Commit Graph

  • 6316777d67 fix(security): name the node on the evidence policy card and read back an unconfirmed save feat/security-evidence-policy Anso 2026-10-25 05:33:52 -04:00
  • 25a3172441 fix(security): show and edit the evidence policy on remote and Pilot nodes Anso 2026-10-25 05:30:52 -04:00
  • 879b1be033 fix(security): log a dropped remote evidence field and correct comments left stale by the gate reorder Anso 2026-10-25 02:00:50 -04:00
  • abc2f5afc0 fix(security): let an admin bypass reach recovery rollback and report allowed evidence on every response Anso 2026-10-25 01:52:22 -04:00
  • 11902b6ed3 docs(gitops): state that Retry after a failed health check needs the gate on (#2194) main Anso 2026-10-25 01:46:09 -04:00
  • d684c9110c chore(main): release 0.98.1 release-please--branches--main--components--sencho sencho-quartermaster[bot] 2026-10-25 05:22:03 +00:00
  • a084333de5 fix(gitops): offer Retry in the Git Source sheet after a health-gate failure (#2192) Anso 2026-10-25 01:21:31 -04:00
  • 890dc065b8 chore: merge main into feat/security-evidence-policy Anso 2026-10-25 00:50:45 -04:00
  • ecd185b1f6 test(security): pin the dialog sentence for an unevaluated image with no blocking rule Anso 2026-10-25 00:42:19 -04:00
  • c699e9eb9c fix(security): scope the settings pointer to rules that blocked and pin the apply wiring Anso 2026-10-25 00:36:25 -04:00
  • 2c9d640f5c fix(security): carry the allowed decision on Git source apply and tighten its wording Anso 2026-10-25 00:33:08 -04:00
  • 7e0e8fe002 fix(security): report the allowed decision on every path that reaches the gate Anso 2026-10-25 00:20:50 -04:00
  • b7e2f660eb docs: describe Pilot Agent as a headless Sencho node, not a small container (#2193) Anso 2026-10-24 23:29:11 -04:00
  • d98a9e2046 fix(security): keep the evidence an allowed deploy rested on Anso 2026-10-24 23:22:06 -04:00
  • 26aad78ce6 docs(filesystem): describe the group hand-off rule where it is applied fix/mesh-alias-stability-offline Anso 2026-10-24 22:56:28 -04:00
  • 9fa56fa2a0 fix(mesh): keep group bits when the file's group already holds the staging file Anso 2026-10-24 22:53:27 -04:00
  • bc4291390a fix(mesh): settle restore brackets on every exit and gate group bits on the owner hand-off Anso 2026-10-24 22:44:24 -04:00
  • b02dd7c43a fix(mesh): keep the declaration unknown until a restore transaction ends Anso 2026-10-24 22:30:11 -04:00
  • c43d589031 docs: add private registry fleet delivery tutorial docs/tutorials-batch-3 Anso 2026-10-24 22:11:34 -04:00
  • b65383cdb3 fix(mesh): do not release saved claims while a stack's compose layers are mid-rewrite Anso 2026-10-24 22:06:08 -04:00
  • ea1e6b7812 fix(filesystem): keep a handed-over staging file owner-only until it holds the final owner Anso 2026-10-24 22:06:04 -04:00
  • 748b61a066 test(filesystem): read a file's mode and content through one descriptor Anso 2026-10-24 20:49:16 -04:00
  • 0bd52d009e fix(filesystem): destroy the upload source when the staged write fails early Anso 2026-10-24 20:44:26 -04:00
  • 4f013338d1 docs: add provider hook tutorial for GitHub and GitLab pushes Anso 2026-10-24 20:42:49 -04:00
  • 7d68187c04 fix(filesystem): write the whole staged file through one exclusive descriptor Anso 2026-10-24 20:37:30 -04:00
  • 437431a140 fix(filesystem): hand the staged file to its owner through the open descriptor Anso 2026-10-24 20:30:15 -04:00
  • 4cadd5d49a fix(filesystem): keep a replaced file's owner and let uploads replace read-only files Anso 2026-10-24 20:23:27 -04:00
  • 1009678519 fix(mesh): release a saved claim only on a compose file Sencho published whole Anso 2026-10-24 20:13:28 -04:00
  • c3c01fd0c9 fix(filesystem): contain managed compose save paths at the sink Anso 2026-10-24 19:52:47 -04:00
  • 2172ab12c5 fix(mesh): close review findings on declaration safety Anso 2026-10-24 19:23:04 -04:00
  • 357920cd6c fix(mesh): trust only complete, contained compose declarations Anso 2026-10-24 19:06:12 -04:00
  • a7f8943647 chore(deps): bump fast-uri dependabot/npm_and_yarn/backend/all-npm-backend-security-571e357d2d dependabot[bot] 2026-10-24 22:08:11 +00:00
  • e9c47a5e49 fix(mesh): tell a blank compose layer from an explicit null document Anso 2026-10-24 17:36:59 -04:00
  • 2c72ca4e91 fix(mesh): treat an empty compose layer as a no-op, not an unknown Anso 2026-10-24 17:32:56 -04:00
  • e8acc4335c fix(mesh): close stopped-alias and declaration boundary gaps Anso 2026-10-24 17:25:22 -04:00
  • 02a09688bc fix(mesh): trust only readable compose declarations when releasing ports Anso 2026-10-24 17:10:20 -04:00
  • fad509a6c5 docs: add repository secrets tutorial with SOPS and age Anso 2026-10-24 17:05:20 -04:00
  • 3b7072da58 fix(mesh): reconcile saved aliases against the node's compose declaration Anso 2026-10-24 15:12:00 -04:00
  • dfad88b7b2 Merge remote-tracking branch 'origin/main' into fix/mesh-alias-stability-offline Anso 2026-10-24 14:34:58 -04:00
  • 5ef5c617ca chore(deps): bump the all-actions group across 1 directory with 5 updates (#2163) dependabot[bot] 2026-10-24 14:28:47 -04:00
  • 48bf72b496 security(docker): rebuild on Node.js 26.12.1 (#2189) Anso 2026-10-24 14:28:25 -04:00
  • 87055fa670 chore(deps): bump tonistiigi/xx from c64defb to 40fe21f (#2159) dependabot[bot] 2026-10-24 14:27:50 -04:00
  • a7f864379c chore(deps): bump the all-npm-frontend group across 1 directory with 12 updates (#2188) dependabot[bot] 2026-10-24 14:27:25 -04:00
  • 7d2f61d156 chore(deps-dev): bump the all-npm-root group across 1 directory with 4 updates (#2160) dependabot[bot] 2026-10-24 14:27:13 -04:00
  • 7c3406f106 chore(deps): bump ip-address (#2184) dependabot[bot] 2026-10-24 14:26:57 -04:00
  • fc9591650a docs: state the pre-1.0 patch-line version policy (#2190) Anso 2026-10-24 14:23:08 -04:00
  • b731258314 ci: keep pre-1.0 features on the patch line (#2185) Anso 2026-10-24 13:01:28 -04:00
  • 6d3e9f2665 security(deps): clear the October high advisories (#2186) Anso 2026-10-24 11:29:59 -04:00
  • 0ba6a9e186 fix(mesh): preserve alias state for stopped stacks and failed opt-outs Anso 2026-10-23 21:58:01 -04:00
  • 66b986fbe7 Merge remote-tracking branch 'origin/main' into fix/mesh-alias-stability-offline Anso 2026-10-23 21:42:09 -04:00
  • f22d72c5d4 docs: add GitOps portfolio sweep tutorial Anso 2026-10-23 21:21:04 -04:00
  • 1cd62ddc9b docs: add Git-managed Blueprint rollout tutorial Anso 2026-10-23 19:24:35 -04:00
  • d07cfc34d1 docs: v1 docs refresh (batch 10) (#2182) Anso 2026-10-23 18:29:04 -04:00
  • 26f77cac96 docs: v1 docs refresh (batch 9) (#2181) Anso 2026-10-23 12:51:36 -04:00
  • 27495c56b4 chore(main): release 0.98.0 (#1812) v0.98.0 sencho-quartermaster[bot] 2026-10-23 11:40:14 -04:00
  • 737b0e1779 chore(deps): bump the all-npm-backend group in /backend with 7 updates (#2162) dependabot[bot] 2026-10-23 11:06:17 -04:00
  • 75fd4b48f1 docs(security): cover the trusted proxy setting, hub-only tokens and audited GitOps actions (#2180) Anso 2026-10-23 11:00:49 -04:00
  • b5a2f3aab6 docs(settings): match the Appearance, Stacks and update-check controls to the UI (#2179) Anso 2026-10-23 11:00:19 -04:00
  • 77afe18832 docs(stacks): give the service URL pencil its own section (#2178) Anso 2026-10-23 11:00:00 -04:00
  • beeb1b477f docs(fleet): document the GitOps card chip and list every node capability (#2177) Anso 2026-10-23 10:59:25 -04:00
  • ebb6d5e4c8 docs(recovery): name what refuses a recovery capture and how to fix each cause (#2176) Anso 2026-10-23 10:59:03 -04:00
  • 68145590d5 chore(release): bump the OpenAPI version with each release (#2175) Anso 2026-10-23 09:58:11 -04:00
  • 1b4a343435 ci: validate the docs build and links on pull requests (#2174) Anso 2026-10-23 08:10:55 -04:00
  • 99ca3664a5 docs: describe current behavior without contrast to the past (#2173) Anso 2026-10-23 08:10:22 -04:00
  • a5d9d4d52a docs(upgrade): list the current migrations and the reverse proxy requirement (#2172) Anso 2026-10-22 20:45:32 -04:00
  • adb0d8a522 fix(docs): repair broken anchors and missing images (#2171) Anso 2026-10-22 20:43:30 -04:00
  • 9f480e133b chore(whats-new): replace the feed with the 0.98.0 entries (#2170) Anso 2026-10-22 20:12:48 -04:00
  • 5b41c0512f docs: reorganize GitOps documentation into one section (#2167) Anso 2026-10-22 19:20:47 -04:00
  • 3f8a678a27 fix(docs): use MDX comment markers on the Git transport support page (#2166) Anso 2026-10-22 19:06:01 -04:00
  • 77026fc84f fix(deps): bump dompurify to 3.4.17 (#2168) Anso 2026-10-22 18:48:54 -04:00
  • f967a5966c fix(gitops): health-gate a Blueprint rollout under its deploy stack (#2165) Anso 2026-10-22 14:21:42 -04:00
  • 646f60f668 fix(recovery): deploy stacks whose inputs a recovery generation cannot hold (#2148) Anso 2026-10-22 10:27:48 -04:00
  • 7a9abb8993 fix(docker): rebuild the CLI and Compose binaries with Go 1.27.3 (#2164) Anso 2026-10-22 08:48:26 -04:00
  • 108a47aaab fix(git): classify an untrusted-signer TLS failure as a certificate error (#2158) Anso 2026-10-21 09:20:31 -04:00
  • 95398a182d fix(deps): bump follow-redirects to 1.16.1 (#2157) Anso 2026-10-20 15:44:16 -04:00
  • 935158b5e6 feat(resources): bring the Resources page to the design system (#2156) Anso 2026-10-20 09:51:36 -04:00
  • 880e6c6489 fix(resources): load the Resources page and volume prune without the slow image df (#2155) Anso 2026-10-20 09:17:17 -04:00
  • 48b8d698b3 feat(gitops): observe remote rollout targets over the node proxy (#2149) Anso 2026-10-19 21:16:13 -04:00
  • 1a52b5052e fix: group the GitOps portfolio filters into one popover (#2154) Anso 2026-10-19 14:34:47 -04:00
  • d8891f3b5e fix: keep outline buttons and filter selects flush with the card in the Dim theme (#2153) Anso 2026-10-19 13:51:00 -04:00
  • 09d454709b fix: remove a stack's mute rules when the stack is deleted (#2152) Anso 2026-10-19 13:49:04 -04:00
  • 495bac574a fix: polish notification actions, topology icon, minimized progress, security sheet and timeline lanes (#2151) Anso 2026-10-19 13:32:57 -04:00
  • e9f824266b feat: open a published port at its configured service URL (#2124) Anso 2026-10-17 18:33:13 -04:00
  • 25c272eef1 fix: classify a synced sibling .env as a SOPS secret (#2131) Anso 2026-10-17 18:13:54 -04:00
  • e53627580b fix(docker): floor libexpat at the version that fixes CVE-2026-77214 (#2147) Anso 2026-10-17 16:22:17 -04:00
  • 7df1514ff1 chore(deps): bump the all-npm-frontend group across 1 directory with 25 updates (#2146) dependabot[bot] 2026-10-17 13:47:46 -04:00
  • fb55fc258b chore(deps): bump the all-actions group across 2 directories with 7 updates (#2140) dependabot[bot] 2026-10-17 13:47:24 -04:00
  • 19b9fcb11a chore(deps): bump golang from 85dc106 to f92b6ef (#2139) dependabot[bot] 2026-10-17 13:47:02 -04:00
  • d2b564af6e chore(deps-dev): bump the all-npm-root group with 2 updates (#2138) dependabot[bot] 2026-10-17 13:46:35 -04:00
  • 07dff3fea7 chore(deps): bump the all-npm-backend group in /backend with 10 updates (#2136) dependabot[bot] 2026-10-17 13:46:16 -04:00
  • 5ca0f6a38a fix(gitops): keep an accepted Blueprint commit on the next poll (#2126) Anso 2026-10-17 13:32:15 -04:00
  • 903419814c fix: serve the UI typefaces from the instance (#2132) Anso 2026-10-17 12:16:39 -04:00
  • f7a18acd31 docs: read SLSA provenance with the tool that actually carries it (#2128) Anso 2026-10-16 23:26:24 -04:00
  • daed461f93 fix(blueprints): detect a remote name conflict from the leaf stack list (#2129) Anso 2026-10-16 09:41:16 -04:00
  • 6da06ce76e fix: keep readiness finding verbs inside the pane (#2127) Anso 2026-10-16 08:35:11 -04:00
  • 57e2d98a62 fix(docker): rebuild the Compose plugin from v5.6.0 (#2145) Anso 2026-10-16 01:06:07 -04:00
  • 4f1ed31f02 fix(docker): bump the Compose plugin's containerd to v2.2.10 (#2144) Anso 2026-10-16 00:04:45 -04:00
  • 712c96ac6b fix(editor): keep the compose toolbar inside the pane at 1280 (#2125) Anso 2026-10-15 20:10:35 -04:00
  • 7a6682ed3f fix: pull the next commit on a manual Git-managed Blueprint (#2130) Anso 2026-10-15 18:35:56 -04:00
  • cacba058eb feat: encrypt off-site snapshot archives with a passphrase feat/offsite-archive-encryption Anso 2026-10-14 13:32:59 -04:00