobile organization audits. Preserve visible session controls without page overflow, with real-backend Chromium and WebKit proof.

Change-source: pulse-maintainer
2026-09-09 11:42:59 +01:00
pulse-triage[bot] 1c4bbbf697 Merge upstream Pulse main after proposal #2003 landing
Change-source: pulse-maintainer
2026-09-09 11:39:37 +01:00