152ef86d33
Activate mise shims in the release preflight worker
...
The exact-SHA preflight streams the worker script over a non-login ssh
shell, so /etc/profile.d/mise.sh is never sourced and a stale system Node
binary on the worker shadows the infra-managed mise toolchain. pulse-dev
carried a manually installed Node 20 symlink in /usr/local/bin, so the
worker failed its Node 24 check while a login shell resolved 24.19.0.
Activate mise shims when mise is installed so the worker uses the same
toolchain the bootstrap provisions, regardless of how it is invoked.
2026-09-01 21:40:05 +01:00
62bfdbca7e
Prepare v6.4.3-rc.1 release
...
Open the v6.4.3 candidate line from main. The v6.4.2 tag was staged on
2026-08-31 but never activated: its release run was cancelled after the
private Pro build failed the compiler memory gate, so the latest published
stable is still v6.4.1. This candidate carries the complete v6.4.2 change
set plus the corrections landed since that tag, including the stale PBS
Backup Running state (#1815 ), the Windows Unified Agent auto-update 404
(#1820 ), and shared-token same-hostname agent identity collapse (#1753 ).
Packet: VERSION, compose and install-docker defaults, Helm chart metadata,
release notes with a declined visual plan, changelog, pointer docs and
the shipped docs mirror, and the deployment-installability cutoff note.
Rollback target is v6.4.1 and the mobile decision is no-mobile-impact.
Tests: the packet tests now describe the 6.4.3 train, v6.4.2 is recorded
as an unpublished stable so it is never derived as the previous stable or
rollback target, and the Python v6.4.2 notes expectation matches the
phrase the notes actually use.
2026-09-01 21:37:41 +01:00
60041ad9e6
Validate each rootless socket identity
2026-09-01 21:26:49 +01:00
bc3dd3b704
Give rootless qualification hosts unique identities
2026-09-01 21:18:24 +01:00
4fda8f146e
Merge batch-start origin/main
...
Change-source: pulse-maintainer
2026-09-01 20:58:31 +01:00
f364cfc73b
Reset Podman qualification storage on teardown
2026-09-01 20:49:43 +01:00
6af9fd6105
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 20:34:02 +01:00
fec53eb39e
Wait for rootless runtime mounts to release
2026-09-01 20:26:46 +01:00
028ccbd35f
Keep OIDC attestations on hosted runners
...
Change-source: pulse-maintainer
2026-09-01 20:17:13 +01:00
089ce2379d
Clean runtime fixtures before qualification teardown
2026-09-01 20:13:15 +01:00
de6779de81
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 20:06:09 +01:00
19f264701e
Wait for stable rootless recovery evidence
2026-09-01 20:01:15 +01:00
906b3dafee
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 19:57:14 +01:00
861f0f07bc
Persist rootless qualification receipts
2026-09-01 19:47:15 +01:00
c10e93943b
Parse workflow job trust boundaries structurally
...
Change-source: pulse-maintainer
2026-09-01 19:46:57 +01:00
bc301daf5a
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 19:46:57 +01:00
e89eaac9d4
Require VCS metadata in rootless packet builds
2026-09-01 19:37:23 +01:00
264ad97302
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 19:36:12 +01:00
5c26a8f6d1
Close privileged workflow cache audit bypasses
...
Change-source: pulse-maintainer
2026-09-01 19:31:06 +01:00
f61815839f
Keep unsigned caches out of privileged workflows
...
Change-source: pulse-maintainer
2026-09-01 19:29:37 +01:00
67dce69e73
Remove safe profile state on uninstall
2026-09-01 19:28:01 +01:00
e268194305
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 19:14:57 +01:00
3d6116d17f
Handle unloaded user manager cleanup
2026-09-01 19:08:53 +01:00
4219472fdd
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 19:05:13 +01:00
aee0ba5594
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 19:01:54 +01:00
4db44f7a26
Handle unloaded user manager teardown
2026-09-01 18:59:01 +01:00
5c276d1037
Use portable helper network canary
2026-09-01 18:48:52 +01:00
b658a8361f
Align release policy with safe workflow outputs
...
Change-source: pulse-maintainer
2026-09-01 18:32:39 +01:00
6b5369bbfa
Align TrueNAS guidance with JSON-RPC runtime
...
Change-source: pulse-maintainer
2026-09-01 18:32:39 +01:00
5b47049e3f
Exercise ambiguity through typed helper boundary
2026-09-01 18:27:53 +01:00
296d04fffa
Make rootless ambiguity proof deterministic
2026-09-01 18:15:20 +01:00
4705a18188
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 18:06:53 +01:00
0726312e5c
Bound rootless ambiguity probe cancellation
2026-09-01 18:00:26 +01:00
7d733a666a
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 17:46:25 +01:00
0e944562e9
Restore telemetry parity after rootless daemon restart
2026-09-01 17:36:08 +01:00
de41ea1883
Preserve workflow taint across branches
...
Change-source: pulse-maintainer
2026-09-01 17:34:30 +01:00
6a45460aff
Handle collected transient units in rootless qualification
2026-09-01 17:28:05 +01:00
f8de8b90ce
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 17:24:14 +01:00
7d7cb44855
Canonicalize rootless telemetry parity hashing
2026-09-01 17:16:30 +01:00
bfd53cd7bd
Remove privileged helper state on full uninstall
2026-09-01 17:05:49 +01:00
8d9b07905c
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 17:04:10 +01:00
7fd93457f1
Harden workflow alias taint tracking
...
Change-source: pulse-maintainer
2026-09-01 16:58:55 +01:00
69a300827f
Model durable collector teardown in rootless qualification
2026-09-01 16:54:50 +01:00
4f7a3d0006
Close runner output alias bypasses
...
Change-source: pulse-maintainer
2026-09-01 16:54:07 +01:00
7ead40fe5b
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 16:54:07 +01:00
f44968e6c6
Isolate rootless qualification cgroups
2026-09-01 16:37:11 +01:00
c55db584c1
Harden GitHub command file data boundaries
...
Change-source: pulse-maintainer
2026-09-01 16:32:15 +01:00
c1c0e5c6f1
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 16:31:15 +01:00
5e471c1dd5
Use supported rootless Docker qualification networking
2026-09-01 16:25:18 +01:00
63d1aca4c0
Fix rootless qualification packet staging
2026-09-01 16:15:21 +01:00
rcourtman