5fb7177b8a
Require compiler dispatch run details
...
Change-source: pulse-maintainer
2026-09-01 22:26:46 +01:00
96a4dceb9d
Pin umask 022 in installtests so trust fixtures are host-independent
...
install.sh refuses connection state, token, and lifecycle files whose
parent directory is group- or world-writable. The fixtures build those
parents with t.TempDir, which inherits the process umask, so on a worker
with umask 002 the state directory came out 775 and seven TestInstallSH
cases failed on the pulse-dev release preflight while passing on GitHub
runners and macOS. Set umask 022 for the package on unix so the tests
prove the installer contract rather than the host's umask.
2026-09-01 22:20:15 +01:00
62bfdbca7e
Prepare v6.4.3-rc.1 release
...
Open the v6.4.3 candidate line from main. The v6.4.2 tag was staged on
2026-08-31 but never activated: its release run was cancelled after the
private Pro build failed the compiler memory gate, so the latest published
stable is still v6.4.1. This candidate carries the complete v6.4.2 change
set plus the corrections landed since that tag, including the stale PBS
Backup Running state (#1815 ), the Windows Unified Agent auto-update 404
(#1820 ), and shared-token same-hostname agent identity collapse (#1753 ).
Packet: VERSION, compose and install-docker defaults, Helm chart metadata,
release notes with a declined visual plan, changelog, pointer docs and
the shipped docs mirror, and the deployment-installability cutoff note.
Rollback target is v6.4.1 and the mobile decision is no-mobile-impact.
Tests: the packet tests now describe the 6.4.3 train, v6.4.2 is recorded
as an unpublished stable so it is never derived as the previous stable or
rollback target, and the Python v6.4.2 notes expectation matches the
phrase the notes actually use.
2026-09-01 21:37:41 +01:00
bc3dd3b704
Give rootless qualification hosts unique identities
2026-09-01 21:18:24 +01:00
f364cfc73b
Reset Podman qualification storage on teardown
2026-09-01 20:49:43 +01:00
fec53eb39e
Wait for rootless runtime mounts to release
2026-09-01 20:26:46 +01:00
089ce2379d
Clean runtime fixtures before qualification teardown
2026-09-01 20:13:15 +01:00
19f264701e
Wait for stable rootless recovery evidence
2026-09-01 20:01:15 +01:00
861f0f07bc
Persist rootless qualification receipts
2026-09-01 19:47:15 +01:00
e89eaac9d4
Require VCS metadata in rootless packet builds
2026-09-01 19:37:23 +01:00
67dce69e73
Remove safe profile state on uninstall
2026-09-01 19:28:01 +01:00
3d6116d17f
Handle unloaded user manager cleanup
2026-09-01 19:08:53 +01:00
4db44f7a26
Handle unloaded user manager teardown
2026-09-01 18:59:01 +01:00
5c276d1037
Use portable helper network canary
2026-09-01 18:48:52 +01:00
5b47049e3f
Exercise ambiguity through typed helper boundary
2026-09-01 18:27:53 +01:00
296d04fffa
Make rootless ambiguity proof deterministic
2026-09-01 18:15:20 +01:00
0726312e5c
Bound rootless ambiguity probe cancellation
2026-09-01 18:00:26 +01:00
0e944562e9
Restore telemetry parity after rootless daemon restart
2026-09-01 17:36:08 +01:00
6a45460aff
Handle collected transient units in rootless qualification
2026-09-01 17:28:05 +01:00
f8de8b90ce
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 17:24:14 +01:00
7d7cb44855
Canonicalize rootless telemetry parity hashing
2026-09-01 17:16:30 +01:00
bfd53cd7bd
Remove privileged helper state on full uninstall
2026-09-01 17:05:49 +01:00
8d9b07905c
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 17:04:10 +01:00
69a300827f
Model durable collector teardown in rootless qualification
2026-09-01 16:54:50 +01:00
4f7a3d0006
Close runner output alias bypasses
...
Change-source: pulse-maintainer
2026-09-01 16:54:07 +01:00
7ead40fe5b
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 16:54:07 +01:00
f44968e6c6
Isolate rootless qualification cgroups
2026-09-01 16:37:11 +01:00
c1c0e5c6f1
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 16:31:15 +01:00
5e471c1dd5
Use supported rootless Docker qualification networking
2026-09-01 16:25:18 +01:00
63d1aca4c0
Fix rootless qualification packet staging
2026-09-01 16:15:21 +01:00
9a5af6ff79
Keep Windows agent update signatures addressable
...
Change-source: pulse-maintainer
2026-09-01 16:11:04 +01:00
91d120ea5d
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 16:03:53 +01:00
53267e149d
Harden least-privilege installer lifecycle state
2026-09-01 15:53:02 +01:00
9c307ed1e4
Continuously verify stable installs
...
Change-source: pulse-maintainer
2026-09-01 15:15:27 +01:00
af2fcabe7a
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 12:47:15 +01:00
11aadbfb1b
Add rootless runtime qualification harness
2026-09-01 12:29:44 +01:00
168f52972a
Expose complete stable release continuity failures
...
Change-source: pulse-maintainer
2026-09-01 12:26:46 +01:00
b766210c02
Align release contract tests with hardened workflows
...
Change-source: pulse-maintainer
2026-09-01 12:11:50 +01:00
a34f3c752b
Keep convergence evidence off sealed releases
...
Change-source: pulse-maintainer
2026-09-01 11:38:55 +01:00
4e22a49f02
Add native PVE action qualification harness
2026-09-01 10:43:35 +01:00
f12c4007ab
Serialize stable demo operations
...
Change-source: pulse-maintainer
2026-09-01 08:47:52 +01:00
ba727edf12
Refresh trusted checkout action
...
Change-source: pulse-maintainer
2026-09-01 02:31:08 +01:00
e1bce8b77f
Build release payloads on ephemeral runners
...
Change-source: pulse-maintainer
2026-09-01 01:41:09 +01:00
f967857928
Harden secure agent recovery transports
2026-08-31 23:12:00 +01:00
2aece859a5
Harden safe rootless runtime recovery
2026-08-31 22:17:07 +01:00
bd146586e8
Make release continuity failures actionable
...
Change-source: pulse-maintainer
2026-08-31 21:20:30 +01:00
83cc5e5642
Give stable backend qualification full completion headroom
2026-08-31 19:05:32 +01:00
5754d924d7
Add rootful Docker secure-runtime qualification
2026-08-31 18:13:22 +01:00
ed6f429674
Make action runner authority state crash-safe
2026-08-31 17:34:30 +01:00
69cbe5f3b8
Enforce protected GitHub checkout baseline
2026-08-31 13:21:25 +01:00
pulse-triage[bot]