All pull requests

Pull requests

• feat(pinned-fetches): supply-chain gate for unpinned, unverified downloads

  needs-humansentinel-alert
  #703·kylerankin opened Oct 28, 2026Contributor·3 tasks done·

  ·
  1

  1

• chore(deps): update projectbluefin/testsuite digest to d385b41

  #702·mergeraptor[bot] opened Oct 28, 2026Bot·1 task·

  ·
  3

• fix(renovate-automerge): skip instead of failing when a dependency update changed just before merge

  #701·Danathar opened Oct 28, 2026Contributor·4 of 6 tasks·

  ·
  1

  2

• test(renovate-automerge): resync bats copies and cover the head-commit pin

  #700·hivecommons-hive[bot] opened Oct 28, 2026Bot·

  ·
  1

  1

• fix(promote-squash): show what a release actually changes in the promotion PR

  sentinel-alert
  #697·codebymarshall opened Oct 28, 2026·4 of 6 tasks·

  ·
  1

  1

• chore(ci): remove an unused workflow that could push test images to stable

  #696·codebymarshall opened Oct 28, 2026·4 of 6 tasks·

  ·
  1

  3

• chore(renovate): hold Node 24 for the validate-renovate workflow

  #695·mergeraptor[bot] opened Oct 28, 2026Bot·

  ·
  3

• fix(reusable-build): fail the build when a published image is left unsigned

  #693·codebymarshall opened Oct 27, 2026·4 of 6 tasks·

  ·
  1

  4

• fix(scan-image): warn when the security scan cannot check operating system packages

  #692·codebymarshall opened Oct 27, 2026·4 of 6 tasks·

  ·
  1

  1

• fix(ci): catch alternate spellings of unapproved credentials

  3-human-queueneeds-human
  #684·thatguywob opened Oct 26, 2026·4 of 6 tasks·

  ·
  1

  11

• feat(promote-squash): forward a merge_note override to the PR body

  #680·Danathar opened Oct 25, 2026Contributor·

  ·
  1

  6

• fix(chunka): stop the build when its tool can't be downloaded instead of continuing as if it worked

  #676·kylerankin opened Oct 24, 2026Contributor·3 tasks done·

  ·
  1

  3

• fix: pass branch-sync inputs via environment instead of inline shell

  3-human-queueneeds-humansentinel-alert
  #675·kylerankin opened Oct 24, 2026Contributor·3 tasks done·

  ·
  1

  6

• ci(reusable-sync-branches): make force-reset opt-in, never on the default branch

  3-human-queueagent/scannerneeds-humansentinel-alert
  #544·kylerankin opened Sep 19, 2026Contributor·

  ·
  1

  42