recipe-maintainers/cc-ci-orchestrator
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
524 Commits 28 Branches 0 Tags
93fe2b6f1aed8b45551598942fb280869c030888
Commit Graph
376 Commits
Author SHA1 Message Date
autono-bot 93fe2b6f1a journal: rustdesk-server one-off upgrade + enrollment (PR #1 GREEN !testme, cc-ci #48 merged, host switch); memory: gate fixtures must fail loudly + --cc-ci-only deploy path 2026-10-30 21:24:06 +00:00
trav cd1ec01b23 used-recipes: rustdesk-server weekly (enrolled 2026-10-30, cc-ci PR #48) 2026-10-30 18:59:10 +00:00
trav 0fe2827889 upstream(rustdesk-server): release-notes sources (one-off upgrade; not enrolled) 2026-10-30 07:55:19 +00:00
autonomic-bot bb76edde9f journal(upgrade-all): weekly run 2026-10-30 — 12 green, 1 pending canonical v6 seed, 1 failed (mailu backup defect) 2026-10-30 04:58:53 +00:00
autonomic-bot 7f3627e76c upstream(immich): postgres pgvectors 0.2.0->0.3.0 window notes 2026-10-30 03:25:38 +00:00
autonomic-bot 6234e36261 upstream(cryptpad): version-2026.10.0 now on Docker Hub; 2026.10 recipe notes 2026-10-30 02:21:52 +00:00
autonomic-bot 78bbf763ff journal(upgrade-all): weekly run 2026-10-23 — 9 green, 2 pending warm-canonical minio fix 
Only this event entry committed; pre-existing uncommitted orchestrator WIP left in the worktree untouched.
 2026-10-23 04:05:49 +00:00
autonomic-bot c57ddfd7f1 upstream(n8n): 2.43.7-2.45.2 notes + 2026-10-23 run window 2026-10-23 03:58:32 +00:00
autonomic-bot 5d422207f0 upstream(lasuite-docs): v6 yhub stack, runtime RSA keys, docspec 1.x 2026-10-23 03:31:15 +00:00
autonomic-bot 4b8b617d8c upstream(immich): release-notes sources (v3.3.3-v3.3.5) 2026-10-23 03:13:04 +00:00
cc-ci bot 53b1a76f70 upstream(gitea): add 28.x release/security notes 2026-10-23 02:43:34 +00:00
autonomic-bot f4ed2e3fbe upstream(cryptpad): Docker Hub tag pointer + 2026.10.0/opendesk notes 2026-10-23 02:24:24 +00:00
autonomic-bot afa6922093 config: drop mattermost-lts from weekly upgrade set (-> external) 
Move mattermost-lts from weekly to external in used-recipes.md, matching the
plausible precedent. The weekly /upgrade-all survey, upgrade PRs and their
!testme verification no longer run for it; cc-ci still deploys/tests it and
the recipe + tests stay enrolled.
 2026-10-19 16:56:43 +00:00
autonomic-bot 50776ecb0c upstream(n8n): 2.42.3-2.44.2 release notes + 2026-10-09/16 run windows 2026-10-16 03:26:50 +00:00
autonomic-bot 1b3ae31091 upstream(custom-html): nginx 1.31.7 security-window notes 2026-10-16 02:19:30 +00:00
autonomic-bot c97798ff8f upstream(immich): v3.3.0/v3.3.1 pins + release-window notes 2026-10-09 02:55:01 +00:00
autonomic-bot b6bfbe2a3d journal: upgrader session 2026-10-02 (8 green PRs; gitea 28.0.0 era; mirror master-branch repair; lasuite-docs base blocker persists) 2026-10-02 04:19:53 +00:00
autonomic-bot 5c6a1dbcf7 upstream(n8n): 2.40.6-2.42.2 release notes + 2026-10-02 run window 2026-10-02 04:12:34 +00:00
autonomic-bot 36019ed8c8 upstream(immich): v3.2.4 pins + release-window notes 2026-10-02 03:43:41 +00:00
autonomic-bot 004c9bcdd3 journal: upgrader session 2026-09-28 (7 green PRs; subagent model bump deepseek-v4.1-flash; quay minio 401 watch) 2026-09-28 21:54:41 +00:00
autonomic-bot 075c9d356d upstream(n8n): release notes 2026-09-21..28 window 2026-09-28 21:42:04 +00:00
autonomic-bot bf84f7f300 merge origin/main 
# Conflicts:
#	cc-ci-plan/JOURNAL.md
 2026-09-28 20:03:33 +00:00
autonomic-bot aaaec02f93 Merge journal/weekly-upgrade-report: 2026-09-28 outage recovery + Sep upstream re-check notes 
# Conflicts:
#	cc-ci-plan/JOURNAL.md
#	cc-ci-plan/upstream/n8n.md
 2026-09-28 19:58:53 +00:00
autonomic-bot bafa9be01c JOURNAL: 2026-09-28 cc-ci outage recovered via Hetzner hard reset (server 165014541) 2026-09-28 19:57:50 +00:00
autonomic-bot ad085efbc4 deploy lock: cc-ci input -> 2f6787f (cutover final state) + journal session 2026-09-21 2026-09-21 17:23:14 +00:00
autonomic-bot 5c5d194f61 domain cutover (host side): oc.ci host + recipe-report URLs + cc-ci input to c5106bc 
- opencode UI: opencodeUiHost=oc.ci.autonomic.zone with the legacy name kept via the new
  opencodeUiExtraHosts (dual traefik router rule + nginx serverAliases) during the bake.
- networking.hosts: new names pinned, legacy names kept.
- recipe-report.py: publish/verify/footer URLs → report.ci.autonomic.zone.
- flake.lock: cc-ci input → c5106bc (PR #39 + #40: dual-zone SAN cert, front-door rules,
  drone rename, harness naming).
 2026-09-21 16:58:11 +00:00
autonomic-bot e52767665b plan: migrate cc-ci domains to ci.autonomic.zone — DNS records, dual-cert SNI, phased cutover 2026-09-21 16:31:03 +00:00
autonomic-bot 5aee9551d0 launchers: default LOOP_TIER to 'go' — zen endpoint dead server-side, silently ate the 2026-09-18 weekly report 2026-09-21 16:15:11 +00:00
autonomic-bot e29b5b4101 upstream(mattermost-lts): 2026-09-18 re-check — 11.7.11 newest ESR patch; PR #2 extended 11.7.10→11.7.11, GREEN (drone 1373); CVE-2026-13426 re-adjudicated FIXED (window count 14) 2026-09-18 07:54:13 +00:00
autonomic-bot 6f63214d30 upstream(n8n): 2.38.7 / 2.39.3-2.39.7 / 2.40.0-2.40.3 release notes (2026-09-18 window) 2026-09-18 07:43:19 +00:00
loops 9202936b2e upstream(lasuite-drive): minio Docker Hub repo removed — quay.io pin notes (PR #7 carries the switch) 2026-09-18 03:34:58 +00:00
autonomic-bot 935a411c0c upstream(lasuite-docs): docspec switch (docspec/docspec, port 3000), minio quay pin notes 2026-09-18 03:27:52 +00:00
autonomic-bot e85094a8e9 upstream(immich): v3.2.1/v3.2.2 pins researched (sidecar pins unchanged) 2026-09-18 03:02:53 +00:00
autonomic-bot bb2aac39c8 upstream(hedgedoc): PG18 mount fix resolved on PR #3, multi-major pgautoupgrade verified 2026-09-18 02:54:26 +00:00
autonomic-bot 8b79c4db20 upstream(custom-html): note nginx 1.31.6 security release (CVE-2026-90439) 2026-09-18 02:12:54 +00:00
autonomic-bot 060978209c memory+journal: report STATUS round-2 — Gitea Anubis 307-challenges browser UAs; /pr/ proxy pins non-browser UA (cc-ci PR #38, deployed) 2026-09-14 16:48:01 +00:00
autonomic-bot f33c1fe36f journal: session 2026-09-14 — report STATUS column fixed (gitea/wordpress mirrors flipped public, enroll skill patched) 2026-09-14 16:38:29 +00:00
autonomic-bot ed6e70928f launch-*: hardcode the default tier to go + glm-5.3-flash (zen model ids are dead on this host) 
Every manual launch of launch-report/launch-upgrader bypasses the systemd EnvironmentFile (/srv/cc-ci/upgrader.env sets LOOP_TIER=go + the go models) and fell back to hardcoded zen defaults, which die instantly here (ProviderModelNotFoundError: opencode/glm-5.2 — the host holds no ZEN key and zen models vanished from the provider catalogue, 2026-09-14). This crashed the 2026-09-11 report agent at launch and again on every manual retry.

- launch-upgrader.py + launch-report.py: default TIER go, go-tier model default glm-5.3-flash (mirrors the 2026-09-08 operator choice in upgrader.env); zen stays an explicit opt-in on a host with a key.
- launch-supervisor.py: default SUPERVISOR_MODEL glm-5.3-flash.
- docstrings updated to match.

Verified with env -i: bare invocation resolves tier=go, model=opencode-go/glm-5.3-flash on all three. The 2026-09-11 weekly report is published live (report.ci.commoninternet.net/week-2026-09-11.html) after a fresh glm-5.3-flash report run.
 2026-09-14 14:20:25 +00:00
autonomic-bot dc6aa1c2c4 upstream(n8n): release-notes sources 2.38.5-2.39.2 (2026-09-11 run) 2026-09-11 07:27:07 +00:00
nptest2 951a108c1f upstream(immich): v3.2.0 pins (valkey 70739f85, pg combo unchanged) + ghcr pagination gotcha 2026-09-11 07:23:17 +00:00
notplants 55ce8e3830 upstream(mattermost-lts): 2026-09-11 re-check — 11.7.10 still ESR tip; CVE-2026-13426 adjudicated FIXED (window count 14) 2026-09-11 07:20:26 +00:00
notplants 8e9d2ef759 upstream(hedgedoc): PG18 layout gotcha + 1.12.0 notes (17 settled on PR #3) 2026-09-11 03:13:32 +00:00
notplants f58a600fbd upstream(gitea): add mariadb release-notes sources (overlay db pin was invisible to abra survey) 2026-09-11 02:41:09 +00:00
notplants 193befdb99 upstream(bluesky-pds): add @atproto/pds changelog URL (image 0.4.5NNN == pds 0.5.NN) 2026-09-11 02:11:06 +00:00
notplantsandClaude Opus 5 f3c871665a README + journal: the /secrets layout, and the weekly run's flash models 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
 2026-09-08 17:30:18 +00:00
notplantsandClaude Opus 5 360999d623 journal: secrets audit of the cc-ci host; leaked keys found in rsynced agent logs and redacted 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
 2026-09-08 17:07:23 +00:00
cc-ci-orchestrator 8af6c5fb45 journal: orchestrator startup entry (opencode agent, phase sequence confirmed DONE) 2026-09-08 16:53:57 +00:00
notplantsandClaude Opus 5 c14c56147d launchers: the opencode UI is oc.ci.commoninternet.net (not tailnet-only); journal the key switch 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
 2026-09-08 16:53:20 +00:00
notplantsandClaude Opus 5 79f69b0d35 cc-ci host on the OpenCode Go subscription key (opencode-go), not ZEN 
The operator's AUTONOMIC_OPENCODE_KEY is a Go subscription key. Put in the
`opencode` (ZEN) slot it authenticates but every request fails "Insufficient
balance", because ZEN is pay-as-you-go credit; on the `opencode-go` endpoint
the same key answers fine. So the orchestrator agent moves to
opencode-go/glm-5.2, and README records that this host is a Go host and that
its opencode config must carry no inline apiKey.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
 2026-09-08 16:50:20 +00:00
notplantsandClaude Opus 5 1eb176cf09 gitignore the auto-update lock backup; journal the tested auto-update + skill rewrites 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
 2026-09-08 02:02:26 +00:00