Commit Graph

11098 Commits

Author SHA1 Message Date
pulse-triage[bot] c418ee01c6 Merge setup-node v7 consumer qualification
Integrate the independently reviewed setup-node workflow and contract update alongside the Kubernetes dependency repair.

Change-source: pulse-maintainer
2026-09-09 19:47:11 +01:00
pulse-triage[bot] e9a1310528 fix(deps): split Kubernetes update with discovery-compatible tests
client-go 0.37 extends the Discovery return interface, which broke the metrics test double in grouped dependency PR #1977. Use the real discovery client over an in-memory HTTP transport so the fixture follows the selected client API without losing metrics and error assertions.

Upgrade only the coordinated Kubernetes modules and their selected transitive dependencies. Leave the unrelated grouped updates unchanged and check cohort alignment in local runtime orchestration, including mixed and incomplete negative cases.

Change-source: pulse-maintainer
2026-09-09 19:30:02 +01:00
pulse-triage[bot] 9a6a5811a7 ci: qualify setup-node v7 consumer contracts
The standalone setup-node proposal lacked lifecycle and deployment evidence. Preserve Node 24, explicit cache controls and native Windows proof steps while upgrading the immutable action revision; add consumer regression coverage for the removed dummy auth-token assumption. Keep grouped signing and deployment action upgrades separate.

Change-source: pulse-maintainer
2026-09-09 19:29:17 +01:00
pulse-triage[bot] b86a888619 Merge pull request #2011 from rcourtman/maintainer/20260909T172326Z
Add regression coverage for standalone Proxmox connection renames
2026-09-09 18:22:39 +00:00
pulse-triage[bot] 780b0cf098 test(web): cover standalone connection rename across polling
The existing update-path test submitted unchanged values, leaving standalone PVE rename behaviour unproved. Type a new name, refresh the same connection and assert the edited payload reaches saveNode with the existing target rather than the add path.

Change-source: pulse-maintainer
2026-09-09 18:16:42 +01:00
pulse-triage[bot] 87d1c0ea9a Merge pull request #2008 from rcourtman/maintainer/20260909T145416Z
Make power sensor checks deterministic
2026-09-09 15:36:56 +00:00
pulse-triage[bot] 2e3ff7494c test(sensors): synchronise energy counter snapshots
Sleeping fixture writers can expose only some updated domains to the second sample, producing false zero watts in CI. Run collection under synctest, wait for its sampling timer, update counters synchronously and join completion before assertions or cleanup.

Retain availability, routing and wraparound assertions, add exact delta checks, and apply the same ordering to AMD fallback and RAPL preference fixtures. Production collection and sampling semantics are unchanged.

Change-source: pulse-maintainer
2026-09-09 15:32:07 +01:00
pulse-triage[bot] 7a1d78944b Merge pull request #2007 from rcourtman/maintainer/20260909T134704Z
Prevent unrelated Proxmox providers from sharing agent identity
2026-09-09 14:21:58 +00:00
pulse-triage[bot] 4186be2d38 Merge candidate 20260909T132030Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 14:45:25 +01:00
pulse-triage[bot] 63c9c0e495 Reject host-local networks in Proxmox provider inference
The report matcher already filters host-local interfaces, but registry inference could lend a trusted agent identity to an unrelated provider using shared loopback, link-local or Docker bridge addresses. Apply the same bounded identity policy to strong and one-way provider corroboration, preserving reciprocal links, private management networks and explicit report-IP hints.

Four cross-provider cases and a one-way mismatched-hostname case fail before the repair. Focused race tests pass after it, including presentation separation and management compatibility. This is a synthetic defect reproduction, not proof of the cause or resolution of issue #1930.

Change-source: pulse-maintainer
2026-09-09 14:27:29 +01:00
pulse-triage[bot] e47733e267 Merge pull request #2005 from rcourtman/maintainer/20260909T120326Z
Keep organization controls visible and deliver critical alert escalations
2026-09-09 13:23:02 +00:00
pulse-triage[bot] 9d50177fb7 Merge publication formatting correction for PR #2005
Preserve the reviewed formatting commit while combining it with the already integrated alert escalation repair.

Change-source: pulse-maintainer
2026-09-09 13:21:43 +01:00
pulse-triage[bot] cbf995df5e style(web): format app architecture and layout tests
The whole-tree frontend formatting gate blocks PR #2005 on these two tests. Apply the locked Prettier output without changing assertions or production code; the formatting check and all 56 focused tests pass.

Contract-Neutral: formatting-only test changes; runtime behaviour and assertions unchanged.
Change-source: pulse-maintainer
2026-09-09 13:17:03 +01:00
pulse-triage[bot] e40002f529 Merge candidate 20260909T120512Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 13:15:05 +01:00
pulse-triage[bot] db0c4fd3bb fix(alerts): notify on health assessment escalation
A running custom sensor updated its canonical incident from warning to critical without dispatching the new severity (#1801). Enable upward transitions in the shared health adapter while keeping unchanged observations and downgrades quiet. Use the existing hourly budget and dispatch suppression rather than bypassing policy.

Pin CheckHost callback delivery, acknowledgement, snooze, inactive and flapping suppression, and shared ZFS rate exhaustion with focused regressions.

Change-source: pulse-maintainer
2026-09-09 13:10:03 +01:00
pulse-triage[bot] 78a6a9f34a Merge upstream Pulse main after proposal #2004 landing
Change-source: pulse-maintainer
2026-09-09 13:06:53 +01:00
pulse-triage[bot] b127884627 Merge pull request #2004 from rcourtman/maintainer/20260909T104741Z
Keep explicitly included disks visible and strengthen managed browser checks
2026-09-09 11:28:47 +00:00
pulse-triage[bot] c829c0d8c3 Merge candidate 20260909T103517Z-web-product
Change-source: pulse-maintainer
2026-09-09 11:58:59 +01:00
pulse-triage[bot] 3c197ed34b Merge candidate 20260909T103021Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 11:44:29 +01:00
pulse-triage[bot] cf88587a49 Merge candidate 20260909T101349Z-delivery-trust
Change-source: pulse-maintainer
2026-09-09 11:44:29 +01:00
pulse-triage[bot] 6cddb75fb1 fix(web): wrap entitled organization header on compact screens
Activate the offline default context before mobile organization audits. Preserve visible session controls without page overflow, with real-backend Chromium and WebKit proof.

Change-source: pulse-maintainer
2026-09-09 11:42:59 +01:00
pulse-triage[bot] 1c4bbbf697 Merge upstream Pulse main after proposal #2003 landing
Change-source: pulse-maintainer
2026-09-09 11:39:37 +01:00
pulse-triage[bot] bf0aa6514a Merge pull request #2003 from rcourtman/maintainer/20260909T095640Z
Protect disk monitoring and organisation access boundaries
2026-09-09 10:38:03 +00:00
pulse-triage[bot] c8cead7d5a fix(agents): preserve explicit disk includes at ingestion
Carry the operator include override in disk reports so server filtering does not discard selected tmpfs mounts again. Keep automatic filtering for unmarked reports and agent exclusion precedence. Cover both ingest paths, collection, forwarding and wire compatibility for #1875.

Change-source: pulse-maintainer
2026-09-09 11:35:51 +01:00
pulse-triage[bot] 14a109444c test(e2e): provision offline signed organization entitlements
Keep a loopback ephemeral issuer alive for source-built managed browser runs and activate each organisation through the authenticated API. Verify installation bindings without billing-state injection or signature bypass, and retain a narrow CI provisioning proof separately from quarantine acceptance.

Change-source: pulse-maintainer
2026-09-09 11:35:47 +01:00
pulse-triage[bot] 9c644aac10 Merge candidate 20260909T101530Z-web-product
Change-source: pulse-maintainer
2026-09-09 11:32:24 +01:00
pulse-triage[bot] 13e16bfc83 test(e2e): provision offline signed organization entitlements
Keep a loopback ephemeral issuer alive for source-built managed browser runs and activate each organisation through the authenticated API. Verify installation bindings without billing-state injection or signature bypass, and retain a narrow CI provisioning proof separately from quarantine acceptance.

Change-source: pulse-maintainer
2026-09-09 11:27:23 +01:00
pulse-triage[bot] b72d81bbd8 test(settings): audit the app shell's scrollable content
Retained Safari failures scroll window even though the app shell owns Settings overflow. Traverse and measure the same content owner, and include its horizontal scroll width so nested overflow cannot falsely pass. Add Chromium/WebKit geometry proof at three phone widths with a window-scroll negative control.

Change-source: pulse-maintainer
2026-09-09 11:21:52 +01:00
pulse-triage[bot] 8dc2d26d94 Merge candidate 20260909T095508Z-core-runtime
Change-source: pulse-maintainer
2026-09-09 11:19:03 +01:00
pulse-triage[bot] a514b76767 Merge candidate 20260909T095526Z-web-product
Change-source: pulse-maintainer
2026-09-09 11:05:49 +01:00
pulse-triage[bot] 03821b4a2c test(api): stop rate-limit fixture cleanup workers
Own temporary global and private rate-limit configurations so preceding API tests do not abandon their cleanup goroutines. Exercise both real lazy-initialization fixtures and assert stop signalling and global restoration after cleanup. Before repair all sixteen stop channels remained open; focused rate-limit race tests pass after repair. This does not establish historical SLO causality or qualify a release.

Change-source: pulse-maintainer
2026-09-09 11:00:59 +01:00
pulse-triage[bot] 2ff0272bb0 test(web): align provider readiness assertion with rendered copy
The retained Chromium failure snapshot contains the warning and all capability evidence. Match its current sentence punctuation without relaxing readiness checks or changing production behaviour.

Change-source: pulse-maintainer
2026-09-09 10:57:34 +01:00
pulse-triage[bot] 52bf90ec7a Merge remote-tracking branch 'origin/main'
Change-source: pulse-maintainer
2026-09-09 10:55:30 +01:00
pulse-triage[bot] 26c9d19f39 test(licensing): preserve community multi-tenant entitlement boundary
Hosted organisation E2E failures exposed an ambiguity between runtime identity and entitlement provisioning. Assert that Community preserves a granted multi_tenant capability without manufacturing it when absent, so fixture repairs do not wrongly require a private binary or weaken capability gating.

Change-source: pulse-maintainer
2026-09-09 10:51:06 +01:00
pulse-triage[bot] f4fc67e46c Merge pull request #2002 from rcourtman/maintainer/20260909T090949Z
Make Settings startup failures actionable without weakening checks
2026-09-09 09:48:57 +00:00
pulse-triage[bot] e188a36eed test(hostmetrics): trace tmpfs includes through mountinfo
The failed #1875 beta retest leaves runtime environment and mount visibility unresolved. Existing fixtures stub partition enumeration, so cover the real gopsutil parser through filtering and capacity projection for single and combined tmpfs includes, missing includes and exclusion precedence. This proves the expected synthetic path, not the reporter installation or a product fix.

Change-source: pulse-maintainer
2026-09-09 10:28:59 +01:00
pulse-triage[bot] 6667bd8ad0 test: capture bounded paired Settings bootstrap timings
The hosted Settings failure stalls during bootstrap without enough evidence to separate server delay from browser scheduling. Attach redacted, bounded cookie-session HTTP timings alongside browser response timings without weakening readiness or layout assertions.

Change-source: pulse-maintainer
2026-09-09 10:03:05 +01:00
rcourtman 6ff3239d04 Merge pull request #2001 from rcourtman/chore/e2e-artifact-storage
ci: avoid duplicate E2E artifact uploads
2026-09-09 09:59:50 +01:00
rcourtman 2df6ebd210 ci: avoid duplicate E2E artifact uploads
Playwright HTML reports already include screenshots, videos and traces.
Upload only the separate JUnit XML alongside each report to retain
machine-readable results without storing failure attachments twice.
2026-09-09 09:22:27 +01:00
pulse-triage[bot] b25c3c2cbd Merge pull request #1999 from rcourtman/maintainer/20260909T044638Z
Protect webhook credentials in mixed-case diagnostics
2026-09-09 05:27:46 +00:00
pulse-triage[bot] 0e61fa62c4 fix(notifications): redact mixed-case webhook credential keys
Diagnostic query masking recognised only lowercase credential names, leaving mixed-case and encoded variants visible in URL and transport-error diagnostics. Match decoded names without case while preserving query spelling, unrelated parameters and the original request URL. Add seven regression cases covering diagnostics and wrapped error identity.

Change-source: pulse-maintainer
2026-09-09 05:34:22 +01:00
pulse-triage[bot] e8173ed6f6 Merge pull request #1998 from rcourtman/maintainer/20260909T004208Z
Capture exact timing for release history performance checks
2026-09-09 01:22:30 +00:00
pulse-triage[bot] f293d6fe33 fix(release): mark store-history SLO measurement windows
The failed exact rehearsal buffered the store-history latency assertion, preventing resource telemetry from locating its actual test interval. Extend the existing exact API lifecycle allowlist and cover both targets with synthetic pass/fail fixtures without rerunning product qualification or changing thresholds. This is prospective observability, not clearance of the retained latency or crash evidence.

Change-source: pulse-maintainer
2026-09-09 01:34:22 +01:00
pulse-triage[bot] 31bfb9c624 Merge pull request #1997 from rcourtman/maintainer/20260909T001325Z
Explain safe Proxmox access for pending update checks
2026-09-09 00:26:54 +00:00
pulse-triage[bot] a98f1bdee2 docs: sync Proxmox update guidance to shipped help
The public troubleshooting source and the in-product copy must remain identical so operators receive the same least-privilege guidance from either surface.

Change-source: pulse-maintainer
2026-09-09 01:17:58 +01:00
pulse-triage[bot] 992aae43f8 Merge upstream Pulse main before publication
Change-source: pulse-maintainer
2026-09-09 01:17:02 +01:00
pulse-triage[bot] 892ab631df Merge pull request #1995 from rcourtman/maintainer/20260908T214026Z
Improve update guidance, webhook parity, and frontend security
2026-09-08 23:39:50 +00:00
pulse-triage[bot] faefd4cb28 docs: explain Proxmox package-update privilege boundary
Matched-token reporter evidence confirms the endpoint denial names Sys.Modify. Document the upstream requirement without recommending broader monitoring privileges; distinguish API access from display recovery.

Change-source: pulse-maintainer
2026-09-09 00:11:15 +01:00
pulse-triage[bot] b825735173 style(web): format webhook parity regression
Preserve both accepted candidate changes while satisfying the repository's Prettier check on the newly added regression.

Change-source: pulse-maintainer
2026-09-08 23:50:18 +01:00
pulse-triage[bot] ff34fa42de Merge candidate 20260908T222519Z-web-product
Change-source: pulse-maintainer
2026-09-08 23:48:43 +01:00