recipe-maintainers/cc-ci-orchestrator
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 69d1840ea5 upstream(lasuite-docs): note minio Docker images stopped at 2025-09-07 feat/nvd-cpe-source autonomic-bot 2026-08-14 03:06:49 +00:00
  • ab5d11ea2a Merge pull request 'advisory-scan: NVD by CPE, so mattermost and mumble stop scanning as '?'' (#11) from feat/nvd-cpe-source into main main autonomic-bot 2026-08-11 22:17:13 +00:00
  • 74117c2260 cve-check: record the remedy for a blind recipe, not just the symptom autonomic-bot 2026-08-11 22:16:52 +00:00
  • 985dc06e47 advisory-scan: NVD by CPE, so mattermost and mumble stop scanning as '?' autonomic-bot 2026-08-11 22:16:37 +00:00
  • 4b9978ac02 Merge pull request 'audit-sources --security-sources: find the recipes that cannot see CVEs at all' (#10) from feat/audit-security-sources into main autonomic-bot 2026-08-11 20:02:24 +00:00
  • 46ace30b4d audit-sources --security-sources: find the recipes that cannot see CVEs at all feat/audit-security-sources autonomic-bot 2026-08-11 20:02:06 +00:00
  • dab3edf3c2 Merge pull request 'advisory-scan: attribute vendor-changelog CVEs to the release that fixed them' (#9) from feat/changelog-version-attribution into main autonomic-bot 2026-08-11 19:50:00 +00:00
  • db37f1618b advisory-scan: attribute vendor-changelog CVEs to the release that fixed them feat/changelog-version-attribution autonomic-bot 2026-08-11 19:49:43 +00:00
  • 4bad1ea6db Merge pull request 'advisory-scan: derive the scan windows from a compose diff (--compose-to)' (#8) from feat/advisory-scan-compose into main autonomic-bot 2026-08-11 19:24:46 +00:00
  • ef58e33102 advisory-scan: derive windows from a compose diff (--compose-to) feat/advisory-scan-compose autonomic-bot 2026-08-11 19:24:24 +00:00
  • c352ea9058 Merge pull request 'add /cc-ci-cleanup — reconcile, close dead PRs, report what blocks the rest' (#7) from skill/cc-ci-cleanup into main autonomic-bot 2026-08-11 19:17:19 +00:00
  • fae2fbe21b add /cc-ci-cleanup — reconcile, close dead PRs, report what actually blocks the rest skill/cc-ci-cleanup autonomic-bot 2026-08-11 19:17:00 +00:00
  • 6ebc35bc18 Merge pull request 'AGENTS.md: ship infra work as PRs, self-merge, operator reviews retrospectively' (#6) from policy/pr-then-merge into main autonomic-bot 2026-08-11 19:08:55 +00:00
  • 96c536f543 AGENTS.md: ship infra work as PRs, self-merge, operator reviews retrospectively policy/pr-then-merge autonomic-bot 2026-08-11 19:08:39 +00:00
  • f339401bab Merge pull request 'Are we looking where releases actually happen? (resolve-images, audit-sources, STYLE.md)' (#4) from review/3-upstream-resolution into review/2-cve-skills review/2-cve-skills autonomic-bot 2026-08-11 19:03:54 +00:00
  • a0d1b82869 Merge pull request 'CI server health: image pruning, disk thresholds, reconcile-upstream' (#5) from review/4-ci-health into review/3-upstream-resolution review/3-upstream-resolution autonomic-bot 2026-08-11 19:03:54 +00:00
  • 10840263aa Merge pull request '/cve-check and /cve-check-and-upgrade' (#3) from review/2-cve-skills into review/1-cve-engine review/1-cve-engine autonomic-bot 2026-08-11 19:03:53 +00:00
  • 7c331745d8 Merge pull request 'CVE detection engine — correctness fixes, spec, tests, audit' (#2) from review/1-cve-engine into review/session-base review/session-base autonomic-bot 2026-08-11 19:03:52 +00:00
  • 94ce5c4de2 cc-ci-status: correct the ENOSPC note — inode recreation was coincidence review/4-ci-health autonomic-bot 2026-08-11 18:54:58 +00:00
  • bb7ebb4a27 reconcile-upstream.sh: one deterministic entry point, mandated before PR work autonomic-bot 2026-08-11 18:38:09 +00:00
  • ecf126d98d cc-ci-status: record the ENOSPC-with-free-disk failure and what recovered it autonomic-bot 2026-08-11 17:39:56 +00:00
  • ab88e59c21 cc-ci: prune unused images in the sweep; catch a starving host before CI dies autonomic-bot 2026-08-11 15:41:27 +00:00
  • e89da2d842 audit-sources: check we are still looking where releases actually happen autonomic-bot 2026-08-11 15:02:06 +00:00
  • 6c91373357 skills: point every test-editing path at tests/STYLE.md autonomic-bot 2026-08-11 14:41:10 +00:00
  • 1db85a7e77 resolve-images: abra-independent version resolver; fix release-line over-count autonomic-bot 2026-08-11 04:56:39 +00:00
  • 8df32edfcf cve-check: reconcile is mandatory; do not assume the default branch is main autonomic-bot 2026-08-11 04:32:49 +00:00
  • 18caf047bf advisory-scan: two more cases decided in pass 1, found by the first real /cve-check autonomic-bot 2026-08-11 04:24:15 +00:00
  • b0bdce2c15 add /cve-check and /cve-check-and-upgrade autonomic-bot 2026-08-11 04:04:59 +00:00
  • 44cb9b6704 advisory-scan: tests, audit, and two real undercounts they found autonomic-bot 2026-08-11 01:29:11 +00:00
  • 46c4fff1a6 advisory-scan: --image takes NAME=FROM:TO autonomic-bot 2026-08-11 00:52:40 +00:00
  • 65bf3c095b advisory-scan: --image NAME FROM TO replaces --window KEY=FROM:TO autonomic-bot 2026-08-11 00:51:12 +00:00
  • 8d7320f32e recipe-report: scheme changes and sidecars no longer mean '?' autonomic-bot 2026-08-10 22:06:38 +00:00
  • b5f8543a9b advisory-scan: count sidecar CVEs via per-image windows autonomic-bot 2026-08-10 22:01:28 +00:00
  • 78ae2be8ae docs: spec for the advisory scanner's CVE detection autonomic-bot 2026-08-10 21:55:37 +00:00
  • 98a624a13a advisory-scan: paginate, and count by advisory DATE when versions can't be ordered autonomic-bot 2026-08-10 21:02:39 +00:00
  • fc36d0e10f advisory-scan: report UNKNOWN, never 0, when a count could not be determined autonomic-bot 2026-08-10 20:52:51 +00:00
  • 1daf0fa616 advisory-scan: stop cross-image and cross-scheme miscounting (discourse's false 133) autonomic-bot 2026-08-10 20:44:27 +00:00
  • 318d09bdab advisory-scan: eliminate spurious '?' — url punctuation, stale URL, and ? semantics autonomic-bot 2026-08-10 20:23:10 +00:00
  • 3e59924450 advisory-scan: fix version classification (multi-line patches + range expressions) autonomic-bot 2026-08-10 18:50:07 +00:00
  • 3307bdb0fe advisory-scan: separate benign source absence from real failures; fix pgautoupgrade URLs autonomic-bot 2026-08-10 18:45:45 +00:00
  • cf26ef863a advisory-scan: read-only GitHub token from env or file (rate limit only) autonomic-bot 2026-08-10 18:38:45 +00:00
  • 5775fe23f8 security: deterministic advisory scan as an ADDITIVE pre-step autonomic-bot 2026-08-10 18:25:58 +00:00
  • 02dbd71b49 recipe-upgrade: stop upgrade-PR branches drifting behind upstream autonomic-bot 2026-08-10 16:24:37 +00:00
  • 8f85a238cc journal: 2026-08-07 run finished; supervisor-gate, report-pin, and subagent-model bugs fixed autonomic-bot 2026-08-10 15:57:25 +00:00
  • 80008da80d opencode: drop the misplaced project config autonomic-bot 2026-08-10 15:56:55 +00:00
  • 242a6d9659 report: clear+re-pin the session id at launch (fixes un-watchdogged report runs) autonomic-bot 2026-08-10 15:41:48 +00:00
  • d441c6caaf supervisor: fix 3-day progress-gate deadlock (2026-08-07 run) autonomic-bot 2026-08-10 15:17:02 +00:00
  • d101147b93 upstream(plausible): note v3.2.1 ships with clickhouse 24.12-alpine autonomic-bot 2026-08-07 05:14:27 +00:00
  • fb1dc7af9c upstream(mattermost-lts): 2026-08-07 re-check (11.10.0 pre-release; ESR=11.7.8) autonomic-bot 2026-08-07 04:47:40 +00:00
  • 0347511a84 upstream(n8n): release-notes sources autonomic-bot 2026-08-07 04:44:40 +00:00
  • f8888b2082 upstream(lasuite-drive): fix collabora release-notes URL + note minio AIStor move autonomic-bot 2026-08-07 04:21:19 +00:00
  • a56734de0b upstream(immich): 2026-08-07 — upstream main at v3.1.0; runner clone-token stale autonomic-bot 2026-08-07 03:51:02 +00:00
  • 5424954b3f upstream(gitea): note 1.27.1 patch release autonomic-bot 2026-08-07 03:15:22 +00:00
  • 51b067770c upstream(discourse): re-confirm pg18 newest (2026-08-07) autonomic-bot 2026-08-07 02:53:05 +00:00
  • 34d62fa049 journal: three pending weekly-run PRs unblocked (keycloak/mailu re-verified, discourse basefloor fix merged) autonomic-bot 2026-08-04 17:58:02 +00:00
  • 995bcf82d7 journal: 2026-08-04 weekly-run completion + bridge/wordpress/watchdog/naming wrap-up autonomic-bot 2026-08-04 17:04:08 +00:00
  • 04a04e51ac session naming: archive- prefix convention + cc-ci-report unique-name invariant autonomic-bot 2026-08-04 16:58:30 +00:00
  • f750622e3d supervisor: unique cc-ci-supervisor web-UI name (same invariant as the upgrader) autonomic-bot 2026-08-04 16:49:03 +00:00
  • 0b6cc632d4 launch-upgrader: fix watchdog wrong-session resume + unique web-UI name invariant autonomic-bot 2026-08-04 16:43:26 +00:00
  • e8d7d09445 upstream(n8n): add 2.32.x / 2.33.x release-notes coverage autonomic-bot 2026-08-04 16:27:43 +00:00
  • b2063b8235 upstream(mattermost-lts): 2026-08-04 re-check — 11.9.0 exists, operator-directed bump autonomic-bot 2026-08-04 16:07:53 +00:00
  • 0d37a891f7 opencode: subagents (agent.general) on deepseek-v4-pro via ZEN autonomic-bot 2026-08-04 15:54:55 +00:00
  • cb20bea7cd recovery: give the incident tooling a permanent home (scripts/recovery/) autonomic-bot 2026-08-04 01:57:34 +00:00
  • be7f8bc850 cctest: unify merge policy wording — recipe PRs are never agent-merged, both sides autonomic-bot 2026-08-04 01:40:36 +00:00
  • 15e4e75681 cctest: consolidate onto the existing references/recipe-maintainer submodule autonomic-bot 2026-08-04 01:37:32 +00:00
  • 49854472b8 skills: vendor autonomic-recipe-maintainer + expose all its skills as /cctest-* autonomic-bot 2026-08-04 01:36:11 +00:00
  • b462f1f7f1 skills: add /help — operator orientation over the skill roster autonomic-bot 2026-08-04 01:22:18 +00:00
  • 02cc2c29e2 upstream(lasuite-meet): release-notes sources autonomic-bot 2026-08-04 01:21:43 +00:00
  • 388e7f38c9 upstream(lasuite-docs): record v5.4.0 Bearer-auth removal + redis sidecar note autonomic-bot 2026-08-04 00:13:50 +00:00
  • 5ade783a50 skills: add /cc-ci-status — comprehensive read-only system status check autonomic-bot 2026-08-03 23:12:49 +00:00
  • 91179f872c skills: add /recipe-enroll — end-to-end enrollment of a new maintained recipe autonomic-bot 2026-08-03 22:41:16 +00:00
  • 6b3a3b1934 upstream(discourse): 2026.1→2026.7 ESR jump notes autonomic-bot 2026-08-03 22:35:36 +00:00
  • 74a57d37b3 recipes: enroll wordpress as weekly-maintained autonomic-bot 2026-08-03 21:06:20 +00:00
  • bab6481171 Merge pull request 'flake: bump nixpkgs (nixos-26.05, 2026-08-03)' (#1) from chore/orchestrator-flake-update-20260803 into main autonomic-bot 2026-08-03 20:53:20 +00:00
  • 39f92e28a3 flake: bump nixpkgs (nixos-26.05, 2026-08-03) chore/orchestrator-flake-update-20260803 autonomic-bot 2026-08-03 20:53:06 +00:00
  • d95afd934b skills: PR-merge policy + test-before-switch + new /cc-ci-orchestrator-update autonomic-bot 2026-08-03 20:35:51 +00:00
  • 2f22d42d34 skills: move cc-ci-update skills to .opencode/ as canonical; .claude/ -> thin wrappers autonomic-bot 2026-08-03 19:10:05 +00:00
  • e805baf030 skills: add /cc-ci-server-update, /cc-ci-tests-update, /cc-ci-update autonomic-bot 2026-08-03 19:07:06 +00:00
  • 9ec705dd0e orchestrator: run on the opencode backend + auto-start on boot autonomic-bot 2026-08-03 18:50:36 +00:00
  • 47bef090f3 nginx(oc): serve oc.commoninternet.net over HTTPS (443) with a self-signed cert autonomic-botandClaude Opus 4.8 2026-08-03 18:41:08 +00:00
  • d29fa655c2 host: KillMode=process on the agent units so a rebuild stops nuking tmux notplantsandClaude 2026-08-01 21:21:08 +00:00
  • 6edea124fb flake: update inputs — nixpkgs 24.11 -> 26.05, sops-nix follows (operator 2026-08-01) notplantsandClaude 2026-08-01 21:21:08 +00:00
  • 340e0d62a4 nix: sync atproto-likes module (non-root container, cache chown) autonomic-botandClaude Opus 5 2026-08-01 19:32:48 +00:00
  • 21dfa22f9a nginx: strict public default server; keep oc off 0.0.0.0 (copy) autonomic-botandClaude Opus 5 2026-08-01 18:46:06 +00:00
  • 7d72c05ae7 nginx: addSSL + explicit tailscale listen for atproto-likes (copy) autonomic-botandClaude Opus 5 2026-08-01 18:41:33 +00:00
  • ff054e790c feat(host): atproto-likes web UI at atproto.commoninternet.net autonomic-botandClaude Opus 5 2026-08-01 18:35:41 +00:00
  • 56d09016e5 feat(host): project-orchestrator systemd unit (always-on, no wakes) notplantsandClaude 2026-08-01 16:40:29 +00:00
  • 865eb45966 upstream(immich): v3.1.0 sidecar pins (valkey 8e8d64b4…, postgres unchanged) autonomic-bot 2026-07-31 03:26:34 +00:00
  • 39c7d08dbd upstream(mattermost-lts): re-check 2026-07-24, 11.7.7 latest ESR patch cc-ci-bot 2026-07-24 13:08:03 +00:00
  • d53a80eed4 upstream(lasuite-meet): add v1.24.0 / livekit v1.13.2-4 / nginx 1.31.3 notes autonomic-bot 2026-07-24 04:35:54 +00:00
  • 095b1dc75f upstream(custom-html): add nginx 1.31.3 release notes cc-ci 2026-07-24 03:40:00 +00:00
  • 117685343b upstream(immich): note v3.0.3 release + valkey pin rationale cc-ci-bot 2026-07-17 02:19:46 +00:00
  • 9e8ddc132e upstream(n8n): docs.n8n.io release-notes 404 -> use GitHub Releases; confirm live 2.27.2->2.31.0 sqlite migration clean autonomic-bot 2026-07-15 00:11:13 +00:00
  • 3ee026c2af upstream(mattermost-lts): 2026-07-13 re-check — 11.7.6 still latest ESR, 11.9 is innovation autonomic-bot 2026-07-13 23:26:24 +00:00
  • 89af8e4ed3 upstream(matrix-synapse): document signalbridge calver tag-form gotcha (abra blind spot) autonomic-bot 2026-07-13 23:20:33 +00:00
  • 4f2dd96c85 upstream(lasuite-meet): release-notes for meet v1.22/v1.23 + livekit v1.13.2/v1.13.3 autonomic-bot 2026-07-13 23:04:49 +00:00
  • 82ae406667 upstream(immich): v3.0.2 pins (valkey:9 digest refreshed, postgres pgvectors0.3.0 unchanged) autonomic-bot 2026-07-13 20:08:45 +00:00
  • c1695dcf72 upstream(gitea): note 1.26.3 regression + 1.27.0 breaking changes autonomic-bot 2026-07-13 20:05:06 +00:00
  • d45a55a65f upstream(discourse): update for official image + calver release notes autonomic-bot 2026-07-13 17:45:04 +00:00
  • 1ec1aa8f1d feat(upgrader): LOOP_TIER=go|zen config — switch weekly upgrade to OpenCode ZEN autonomic-bot 2026-07-13 17:11:26 +00:00