Skip to content
andrew.dunn.dev

Activity

The public footprint · projects · releases · MRs · PRs · writing

public APIs only · refreshed nightly
On visibility. Most of my professional work is with highly regulated industries that require privacy of engagement. This page is built only from data that is already public, so nothing here can leak: if it renders, it was public to begin with.
Public projects
66
22 reached a release
Merged, GitLab
552
gitlab-org + public-sector MRs
Merged, GitHub
18
of 30 upstream PRs
Writing
27
posts this year

Last 52 weeks

all GitLab contributions, both accounts · private work as counts only
lessmore

Flagships

the big ongoing efforts · annotated nightly
Landed upstream

This is a list of projects that I use and have been able to contribute to along the way.

The stream, by chapter

newest two months open · 9 earlier months collapsed to header + summary + box strip

September 2026

Mostly public-sector/kaniko and gitlab-org/gitlab; 2 releases; 2 essays; landed in gitlab-org/gitlab, gitlab-org/orbit/knowledge-graph, gitlab-org/modelops/applied-ml/code-suggestions/ai-assist, and gitlab-org/cli.

09-25mr mergedgitlab gitlab-org/gitlab · !253401 Read CVE enrichment from a verbatim offline mirror
09-23firstherdr-estate dunn.dev/herdr-estate · v0.1.0
09-23mr mergedgitlab gitlab-org/gitlab · !256216 Document registry access and credentials for flow executor i
09-23mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !27 Catch British spellings locally instead of in the pipeline
+ 3 MORE FROM gitlab-simulation · SHOW+ 3 MORE FROM gitlab-simulation · HIDE
09-23mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !26 Clear the four style hits that reddened the default branch
09-18mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !25 Tell a shed request apart from a deleted file in drift-check
09-18mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !24 Add a real-model arm so the AI gateway can call a real provi
09-22majorpipeline dunn.dev/cairn/pipeline · v13.0.0
09-22mr mergedgitlab gitlab-org/gitlab · !255852 Add missing entries to the Registration Features list
09-21newherdr-estate Long-running campaigns for herdr: threads of agent work, addressed as estate/campaign, tha
09-21mr mergedegress gitlab-com/public-sector/exhibits/egress · !67 Split the licence sync out of the bucket record
+ 3 MORE FROM egress · SHOW+ 3 MORE FROM egress · HIDE
09-21mr mergedegress gitlab-com/public-sector/exhibits/egress · !66 Correct the claims the 19.4 pass found wrong
09-16mr mergedegress gitlab-com/public-sector/exhibits/egress · !60 feat(freshness): Adopt the estate upkeep standard
09-05mr mergedegress gitlab-com/public-sector/exhibits/egress · !55 Adopt the upkeep pattern: freshness component, Maintenance s
09-20mr opengitlab gitlab-org/gitlab · !256550 Draft: Re-enable the v2 prompts endpoint for chat with a fra
+ 4 MORE FROM gitlab · SHOW+ 4 MORE FROM gitlab · HIDE
09-18mr opengitlab gitlab-org/gitlab · !256277 Document where an AI Catalog item definition is stored
09-09mr opengitlab gitlab-org/gitlab · !254328 Fix the Duo verifier WebSocket check rejecting itself
09-05mr opengitlab gitlab-org/gitlab · !253800 Report per-tag sync failures in Geo container repository syn
09-05mr opengitlab gitlab-org/gitlab · !253811 Let Geo container repository sync retries back off
09-19mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !155 ci: Enforce the sign-off trailer the DCO section requires
+ 15 MORE FROM p1-vp-generator · SHOW+ 15 MORE FROM p1-vp-generator · HIDE
09-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !154 chore(release): Record 10.2.0 in the changelog
09-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !153 docs(contributing): Make every claim in this file true
09-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !152 fix(render): Name absolute absence in the drift alert summar
09-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !151 fix(ci): Pin the Go image to the catalog release matching th
09-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !150 fix(manifest): Close the re-baseline diff's tag ordering
09-16mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !149 chore(ci): Carry optional: true on needs for included jobs
09-15mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !148 feat: Add vp diff subcommand for manifest comparison
09-05mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !145 Update module path and verification identity for the platfor
09-03mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !144 docs(audit): Record the grace clock's shared anchor and its
09-03mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !143 docs: Close the completeness audit's drift and stranger gaps
09-02mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !140 fix(resolve): key window fan-out survival by component path
09-01mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !139 chore(charts): Migrate the SDK render path from helm/v3 to h
09-01mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !138 fix(charts): scaffold sets global.redis.auth, not the deprec
09-01mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !137 ci(go-lint): restore golangci-lint to the gate and clear its
09-01mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !136 chore(ci): move verify-vp-release to ci-tools:v6.2.2
09-18mr opencontainer-registry gitlab-org/container-registry · !2937 fix: resolve the metadata backend before the garbage-collect
09-16newtalk-structure-over-the-trove Course talk 3: Structure over the trove
09-16newtalk-ladder-and-meter Course talk 2: The ladder and the meter
09-16newtalk-hands-and-feet Course talk 1: Hands and feet
09-16mr mergedknowledge-graph gitlab-org/orbit/knowledge-graph · !2406 docs(skill): add a cross-repository recipe to the orbit-cli
09-16mr mergedreference gitlab-com/public-sector/reference · !123 Release v2.4.0
+ 14 MORE FROM reference · SHOW+ 14 MORE FROM reference · HIDE
09-16mr mergedreference gitlab-com/public-sector/reference · !122 Harden self-conformance into a real gate
09-16mr mergedreference gitlab-com/public-sector/reference · !121 Vendor mermaid and drop the third-party CDN load
09-11mr mergedreference gitlab-com/public-sector/reference · !115 feat(pipeline): a need on a job an include creates carries o
09-10mr mergedreference gitlab-com/public-sector/reference · !113 Open the docs chrome to a wide page and a styled disclosure
09-10mr mergedreference gitlab-com/public-sector/reference · !114 Defer the freshness-heartbeat component pending its control
09-05mr mergedreference gitlab-com/public-sector/reference · !110 Release v2.3.0: chrome by tag, upkeep heartbeat and lock
09-05mr mergedreference gitlab-com/public-sector/reference · !109 Release v2.2.0
09-05mr mergedreference gitlab-com/public-sector/reference · !107 Pin catalog components by major
09-05mr mergedreference gitlab-com/public-sector/reference · !108 Follow workspaces-airgap into field-notes
09-05mr mergedreference gitlab-com/public-sector/reference · !106 Add the upkeep standard and track catalog v6.3.0 (v2.1.0)
09-03mr mergedreference gitlab-com/public-sector/reference · !103 Release v2.0.0
09-03mr mergedreference gitlab-com/public-sector/reference · !102 Collapse the start surface to one path and one first move
09-03mr mergedreference gitlab-com/public-sector/reference · !100 Remove an unused template and primitive, fix three stale cla
09-02mr mergedreference gitlab-com/public-sector/reference · !99 Reduce .reference.yaml to one exemption mechanism and make e
09-16mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !13 chore(ci): Carry optional: true on needs for included jobs
09-16mr mergedpostern gitlab-com/public-sector/utilities/postern · !111 chore(ci): Carry optional: true on needs for included jobs
09-16mr mergedkaniko gitlab-com/public-sector/kaniko · !60 chore(ci): Carry optional: true on needs for included jobs
+ 29 MORE FROM kaniko · SHOW+ 29 MORE FROM kaniko · HIDE
09-10mr mergedkaniko gitlab-com/public-sector/kaniko · !59 ci: assert the README budget, diagram texts and cosign ident
09-10mr mergedkaniko gitlab-com/public-sector/kaniko · !57 docs(security): make SECURITY.md a standing document
09-10mr mergedkaniko gitlab-com/public-sector/kaniko · !56 docs: name the OpenVEX attestation on the site and unpin the
09-09mr mergedkaniko gitlab-com/public-sector/kaniko · !52 docs: cut the README to the sixty-second surface
09-09mr mergedkaniko gitlab-com/public-sector/kaniko · !51 docs(changelog): v1.25.19-1 at reading length, headings kept
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !50 chore(release): v1.25.19-1
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !49 feat(vex): assess the five advisories Grype reports beyond T
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !48 ci: attest an OpenVEX document per variant at tag time
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !47 build: ship the debug variants from scratch with busybox
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !46 build: override grpc and buildkit for three scanner findings
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !45 docs: an accuracy pass over SECURITY.md and the cosign ident
09-08mr mergedkaniko gitlab-com/public-sector/kaniko · !43 build: ship the standard and warmer variants from scratch
09-07mr mergedkaniko gitlab-com/public-sector/kaniko · !42 docs: say the override moves the pinned module's requirement
09-06mr mergedkaniko gitlab-com/public-sector/kaniko · !41 ci: verify the executor builds reproducibly from source
09-06mr mergedkaniko gitlab-com/public-sector/kaniko · !40 build: move the warmer variants onto UBI9-micro and correct
09-06mr mergedkaniko gitlab-com/public-sector/kaniko · !39 docs: put pull, verify and changelog links on the release pa
09-06mr mergedkaniko gitlab-com/public-sector/kaniko · !38 docs: add issue and merge request templates
09-06mr mergedkaniko gitlab-com/public-sector/kaniko · !37 ci: smoke every image variant, not just fips-debug
09-06mr mergedkaniko gitlab-com/public-sector/kaniko · !36 ci: shellcheck the release scripts on every pipeline
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !35 ci: enable language vulnerability scanning on container_scan
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !34 ci: skip image jobs on a docs-only MR pipeline
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !33 build: raise golang.org/x/crypto to v0.56.0 at build time
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !32 docs: invite feedback on the upstream choice and link the st
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !31 chore: script the release steps and conform to the reference
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !30 ci: build, sign and verify images on MR and tag pipelines on
09-05mr mergedkaniko gitlab-com/public-sector/kaniko · !29 chore(release): re-cut v1.25.19 on UBI 9.8
09-04mr mergedkaniko gitlab-com/public-sector/kaniko · !27 docs: final pass before the v1.25.19 announcement
09-04mr mergedkaniko gitlab-com/public-sector/kaniko · !26 docs: make every standing document true to the repository
09-04mr mergedkaniko gitlab-com/public-sector/kaniko · !25 build!: retire the fips-strict variant, verify the Go toolch
09-15newlesson-representation Representation: a live lesson in how a SysML v2 model is shown to an LLM, on the Apollo 11
09-15mr mergedgitlab gitlab-org/gitlab · !254301 Fix doubled /v1 in Duo self-hosted endpoint probe
09-14mr mergedgitlab gitlab-org/gitlab · !246385 Add AiTracking for the Duo Chat IDE code tools
09-14mr mergedai-assist gitlab-org/modelops/applied-ml/code-suggestions/ai-assist · !6829 fix(deps): upgrade litellm to 1.99.0 to relay upstream error
09-14writingThe Key in the Wrong Keyring writing
09-11mr mergedgitlab gitlab-org/gitlab · !253489 Document tag publish-date sort in the container registry
09-11mr mergedgitlab gitlab-org/gitlab · !253817 Correct the Geo re-verification interval default to 90 days
09-11mr mergedgitlab gitlab-org/gitlab · !254485 Document that offline licenses have no GitLab-managed models
09-11mr mergedgitlab gitlab-org/gitlab · !254845 Fix executor tag guidance and transfer sizes on the offline
09-11mr mergedai-assist gitlab-org/modelops/applied-ml/code-suggestions/ai-assist · !6850 fix(models): make embedding request_timeout effective and ma
09-10mr mergedgitlab gitlab-org/gitlab · !247198 Add AgentEvents::Usage for the Duo Chat usage event
09-10mr mergedpipeline gitlab-com/public-sector/pipeline · !173 fix(release): keep fenced code and headings intact in releas
+ 5 MORE FROM pipeline · SHOW+ 5 MORE FROM pipeline · HIDE
09-10mr mergedpipeline gitlab-com/public-sector/pipeline · !171 fix(freshness-heartbeat): run on every source, proven by a c
09-09mr mergedpipeline gitlab-com/public-sector/pipeline · !145 chore(just): add a human entry surface for bot-maintenance o
09-05mr mergedpipeline gitlab-com/public-sector/pipeline · !166 Release 6.4.0: freshness heartbeat, citation drift, API exis
09-05mr mergedpipeline gitlab-com/public-sector/pipeline · !165 feat(adoption): pin catalog components by major
09-05mr mergedpipeline gitlab-com/public-sector/pipeline · !164 feat(freshness): add the freshness component, checker, image
09-09mr mergedgitlab gitlab-org/gitlab · !249943 docs: Fix Geo registry notification secret and failover guid
09-09mr mergedassay gitlab-com/public-sector/utilities/assay · !49 fix: drop redundant references in eprintln! arguments
09-09mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !30 feat: Add a URL-ready href to every index.json entry
+ 11 MORE FROM p1-vp-vexer · SHOW+ 11 MORE FROM p1-vp-vexer · HIDE
09-07mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !29 Draw how vexer works as four SVG figures
09-06mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !28 Make the harvest triage token optional
09-05mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !27 Close behaviour defects across policy, matching, harvest, fl
09-05mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !26 Derive every citation timestamp from the evidence, not the c
09-05mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !25 Make the release surface true before v0.1.0
09-05mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !24 docs: Close the release audit's documentation findings ahead
09-04mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !23 chore: Rewrite module path for the platform-one group move
09-04mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !22 feat: Render a deterministic per-image feed tree with a publ
09-03mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !21 docs: Bring contributor docs to the generator's conventions;
09-03mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !20 build: Port the comment-vocabulary gate from the generator
09-03mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !19 ci: Align CI and toolchain with the generator; audit and lin
09-08mr mergedcli gitlab-org/cli · !3776 fix(api): error on bracketed field names, send every query a
09-08mr mergedcli gitlab-org/cli · !3785 fix(api): follow the pagination Link URL without rebuilding
09-07mr mergedgitlab gitlab-org/gitlab · !253353 Document the offline CVE enrichment export and Helm chart mo
09-07mr mergedgitlab gitlab-org/gitlab · !253492 Fix the error shown when Duo group settings fail to save
09-05mr mergedtopology gitlab-com/public-sector/exhibits/topology · !9 Release 0.3.1: pages needs the heartbeat optionally
+ 4 MORE FROM topology · SHOW+ 4 MORE FROM topology · HIDE
09-05mr mergedtopology gitlab-com/public-sector/exhibits/topology · !8 Release 0.3.0: freshness heartbeat, citation lock, chrome pi
09-05mr mergedtopology gitlab-com/public-sector/exhibits/topology · !7 Restamp against the GitLab 19.3 documentation archive
09-05mr mergedtopology gitlab-com/public-sector/exhibits/topology · !6 Roll Unreleased into 0.2.0
09-05mr mergedtopology gitlab-com/public-sector/exhibits/topology · !5 Adopt the upkeep pattern: freshness tripwire, Maintenance se
09-03newexample One project, four bootc instance lanes built from the cairn catalog: plain, attended, edge
09-03mr mergedgitlab gitlab-org/gitlab · !231623 docs: Add self-hosted Sigstore keyless signing guide
09-03pr closeduapi-group/specifications uki: add .mokkeys section
09-03pr closedsystemd/systemd uki: add a .mokkeys section for kernel module signing certificates
09-01newlesson-larder Workshop files behind the Larder lesson: a meal-planning harness of four markdown files, t
09-01newlesson-ontology Workshop files behind the Ontology lesson: a small kitchen modeled as triples, checked aga

August 2026

Mostly public-sector/pipeline and public-sector/platform-one/p1-vp-generator; 3 releases; 3 essays; landed in gitlab-org/gitlab, composefs/composefs-rs, bootc-dev/bootc, systemd/systemd, gitlab-org/orbit/knowledge-graph, gitlab-org/modelops/applied-ml/code-suggestions/ai-assist, gitlab-org/build/CNG, and gitlab-org/cli.

08-31mr mergedegress gitlab-com/public-sector/exhibits/egress · !49 Show the operator's own infrastructure on the resting map
+ 11 MORE FROM egress · SHOW+ 11 MORE FROM egress · HIDE
08-28mr mergedegress gitlab-com/public-sector/exhibits/egress · !46 Derive the home page teaser frame from the resting canvas
08-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !44 Restore the map's resting scale with clusters and recomposit
08-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !43 Record every destination the 19.3 derivation found
08-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !41 Give the badge honest semantics and split the provenance axe
08-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !40 Build the b1 capture harness in the bench
08-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !39 Collapse the duplicated deployment trees to one profile sour
08-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !38 Correct the observe.gitlab.com record and name the self-run
08-26mr mergedegress gitlab-com/public-sector/exhibits/egress · !37 Record the 19.3 re-derivation and capture in the Duo ledgers
08-26mr mergedegress gitlab-com/public-sector/exhibits/egress · !36 Check what a citation claims, not merely that it answered
08-26mr mergedegress gitlab-com/public-sector/exhibits/egress · !35 Correct the workflow-service issuer-prefetch claim
08-10mr mergedegress gitlab-com/public-sector/exhibits/egress · !20 chore: drop the reference-check comment block
08-30mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !23 Harden dev-bootstrap against container git trust and clone s
+ 8 MORE FROM gitlab-simulation · SHOW+ 8 MORE FROM gitlab-simulation · HIDE
08-28mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !21 Settle the caproni external reachability gate on a live inst
08-28mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !20 Gate the airgap toolchain on base and make its control falsi
08-27mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !19 Route license files through UploadLicenseService and stop fa
08-12mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !18 fix: Verify the VM firewall and prove GitLab is reachable
08-11mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !16 feat(geo): Configurable --max-runtime and opt-in --parallel
08-09mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !15 Land the Geo disaster-recovery paths, and reconcile them wit
08-07mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !14 Key Geo state on the pair so two simulations can coexist
08-07mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !13 Stop printing credentials to stdout
08-30mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !135 chore(ci): pin the catalog to v6.2.2 so audit-go runs on Go
+ 38 MORE FROM p1-vp-generator · SHOW+ 38 MORE FROM p1-vp-generator · HIDE
08-28mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !131 chore(renovate): Tidy go bumps, never touch frozen test evid
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !120 chore: Reduce comment density, rebuild the vocabulary gate o
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !119 Drop the old-line gap aggregate, settle the scope statement
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !118 chore: Strip review archaeology from comments and help text
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !116 docs: Add the architecture page, consolidate the ADRs
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !115 Unify the cover and unresolved-demand baselines into one rul
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !114 refactor(pins): State namespace recognition as a table
08-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !113 Port the referents fetch to Go, delete the Python script
08-22mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !111 Admit the VP-published gitlab-runner namespace additively
08-21mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !108 fix(report): Surface bulk VersionedOldLine gaps past a volum
08-21mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !109 chore(cover-baseline): accept four model-gateway missing fin
08-21mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !107 fix(pins): admit the VP-published registry1 namespace additi
08-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !92 feat(recency): carry the workflow-generic-image-hardened lin
08-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !93 docs: add ADR-0011, a release line is carried or ruled
08-18mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !94 feat(stops): demand agentk's FIPS sibling below the 17.9 CNG
08-12mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !76 chore(docs): redraw architecture and pipeline diagrams for v
08-12mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !75 chore(ci): move compliance and release components to catalog
08-12mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !74 feat: carry SBOM and SLSA provenance on the binary channel
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !71 feat(v9)!: Remove the Python generator and the container dis
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !70 docs: v8 progressive disclosure -- vp-first README, the cata
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !69 feat(differential): Rule the five agentk-pinned trivy-k8s-wr
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !68 feat(differential): Rule the four CNG license lines the rede
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !67 ci: Give the differential job the helm the retiring leg shel
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !66 feat: Complete the ruled findings so generate finishes live
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !65 refactor(pins): Delete the entry shape a pin can never fill
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !64 feat(differential): Record the nine ratified rulings
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !63 fix(differential): Scope attribution and isolate the legs' c
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !62 feat: Watch the official catalog components' image pins
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !52 fix: Close the differential's implementable findings
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !51 feat: Diff the two generators and gate Flip 2 on a ruled rec
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !50 feat: Namespace the knobs and close the hygiene batch
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !49 feat: Re-derive the license package around the resolution le
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !48 docs: Retire the render-and-diff coverage check
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !46 docs: Lead the ADRs and README with figures
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !47 docs: Close the doc-currency audit before v8.0.0-rc.1
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !45 ci: Re-pin the Go delivery train to catalog v6.0.1
08-11mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !43 Go rewrite: one vp binary for verify, monitor, and demand ex
08-10mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !44 chore: correct the reference-check note
08-27mr opengitlab gitlab-org/gitlab · !252164 Provision add-on purchases when an offline license is create
+ 2 MORE FROM gitlab · SHOW+ 2 MORE FROM gitlab · HIDE
08-13mr opengitlab gitlab-org/gitlab · !249940 docs: Document lockfile write timing and fix the backend che
08-13mr opengitlab gitlab-org/gitlab · !249944 docs: Add Geo setup path for a populated metadata database p
08-26mr mergedgitlab gitlab-org/gitlab · !249880 docs: Clarify group entry scope and limits on the job token
08-26mr openstig-analyzer gitlab-com/public-sector/stig-analyzer · !15 docs: present the cloud-agnostic routes to STIG Manager
08-26mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !14 fix: refuse to analyze an empty rule catalog
+ 13 MORE FROM stig-analyzer · SHOW+ 13 MORE FROM stig-analyzer · HIDE
08-22mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !13 ci: gate the Duo lane on GITLAB_DUO_TOKEN presence
08-22mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !12 fix: single-source the tracked XCCDF path and version
08-22mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !11 Add the docs/decisions scaffold
08-21mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !9 ci: adopt reference conformance scaffolding
08-21mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !10 Restyle the project presentation to the Public Sector standa
08-19mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !8 ci: consume the container-scan-summary catalog component
08-19mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !7 ci: ephemeral-first pipelines and a human-gated release
08-19mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !4 build: pin the Duo CLI binary by sha256 and parse the 9.x JS
08-18mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !5 ci: add Duo CLI output-contract canary
08-18mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !3 feat: extract CCI identifiers from XCCDF parsing
08-18mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !2 fix: repoint component images and consumer paths to this pro
08-18mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !6 chore: absorb upstream 1.2.4 (fork parent)
08-06mr mergedstig-analyzer gitlab-com/public-sector/stig-analyzer · !1 chore: enroll in Renovate
08-26mr mergedpipeline gitlab-com/public-sector/pipeline · !155 docs(groundskeeper): draw the plan-phase refusal, and gate t
+ 39 MORE FROM pipeline · SHOW+ 39 MORE FROM pipeline · HIDE
08-22mr mergedpipeline gitlab-com/public-sector/pipeline · !153 fix(groundskeeper): send groupPath on iterationCreate, harde
08-22mr mergedpipeline gitlab-com/public-sector/pipeline · !152 docs(groundskeeper): document every manifest field and link
08-22mr mergedpipeline gitlab-com/public-sector/pipeline · !150 fix(groundskeeper): close manifest validation holes, fix fre
08-20mr mergedpipeline gitlab-com/public-sector/pipeline · !147 fix(groundskeeper): order the sims after the image build
08-19mr mergedpipeline gitlab-com/public-sector/pipeline · !144 feat(groundskeeper): sustain a standing demonstration estate
08-13mr mergedpipeline gitlab-com/public-sector/pipeline · !140 fix(images): bump ci-go's Go to 1.26.5 and golangci-lint to
08-13mr mergedpipeline gitlab-com/public-sector/pipeline · !139 feat(bot-maintenance): declare the estate's credentials and
08-12mr mergedpipeline gitlab-com/public-sector/pipeline · !138 fix(containers): adopt zig's renamed release artifacts at 0.
08-11mr mergedpipeline gitlab-com/public-sector/pipeline · !137 feat(renovate): automerge ordinary patch and minor updates
08-11mr mergedpipeline gitlab-com/public-sector/pipeline · !136 fix(containers): move tool image to ubi10 for python 3.12
08-11mr mergedpipeline gitlab-com/public-sector/pipeline · !135 fix(renovate): split typescript pins out of the pin-dependen
08-11mr mergedpipeline gitlab-com/public-sector/pipeline · !134 revert: drop the disproven repository-cache automerge theory
08-11mr mergedpipeline gitlab-com/public-sector/pipeline · !133 chore(release): cut catalog v6.0.1
08-11mr mergedpipeline gitlab-com/public-sector/pipeline · !132 fix: Fail loud on masked upload, push, and verify failures
08-10mr mergedpipeline gitlab-com/public-sector/pipeline · !130 fix(renovate): stop persisting branch state across runs
08-10mr mergedpipeline gitlab-com/public-sector/pipeline · !131 fix(renovate): survive token rotation with ignorePrAuthor
08-10mr mergedpipeline gitlab-com/public-sector/pipeline · !129 fix(renovate): exempt the automerge tier from minimumRelease
08-07mr mergedpipeline gitlab-com/public-sector/pipeline · !127 feat(renovate): automerge lockfile, pin and digest updates
08-07mr mergedpipeline gitlab-com/public-sector/pipeline · !126 fix(renovate): exempt catalog bumps from the concurrent-MR c
08-06mr mergedpipeline gitlab-com/public-sector/pipeline · !125 fix(renovate): ignore labs, and stop treating group membersh
08-06mr mergedpipeline gitlab-com/public-sector/pipeline · !124 feat(renovate): audit that Renovate is delivering, fleet-wid
08-06mr mergedpipeline gitlab-com/public-sector/pipeline · !123 chore(release): cut catalog v6.0.0
08-05mr mergedpipeline gitlab-com/public-sector/pipeline · !121 docs(changelog): record the verify needs_job removal as brea
08-05mr mergedpipeline gitlab-com/public-sector/pipeline · !122 fix(container)!: image resolved to empty, so every container
08-05mr mergedpipeline gitlab-com/public-sector/pipeline · !120 fix(gate)!: rename required-checks to required_checks, and c
08-05mr mergedpipeline gitlab-com/public-sector/pipeline · !118 chore(release): Cut catalog v5.0.0, not v4.3.0
08-05mr mergedpipeline gitlab-com/public-sector/pipeline · !117 chore(release): Cut catalog v4.3.0
08-05mr mergedpipeline gitlab-com/public-sector/pipeline · !116 fix(vale): Make could-not-run block, and stop shipping rules
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !113 fix(renovate): Give catalog bumps priority over the concurre
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !114 fix(templates): component.version in a spec.inputs default n
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !112 fix(vale): Bake vale and pinned styles into ci-tools
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !115 fix(ci): Drop the unpinned pip yq from the template syntax j
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !78 fix(vale): enable globstar so ** in paths actually recurses,
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !110 chore(renovate): group a consumer's catalog pins so a bump m
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !109 chore(renovate): unblock advisories and automerge checksum-v
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !108 fix(audit): derive the image from language, stop teaching th
08-04mr mergedpipeline gitlab-com/public-sector/pipeline · !107 chore(release): drop release-discipline, the gate that never
08-03mr mergedpipeline gitlab-com/public-sector/pipeline · !106 fix(gate): stop the automerge gate blocking the human lane i
08-03mr mergedpipeline gitlab-com/public-sector/pipeline · !104 fix(renovate): stop stripping the v prefix, build containers
08-26mr mergedreference gitlab-com/public-sector/reference · !90 Add the groundskeeper doctrine page, and a gate for the drif
+ 24 MORE FROM reference · SHOW+ 24 MORE FROM reference · HIDE
08-26mr mergedreference gitlab-com/public-sector/reference · !89 Release v1.4.0
08-26mr mergedreference gitlab-com/public-sector/reference · !88 Cut two Unreleased entries to the changelog standard
08-26mr mergedreference gitlab-com/public-sector/reference · !87 Build the release tag body from the version's CHANGELOG sect
08-26mr mergedreference gitlab-com/public-sector/reference · !86 Two authoring rulings, and the published surface states rule
08-25mr mergedreference gitlab-com/public-sector/reference · !85 feat(design): promote the offline notebook's design iteratio
08-11mr mergedreference gitlab-com/public-sector/reference · !73 feat: Assert the converged Renovate idiom, and stop failing
08-11mr mergedreference gitlab-com/public-sector/reference · !72 feat: Add blocking license standard asserting the copyright
08-11mr mergedreference gitlab-com/public-sector/reference · !71 refactor(standards): Delete the ai-assisted standard
08-10mr mergedreference gitlab-com/public-sector/reference · !70 fix(templates): carry the optional Owners section into the s
08-10mr mergedreference gitlab-com/public-sector/reference · !69 fix(security-md): assert properties, not wording
08-10mr mergedreference gitlab-com/public-sector/reference · !68 chore: delete the reference-check story everywhere it was to
08-10mr mergedreference gitlab-com/public-sector/reference · !67 fix: report one absent file as one failure, not three to fiv
08-07mr mergedreference gitlab-com/public-sector/reference · !64 fix(codeowners): make the default section optional
08-07mr mergedreference gitlab-com/public-sector/reference · !63 fix(pipeline): match catalog pins on project path, not liter
08-06mr mergedreference gitlab-com/public-sector/reference · !62 fix(renovate): stop asserting a file and calling it delivery
08-05mr mergedreference gitlab-com/public-sector/reference · !61 feat(standards): generate each Verify block from check.sh, a
08-05mr mergedreference gitlab-com/public-sector/reference · !60 chore(catalog): pin v5.0.0, retire three dead workarounds, p
08-04mr mergedreference gitlab-com/public-sector/reference · !59 feat(standards): Add an advisory tier and converge presentat
08-04mr mergedreference gitlab-com/public-sector/reference · !58 feat(repository): assert brand SVGs parse as well-formed XML
08-04mr mergedreference gitlab-com/public-sector/reference · !29 fix(templates): Pages geometry accounts for subgroup nesting
08-04mr mergedreference gitlab-com/public-sector/reference · !23 fix(repository): brand templates are invalid XML and the exa
08-04mr mergedreference gitlab-com/public-sector/reference · !54 docs(ci): scope vale to what it can honestly judge, 308 find
08-04mr mergedreference gitlab-com/public-sector/reference · !53 fix(renovate): drop the duplicate catalog-pin manager, the p
08-04mr mergedreference gitlab-com/public-sector/reference · !52 feat(compliance): bind every control to a standard, a check,
08-25pr mergedcomposefs/composefs-rs tests: Add zstd:chunked pull integration test
08-24pr openfedora-selinux/selinux-policy Allow passwd read inherited admin home and user home files
08-24pr mergedbootc-dev/bootc docs/composefs: Document zstd:chunked pull limitation
08-24pr mergedcomposefs/composefs-rs oci: Attribute pull errors to the failing blob
08-24pr mergedcomposefs/composefs-rs oci: Decode multi-frame compressed layers
08-24pr mergedbootc-dev/bootc composefs: Fix inverted rollback queued detection
08-21mr mergedgitlab gitlab-org/gitlab · !249924 docs: Clarify groups_attribute placement for SAML group sync
08-19mr mergedgitlab gitlab-org/gitlab · !249923 docs: Correct epic permissions across group hierarchies
08-18mr mergedanvil gitlab-com/public-sector/exhibits/the-foundry/anvil · !2 Cross-check hardness results in inspect job
08-18mr mergedcrucible gitlab-com/public-sector/exhibits/the-foundry/crucible · !2 Check refractory wear threshold in inspect job
08-18mr mergedforge gitlab-com/public-sector/exhibits/the-foundry/forge · !2 Confirm conveyor handoff signal before intake
08-15pr mergedsystemd/systemd crypto-util: zero-pad ECC point coordinates to curve width
08-15pr closedsystemd/systemd crypto-util: zero-pad ECC point coordinates to curve width
08-14writingThe Flywheel and the Meter writing
08-13mr mergedgitlab gitlab-org/gitlab · !249886 docs: Correct the role required to pull an image with a job
08-13mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !12 build: Pin the local Go toolchain and lint charter
+ 3 MORE FROM p1-vp-vexer · SHOW+ 3 MORE FROM p1-vp-vexer · HIDE
08-13mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !11 release: Wire binary, attest, and release components for v0.
08-13mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !10 ci: Align catalog pins to v6.0.1
08-13mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !5 feat: Pin the advisory corpus to a commit, audit routing, co
08-12mr mergedgitlab gitlab-org/gitlab · !249887 docs: Correct the Group SSO redirect for Minimal Access user
08-12mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !72 fix: honest risk-tier labels for Project Teams cards
+ 7 MORE FROM manifold · SHOW+ 7 MORE FROM manifold · HIDE
08-11mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !69 chore: roll changelog and version references for v2.0.0
08-11mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !68 fix: seeder growth pass compounds across runs
08-11mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !67 docs: deployment requirements and validated scale
08-11mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !66 fix: honest empty state and edge labels in influence project
08-10mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !65 fix(site): regenerate the lockfile after the pin/maintenance
08-10mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !64 chore: close reference conformity gaps in project docs
08-06mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !61 chore(ci): pin the catalog at v6.0.0
08-11mr mergedknowledge-graph gitlab-org/orbit/knowledge-graph · !2231 fix(ci): fail fast and isolate per-MR failures in the stale-
08-10mr mergedpostern gitlab-com/public-sector/utilities/postern · !46 docs: close the reference conformance gaps
08-10mr mergedkaniko gitlab-com/public-sector/kaniko · !23 chore: close the codeowners and changelog conformity gaps
+ 1 MORE FROM kaniko · SHOW+ 1 MORE FROM kaniko · HIDE
08-06mr mergedkaniko gitlab-com/public-sector/kaniko · !16 chore(ci): pin the catalog at v6.0.0, drop the removed verif
08-10mr mergedassay gitlab-com/public-sector/utilities/assay · !33 chore: close conformity gaps against public-sector/reference
08-08mr mergedgitlab gitlab-org/gitlab · !249029 Docs: State the incoming email prerequisite for convert_to_t
08-08mr mergedknowledge-graph gitlab-org/orbit/knowledge-graph · !2202 fix(orbit-local): friendly errors for non-git and empty-git
08-07firstkratos-ldap dunn.dev/kratos-ldap · v0.3.0
08-07mr mergedgitlab gitlab-org/gitlab · !249048 Correct the AI Gateway mTLS introduction version to 19.2
08-07mr mergedai-assist gitlab-org/modelops/applied-ml/code-suggestions/ai-assist · !6458 fix: present the client certificate when an mTLS CA bundle i
08-07mr mergedknowledge-graph gitlab-org/orbit/knowledge-graph · !2203 docs(local): document the script-free Windows install path
08-07mr mergedCNG gitlab-org/build/CNG · !2885 fix: Add missing websocket_token_secret_file for KAS dev com
08-07writingThe Other Half of the Corpus writing
08-06newvarve Local agent-session record lake: Parquet + DuckDB over harness transcripts. Cost analytics
08-04majorpipeline dunn.dev/cairn/pipeline · v10.0.0
08-04mr mergedcli gitlab-org/cli · !3048 feat(api): parse JSON arrays and objects in --field
08-03majorsynthesist nomograph/synthesist · v3.0.0

July 2026

SHOW 60 EVENTSHIDE EVENTS

Mostly public-sector/pipeline and public-sector/gitlab-simulation; 3 releases; 1 essay; landed in gitlab-org/gitlab, gitlab-org/modelops/applied-ml/code-suggestions/ai-assist, osbuild/osbuild.github.io, and gitlab-org/gitlab-runner.

07-31mr mergedgitlab gitlab-org/gitlab · !247967 docs: Reconcile Gitaly Cluster (Praefect) on Kubernetes supp
07-31mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !10 Two-site Geo archetype with the container registry on the me
+ 7 MORE FROM gitlab-simulation · SHOW+ 7 MORE FROM gitlab-simulation · HIDE
07-15mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !8 feat(aigw): overlay-patch tool, ai-assist source env, capron
07-09mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !7 Release v0.1.0: rename to gitlab-simulation, corrected recip
07-06mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !6 Remove dead helpers; fix usage and enable-flow doc drift
07-06mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !5 Make just the single front door; add ADR/RFC/PRD decision re
07-06mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !4 Add ci-runner-register for a general-purpose untagged runner
07-06mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !3 Fix seed env-knob forwarding; correct seeding and gce docs
07-06mr mergedgitlab-simulation gitlab-com/public-sector/gitlab-simulation · !2 Restructure SKILL.md to an entry-only spine with recorded si
07-29mr mergedgitlab gitlab-org/gitlab · !244736 Add AiTracking for three Duo features
07-28mr mergedpipeline gitlab-com/public-sector/pipeline · !103 feat(renovate): track mise gitlab: backend tool pins
+ 13 MORE FROM pipeline · SHOW+ 13 MORE FROM pipeline · HIDE
07-27mr mergedpipeline gitlab-com/public-sector/pipeline · !101 feat(release-discipline): gate unsigned and unreleasable tag
07-27mr mergedpipeline gitlab-com/public-sector/pipeline · !100 docs: changelog for 4.2.0
07-27mr mergedpipeline gitlab-com/public-sector/pipeline · !99 feat(site-check): gate a project's own check command on merg
07-27mr mergedpipeline gitlab-com/public-sector/pipeline · !98 refactor(renovate): freeze evidence by path, not by reposito
07-27mr mergedpipeline gitlab-com/public-sector/pipeline · !97 feat(renovate): freeze lab/** by default, carve out build to
07-27mr mergedpipeline gitlab-com/public-sector/pipeline · !95 fix(renovate): ceiling typescript below v7 on an upstream bl
07-26mr mergedpipeline gitlab-com/public-sector/pipeline · !96 fix(renovate): size the scan timeout for a cold run
07-26mr mergedpipeline gitlab-com/public-sector/pipeline · !84 feat(renovate): bring renovation online across the group
07-26mr mergedpipeline gitlab-com/public-sector/pipeline · !83 fix(renovate): widen schedule window so scheduled runs open
07-22mr mergedpipeline gitlab-com/public-sector/pipeline · !82 fix(pages): default-branch deploys need a two-rule split
07-22mr mergedpipeline gitlab-com/public-sector/pipeline · !81 fix(pages): branch rule compares variables, not a quoted lit
07-19mr mergedpipeline gitlab-com/public-sector/pipeline · !80 fix(gate): fail-open guard, shared osv diff-mode, required-c
07-19mr mergedpipeline gitlab-com/public-sector/pipeline · !79 feat(ci-tools): ship diffutils (diff + cmp); finalize v4.1.0
07-27mr mergedai-assist gitlab-org/modelops/applied-ml/code-suggestions/ai-assist · !6185 feat: emit terminal usage event on /v2/chat/agent stream
07-27mr mergedegress gitlab-com/public-sector/exhibits/egress · !10 fix(a11y): satisfy the type checker without dropping Graphic
+ 1 MORE FROM egress · SHOW+ 1 MORE FROM egress · HIDE
07-26mr mergedegress gitlab-com/public-sector/exhibits/egress · !1 fix(renovate): migrate config off keys removed in Renovate 4
07-26mr mergedreference gitlab-com/public-sector/reference · !40 chore(deps): move catalog pin to v4.1.2, split container sig
+ 5 MORE FROM reference · SHOW+ 5 MORE FROM reference · HIDE
07-11mr mergedreference gitlab-com/public-sector/reference · !28 Release v1.2.0
07-11mr mergedreference gitlab-com/public-sector/reference · !27 Pre-release cleanups: dead primitive, statuses, posture, pip
07-11mr mergedreference gitlab-com/public-sector/reference · !26 design(chrome/book): Tufte-style handbook chrome family
07-11mr mergedreference gitlab-com/public-sector/reference · !25 Fold the root .ai/ topic tree; AGENTS.md self-contained
07-11mr mergedreference gitlab-com/public-sector/reference · !24 Slim agents-md to AGENTS.md + CLAUDE.md existence
07-25majormuxr nomograph/muxr · v4.0.0
07-23mr mergedgitlab gitlab-org/gitlab · !246401 Docs: clarify that the delete source branch default follows
07-20majorpipeline dunn.dev/pipeline · 4.0.0
07-19mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !30 chore(ci): re-pin pipeline catalog @v4.0.2 -> @v4.1.0
07-17mr mergedgitlab gitlab-org/gitlab · !245901 Add read_ai_usage_metric granular token permission
07-15mr mergedai-assist gitlab-org/modelops/applied-ml/code-suggestions/ai-assist · !6184 fix: return token usage non-destructively for streamed promp
07-13newwhetstone Runner VM golden images: the estate's CI executors run the estate's own OS, built to qcow2
07-13newsite cairn.dunn.dev: estate documentation and published key fingerprints.
07-13newpipeline The cairn estate CI/CD catalog: build, sign, seal, gate, and promote components for bootc
07-13firstpipeline dunn.dev/cairn/pipeline · v9.0.0
07-13newbase The cairn reference image: from-scratch Fedora bootc compose with source-built, signed ZFS
07-13newgitlab-profile Group landing page for cairn.
07-13mr mergedgitlab gitlab-org/gitlab · !244561 Docs: troubleshoot AI responses truncated by infrastructure
07-12mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !4 docs: Add a diagram-first design overview
+ 3 MORE FROM p1-vp-vexer · SHOW+ 3 MORE FROM p1-vp-vexer · HIDE
07-11mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !3 docs: Record the corroborator design as ADRs 0010-0012
07-11mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !2 feat: GitLab CNA advisory source and G4 reconcile gate
07-10mr mergedp1-vp-vexer gitlab-com/public-sector/platform-one/p1-vp-vexer · !1 feat(emit): Add CycloneDX 1.7 VDR renderer
07-10pr mergedosbuild/osbuild.github.io docs/user-guide: document part_type, part_label and part_uuid
07-09mr mergedgitlab gitlab-org/gitlab · !240198 Add AiTracking for Merge Commit Message Generation
07-09mr mergedgitlab-runner gitlab-org/gitlab-runner · !6937 Add RHEL-family libvirt base image, fix --os-variant
07-08mr mergedgitlab-runner gitlab-org/gitlab-runner · !6936 Rootless Podman resource limits (cgroups v2) and socket safe
07-07mr mergedgitlab-runner gitlab-org/gitlab-runner · !6938 Fix nonexistent timeout key names in Custom executor
07-02mr mergedgitlab gitlab-org/gitlab · !240662 Add AiTracking for Merge Request Summary
07-02mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !50 docs(site): accuracy pass, diagrams, and demo deep-links
+ 2 MORE FROM manifold · SHOW+ 2 MORE FROM manifold · HIDE
07-02mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !49 docs(readme): clean doc-link connectors
07-02mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !48 docs(site): add hand-authored Astro docs site

June 2026

SHOW 97 EVENTSHIDE EVENTS

Mostly public-sector/utilities/manifold and public-sector/pipeline; 5 releases; 1 essay; landed in gitlab-org/gitlab, ZL154/JellyfinSecurity, and ClickHouse/clickhouse-docs.

06-30majorpipeline dunn.dev/pipeline · 3.0.0
06-30mr mergedgitlab gitlab-org/gitlab · !241206 Add AiTracking for Code Review Summary
06-30mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !46 feat(renderer): clickable About pipeline stages + Dormant Ex
+ 41 MORE FROM manifold · SHOW+ 41 MORE FROM manifold · HIDE
06-30mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !47 test: date-independent collector suite + de-flaked client id
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !45 fix(dashboard): names toggle, cohort key users, ego-network
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !44 feat(seeder): add additive growth pass for trend detection
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !43 fix(collector): exclude the authenticated collecting user fr
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !42 fix(dashboard): UX polish pass 4 (trends 404 gate + zero-mat
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !41 fix(dashboard): UX polish pass 3 for the stakeholder demo
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !40 fix(dashboard): consolidate duplicate Profiles archetype fil
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !39 fix(dashboard): UX polish pass 1 for the stakeholder demo
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !38 fix(dashboard): remove redundant Show Names toggle (filters/
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !37 fix(dashboard): declutter Influence ego-network edge labels
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !36 fix(dashboard): make chart domain labels readable on three v
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !35 fix(dashboard): repair three UX defects on Gaps, About, and
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !34 fix(dashboard): escape instance data at innerHTML sinks (XSS
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !33 build(docker): run container as non-root, drop dead module d
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !32 docs: point live-demo link at namespace Pages URL
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !31 perf(client): tune HTTP transport for concurrent same-host c
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !30 perf(collector): stream data-file writes to cap serializatio
06-29mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !29 fix(collector): use real incremental window and cover CI-act
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !28 feat(analyzer): composite sensitivity/uncertainty report
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !27 fix(analyzer): momentum on a fixed reference scale + has_tre
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !26 feat(analyzer): P4 scoring methodology -- one normalization
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !25 feat(analyzer): influence from eigenvector centrality over t
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !24 fix(analyzer): deterministic ordering -- stable sorts with t
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !23 refactor(analyzer): centralize scoring weights/thresholds in
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !22 feat(render): emit Pages _headers with CSP and security head
06-28mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !21 docs: accuracy pass -- live demo, SECURITY fixes, CHANGELOG
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !20 chore: remove unused keyset paginator and retry adapter
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !19 chore(ci): clear lint findings, make golangci-lint a require
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !18 chore: clear golangci-lint findings in production code
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !17 chore(ci): run tests under -race, add coverage ratchet, igno
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !16 fix: serve healthz path/address and seeder archetype constan
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !15 fix: validate schema version on read; guard zero user id in
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !14 fix: remove non-functional --domains flag; wire run trend de
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !13 fix: config validation and flag-override precedence
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !12 fix: collection fails loud -- admin pre-check, per-stage err
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !11 fix: attribute pipelines to the pipeline user, guard zero pr
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !10 fix: MR/issue identity and window semantics
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !9 fix: match real GitLab event action_name values
06-27mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !8 fix: stamp real version, align Go to 1.24
06-26mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !7 chore: update Renovate preset reference to converged path
06-05mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !6 chore(ci): adopt pipeline catalog v4.0.0 (build/sign split)
06-27mr mergedreference gitlab-com/public-sector/reference · !12 fix(agents-md): enforce the conditional-files table (closes
+ 6 MORE FROM reference · SHOW+ 6 MORE FROM reference · HIDE
06-26mr mergedreference gitlab-com/public-sector/reference · !22 docs(vale): prose burn-down toward gitlab-docs ideals (516 -
06-26mr mergedreference gitlab-com/public-sector/reference · !21 chore: SVG comment XML-validity + drop stale "stamp time" pr
06-26mr mergedreference gitlab-com/public-sector/reference · !20 refactor(standards): surgical prune, 23 standards to 19
06-26mr mergedreference gitlab-com/public-sector/reference · !19 refactor: just build + retire the scaffold script for an SSO
06-26mr mergedreference gitlab-com/public-sector/reference · !18 fix(templates): clean exemplars — pass the oracle, green on
06-26mr mergedreference gitlab-com/public-sector/reference · !14 chore: converge Renovate preset and migrate deprecated manag
06-26mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !6 chore: adopt shared Public Sector Renovate preset
06-26mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !29 chore: update Renovate preset reference to converged path
+ 10 MORE FROM p1-vp-generator · SHOW+ 10 MORE FROM p1-vp-generator · HIDE
06-10mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !28 feat: justfile as single command source + CI re-maps onto it
06-10mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !27 fix: helm in image + fail-loud chart extraction + shipped co
06-09mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !26 chore: cut cruft before v7.0.0 retag
06-09mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !25 feat: --vendor-package profile (Repo1 catalog as one flag)
06-09mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !24 refactor: maintainability sweep before v7.0.0 retag
06-09mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !23 ci: auto-publish a GitLab Release on every tag
06-09mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !19 chore: v7.0.0 release prep (rebase, reconcile, identity refr
06-05mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !22 fix(drift): self-health warns, only sentinel drift fails (br
06-05mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !21 chore(ci): adopt pipeline catalog v4.0.0 (build/sign split)
06-04mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !20 feat: reduce VP catalog scope (Levers 1-4 + variant-only emi
06-26mr mergedassay gitlab-com/public-sector/utilities/assay · !6 chore: update Renovate preset reference to converged path
06-26mr mergedpostern gitlab-com/public-sector/utilities/postern · !17 chore: update Renovate preset reference to converged path
+ 3 MORE FROM postern · SHOW+ 3 MORE FROM postern · HIDE
06-05mr mergedpostern gitlab-com/public-sector/utilities/postern · !16 chore(ci): adopt pipeline catalog v4.0.0 (build/sign split)
06-04mr mergedpostern gitlab-com/public-sector/utilities/postern · !14 docs: hand-authored Astro site at site/
06-03mr mergedpostern gitlab-com/public-sector/utilities/postern · !10 chore: add @graysongordon-gl as codeowner
06-26mr mergedtach gitlab-com/public-sector/utilities/tach · !8 chore: update Renovate preset reference to converged path
+ 1 MORE FROM tach · SHOW+ 1 MORE FROM tach · HIDE
06-05mr mergedtach gitlab-com/public-sector/utilities/tach · !7 chore(ci): adopt pipeline catalog v4.0.0 (build/sign split)
06-26mr mergedkaniko gitlab-com/public-sector/kaniko · !15 chore: converge Renovate preset and migrate deprecated manag
+ 1 MORE FROM kaniko · SHOW+ 1 MORE FROM kaniko · HIDE
06-05mr mergedkaniko gitlab-com/public-sector/kaniko · !14 chore(ci): adopt pipeline catalog v4.0.0 (build/sign split)
06-26pr mergedZL154/JellyfinSecurity feat: configurable SSRF allowlist for non-RFC1918 IdP addresses (#103)
06-26pr mergedZL154/JellyfinSecurity feat(#104): admin endpoint to re-arm MustSetPassword for no-SMTP local
06-19mr mergedpipeline gitlab-com/public-sector/pipeline · !75 feat(gate): L0 automerge gate with customer-shipping human-s
+ 11 MORE FROM pipeline · SHOW+ 11 MORE FROM pipeline · HIDE
06-18mr mergedpipeline gitlab-com/public-sector/pipeline · !74 chore(renovate): converge shared preset to root renovate-con
06-09mr mergedpipeline gitlab-com/public-sector/pipeline · !72 fix(release): reflow annotated tag body for clean release-pa
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !69 fix(verify): stage-gate after sign + guard :latest (v4.0.2)
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !68 fix(catalog): image input default didn't interpolate compone
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !67 fix(catalog): hygiene -- vale image input, phantom inputs, r
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !66 refactor(catalog)!: retire build-container-buildah (sim -> c
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !62 feat(container)!: extract container-sign (catalog v4.0.0)
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !65 feat(registry-cleanup): cleanup policy component (catalog v4
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !56 feat(catalog-v3.4.0): ci-tools expansion + vale disable_rule
06-05mr mergedpipeline gitlab-com/public-sector/pipeline · !64 fix(lint): conform input-name rule to GitLab (allow hyphens)
06-04mr mergedpipeline gitlab-com/public-sector/pipeline · !61 fix(container-sbom): drop redundant reports:cyclonedx (Ultim
06-18mr mergedgitlab gitlab-org/gitlab · !240903 Add exact-events guards for remaining AiTracking features
06-17majormuxr nomograph/muxr · v3.0.0
06-15pr mergedClickHouse/clickhouse-docs docs: fix ClickStack collector env var CLICKHOUSE_USERNAME -> CLICKHOU
06-11majorpipeline nomograph/pipeline · v5.0.0
06-11newpipeline CI/CD catalog for the yotoshelf group
06-11firstpipeline yotoshelf/pipeline · 0.1.0
06-10newkratos-ldap LDAP bridge validating BIND and SEARCH against Ory Kratos for clients that only speak LDAP
06-10majorpipeline dunn.dev/immutable/pipeline · v8.0.0
06-10newextension WASM (component-model/WIT) extension substrate for the nomograph tools
06-10mr mergedgitlab gitlab-org/gitlab · !238370 Add AiTracking for Duo Chat REST API path

May 2026

SHOW 112 EVENTSHIDE EVENTS

Mostly public-sector/pipeline and public-sector/kaniko; 8 releases; 3 essays; landed in gitlab-org/gitlab, supersonic-app/supersonic, and supersonic-app/go-upnpcast.

05-30newbaser Multi-flavor qcow2 golden image builder for QEMU runner VMs (Fedora today; Alpine/NixOS as
05-24firstreference dunn.dev/reference · 0.2.0
05-24firstothala dunn.dev/othala · v0.1.1
05-24majorpipeline dunn.dev/immutable/pipeline · v4.0.0
05-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !18 chore: close reference-standard conformance gaps
+ 10 MORE FROM p1-vp-generator · SHOW+ 10 MORE FROM p1-vp-generator · HIDE
05-23mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !17 chore: changelog for v6.1.0
05-22mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !16 feat: chart 10.0.0 / GitLab 19.x support (closes #13)
05-22mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !14 feat: drift-detection self-health (H1 cadence + H2 token exp
05-22mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !13 feat: drift-detection subsystem (D1-D4)
05-22mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !15 chore: changelog for v6.0.0
05-21mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !8 feat: chart-coverage gate + chart-pin extraction (chart as c
05-20mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !7 feat: chart-driven version selection with patch-precision su
05-20mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !6 feat: comprehensive manifest expansion + scan reliability +
05-20mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !10 chore: ignore .lab-results/ artifact directory
05-20mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !9 chore: migrate to pipeline catalog v3.2.0 + adopt reference
05-22mr mergedgitlab gitlab-org/gitlab · !231001 Docs: Fix duo-cli package name and add offline flow executio
05-22mr mergedkaniko gitlab-com/public-sector/kaniko · !13 ci: adopt pipeline/release@v3.3.2 + bump other catalog pins
+ 12 MORE FROM kaniko · SHOW+ 12 MORE FROM kaniko · HIDE
05-22mr mergedkaniko gitlab-com/public-sector/kaniko · !12 feat: align to reference standards (.reference.yaml, CoC, AG
05-22mr mergedkaniko gitlab-com/public-sector/kaniko · !11 chore: ship-readiness cleanup (CODEOWNERS dedup, CHANGELOG t
05-22mr mergedkaniko gitlab-com/public-sector/kaniko · !10 ci: release-create job for tag pipelines
05-21mr mergedkaniko gitlab-com/public-sector/kaniko · !9 feat: brand assets + Pages site against the docs chrome
05-20mr mergedkaniko gitlab-com/public-sector/kaniko · !8 chore: OCI label minimum + prose cleanup
05-15mr mergedkaniko gitlab-com/public-sector/kaniko · !7 chore(ci): bump catalog to v2.5.0 + container-scan-summary +
05-15mr mergedkaniko gitlab-com/public-sector/kaniko · !6 chore: add OV-1 hero + avatar in paper palette
05-15mr mergedkaniko gitlab-com/public-sector/kaniko · !5 chore: add CODEOWNERS
05-15mr mergedkaniko gitlab-com/public-sector/kaniko · !4 chore(ci): kaniko Phase B -- swap bespoke verify-posture to
05-15mr mergedkaniko gitlab-com/public-sector/kaniko · !3 chore(ci): migrate to catalog v2.1.1 (snake_case + version b
05-14mr mergedkaniko gitlab-com/public-sector/kaniko · !2 feat: fips-strict-debug variant for GODEBUG=fips140=only bui
05-13mr mergedkaniko gitlab-com/public-sector/kaniko · !1 fix: quote echo line in fips-smoke script to avoid YAML colo
05-22mr mergedpipeline gitlab-com/public-sector/pipeline · !58 fix(images): prefix GOVULNCHECK_VERSION with v per Go module
+ 40 MORE FROM pipeline · SHOW+ 40 MORE FROM pipeline · HIDE
05-22mr mergedpipeline gitlab-com/public-sector/pipeline · !57 fix(release): preserve backtick-delimited content via --note
05-20mr mergedpipeline gitlab-com/public-sector/pipeline · !54 docs(changelog): v3.3.0 entry
05-20mr mergedpipeline gitlab-com/public-sector/pipeline · !53 feat(ci-latex): bake nodejs + npm + Chromium runtime libs in
05-20mr mergedpipeline gitlab-com/public-sector/pipeline · !50 chore(ci-latex): bump Fedora base 42 -> 44 (current stable)
05-20mr mergedpipeline gitlab-com/public-sector/pipeline · !47 chore(renovate): explicit fileMatch for gitlabci + dockerfil
05-20mr mergedpipeline gitlab-com/public-sector/pipeline · !46 feat: expose runner_tag input on compliance/attest/sbom/vale
05-20mr mergedpipeline gitlab-com/public-sector/pipeline · !45 feat(container): auto-inject OCI image-metadata build-args
05-19mr mergedpipeline gitlab-com/public-sector/pipeline · !44 feat(catalog): validation cleanup + pipeline-self-validates
05-18mr mergedpipeline gitlab-com/public-sector/pipeline · !41 fix(catalog): scheduled pipelines run renovate only
05-18mr mergedpipeline gitlab-com/public-sector/pipeline · !40 feat(catalog): catalog IS the Renovate runner (self-included
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !37 feat(catalog): declare artifacts.reports.cyclonedx (GitLab D
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !34 feat(catalog): dogfood ci-buildah for the catalog's own imag
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !31 feat(catalog): container-scan-summary component + vale no-fi
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !30 fix(release): strip PGP signature block from release notes
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !29 fix(posture-verify): honor $-refs in template_vars (double-q
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !28 feat(vale): add mode input (project | docs) for ruleset pres
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !27 fix(binary): conditional cosign install for non-catalog buil
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !26 docs(changelog): v2.1.0 entry
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !25 docs: buildkit POC findings + restrict to manual trigger
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !24 fix(ci-buildkit): rootlesskit v3.0.0 (was nonexistent v2.4.0
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !23 fix(ci-buildkit): bundle rootlesskit
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !22 ci(buildkit-poc): rootless buildkitd on SaaS runner
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !21 feat(catalog): build-container-buildah component + sim
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !20 fix(ci): drop redundant catalog publish; release-create auto
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !19 docs(changelog): v2.0.1 entry
05-15mr mergedpipeline gitlab-com/public-sector/pipeline · !18 fix(ci): glab CI auto-login for create-release job
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !17 fix(binary,sim): CWD-resilient binary template; simplify sim
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !16 docs(readme): add posture-verify + sim harness sections
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !15 feat(catalog): sim rig -- end-to-end smoke test of the binar
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !14 docs(audit): v2 inputs + delegation guidance vs upstream dep
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !13 fix(ci): guard CI_COMMIT_TAG against unbound on main pushes
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !12 feat(catalog): posture-verify component + sbom-attest orderi
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !11 feat(publish): glab repo publish catalog + v2.0.0 CHANGELOG
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !10 fix(images): unblock ci-buildkit (tar layout) + ci-rust (zig
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !9 fix(images): unblock ci-go, ci-rust, ci-buildkit; allow_fail
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !8 fix(images): drop curl from package list; curl-minimal alrea
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !7 feat(catalog): managed container images on UBI9
05-14mr mergedpipeline gitlab-com/public-sector/pipeline · !6 feat(catalog)!: v2 canonical template shape (foundation MR)
05-13mr mergedpipeline gitlab-com/public-sector/pipeline · !5 fix: vale binary install via temp dir + install command
05-13mr mergedpipeline gitlab-com/public-sector/pipeline · !4 feat: v1.6.0 -- five new components + container idempotency
05-22mr mergedreference gitlab-com/public-sector/reference · !11 feat(standards): introduce six new standards (release, templ
+ 8 MORE FROM reference · SHOW+ 8 MORE FROM reference · HIDE
05-21mr mergedreference gitlab-com/public-sector/reference · !10 feat(design): promote .flow-aside into shared chrome
05-21mr mergedreference gitlab-com/public-sector/reference · !9 feat(design): promote .copy-btn into shared chrome + clipboa
05-21mr mergedreference gitlab-com/public-sector/reference · !6 fix(pages): apk-install make before sync-design-assets
05-21mr mergedreference gitlab-com/public-sector/reference · !5 feat(chrome/lab): add about — page-foot framing block
05-21mr mergedreference gitlab-com/public-sector/reference · !4 fix(docs-template): link chrome to the reference's CDN URL (
05-21mr mergedreference gitlab-com/public-sector/reference · !3 fix(renovate): preset path syntax -- use // file-path form
05-21mr mergedreference gitlab-com/public-sector/reference · !2 vale: mechanical findings sweep
05-20mr mergedreference gitlab-com/public-sector/reference · !1 v1.1.0 prep: paper template, build-time previews, agent surf
05-17mr mergedpostern gitlab-com/public-sector/utilities/postern · !13 docs(readme): rewrite for v2 with progressive disclosure
+ 5 MORE FROM postern · SHOW+ 5 MORE FROM postern · HIDE
05-16mr mergedpostern gitlab-com/public-sector/utilities/postern · !11 feat!: v2 architecture — Source interface, deferred YAML, se
05-15mr mergedpostern gitlab-com/public-sector/utilities/postern · !7 chore(ci): bump catalog to v2.5.0 + adopt container-scan-sum
05-15mr mergedpostern gitlab-com/public-sector/utilities/postern · !6 chore(ci): bump catalog to v2.2.0 + tighten container_scanni
05-15mr mergedpostern gitlab-com/public-sector/utilities/postern · !5 chore(ci): bump catalog to v2.1.1 + adopt PST renovate prese
05-15mr mergedpostern gitlab-com/public-sector/utilities/postern · !4 feat(ci): migrate catalog v1.1.1 -> v2.1.0
05-15newimmutable Estate site for dunn.dev/immutable — bootc base, host instance, ISO builder catalog.
05-15mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !5 chore(ci): bump catalog to v2.5.0 + add Code-Quality
+ 1 MORE FROM manifold · SHOW+ 1 MORE FROM manifold · HIDE
05-15mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !4 feat(ci): migrate catalog from v1.1.1 to v2.2.0 + adopt PST
05-15mr mergedassay gitlab-com/public-sector/utilities/assay · !5 chore(ci): bump catalog to v2.5.0 + add Code-Quality
+ 3 MORE FROM assay · SHOW+ 3 MORE FROM assay · HIDE
05-15mr mergedassay gitlab-com/public-sector/utilities/assay · !4 chore(ci): bump catalog to v2.2.0 + exercise binary builds o
05-15mr mergedassay gitlab-com/public-sector/utilities/assay · !2 chore: bump catalog to v2.1.1 + adopt PST renovate preset +
05-15mr mergedassay gitlab-com/public-sector/utilities/assay · !1 feat(ci): migrate catalog to v2.1.0
05-15mr mergedtach gitlab-com/public-sector/utilities/tach · !6 chore(ci): bump catalog to v2.5.0 + container-scan-summary +
+ 3 MORE FROM tach · SHOW+ 3 MORE FROM tach · HIDE
05-15mr mergedtach gitlab-com/public-sector/utilities/tach · !5 chore(ci): bump catalog to v2.2.0 + tighten container_scanni
05-15mr mergedtach gitlab-com/public-sector/utilities/tach · !4 chore(ci): bump catalog to v2.1.1 + adopt PST renovate prese
05-15mr mergedtach gitlab-com/public-sector/utilities/tach · !3 feat(ci): migrate catalog to v2.1.0
05-13pr mergedsupersonic-app/supersonic Populate richer DIDL-Lite metadata for DLNA cast
05-13pr mergedsupersonic-app/go-upnpcast Add music metadata + `<res>` audio attributes to DIDL-Lite
05-12newreference Public guardrails for shipping projects in the dunn.dev estate. Conformance contracts, exe
05-09newtutti LAN audio renderer probe. Walks SSDP/mDNS, runs Go control-point library decisions, drives
05-09firsttutti dunn.dev/tutti · v0.1.0
05-09majorpipeline dunn.dev/pipeline · 2.0.0
05-08newnarjo-eversolo-upnp A debug bundle for Narjo: wire-level SSDP, descriptor, and SOAP evidence plus Python repro
05-08firstbairn dunn.dev/bairn · v0.1.0
05-08pr closedwithastro/astro Pin Vite 7 when running `astro add tailwind`
05-07newbairn Personal photo archive for Famly-using households. Pulls images and videos to disk with fu
05-05firstworkflow nomograph/workflow · v0.3.0
05-04firstpatinate dunn.dev/patinate · v0.1.1
05-02newothala Ory for your home. A self-hosted Kratos + Hydra identity provider for a personal estate, f

April 2026

SHOW 69 EVENTSHIDE EVENTS

Mostly public-sector/platform-one/p1-vp-generator and public-sector/utilities/closure-check; 13 releases; 3 essays; landed in gitlab-org/gitlab, sigstore/docs, and gitlab-org/orbit/knowledge-graph.

04-30newpatinate Render Strava activity into stylized heatmap posters and inline SVG. Real polyline-circle
04-30mr mergedtach gitlab-com/public-sector/utilities/tach · !2 feat: v0.2.0 -- breaking schema bump, new derived fields, vu
+ 1 MORE FROM tach · SHOW+ 1 MORE FROM tach · HIDE
04-23mr mergedtach gitlab-com/public-sector/utilities/tach · !1 feat: v0.1.1 -- UX ship-blockers, hardening, and refactor
04-24newjig Agent-shape testing harness that measures how an LLM-driven agent uses a tool's CLI, score
04-24majormuxr nomograph/muxr · v1.0.0
04-24mr mergedgitlab gitlab-org/gitlab · !231629 Docs: Add offline deployment guide for GitLab Duo Self-Hoste
04-20newbeacon Realtime WebSocket relay for the nomograph-claim substrate. Cloudflare Worker + Durable Ob
04-20majorsynthesist nomograph/synthesist · v2.0.0
04-19newworkflow Shared workflow layer for nomograph claim-substrate tools: Store adapter, phase state mach
04-19newclaim Bi-temporal CRDT claim substrate with asserter attribution.
04-19firstclaim nomograph/claim · v0.1.0
04-19writingThe Larder Lesson writing
04-17majorpipeline nomograph/pipeline · v3.0.0
04-16firstliam nomograph/liam · v0.1.7
04-16firstglean nomograph/glean · v0.1.0
04-16pr opensigstore/sigstore-ruby docs: add Ruby API documentation to README
04-16pr mergedsigstore/docs docs: add signing-config and trusted-root workflow for self-hosted inf
04-15newliam nomograph/liam
04-15newglean nomograph/glean
04-15mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !5 feat: add FIPS AI Gateway and DAP Flow Executor to VP catalo
+ 4 MORE FROM p1-vp-generator · SHOW+ 4 MORE FROM p1-vp-generator · HIDE
04-14mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !4 chore: reorder badges -- PubSec first
04-14mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !3 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !2 chore: add CODEOWNERS
04-14mr mergedp1-vp-generator gitlab-com/public-sector/platform-one/p1-vp-generator · !1 feat: migrate build/verify to CI catalog, add Renovate
04-14mr mergedgitlab gitlab-org/gitlab · !230991 Docs: Add FIPS AI Gateway image to install docs and FIPS com
04-14mr mergedpostern gitlab-com/public-sector/utilities/postern · !3 chore: reorder badges -- PubSec first
+ 2 MORE FROM postern · SHOW+ 2 MORE FROM postern · HIDE
04-14mr mergedpostern gitlab-com/public-sector/utilities/postern · !2 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedpostern gitlab-com/public-sector/utilities/postern · !1 feat: add security scanning, SECURITY.md, Renovate, bump cat
04-14mr mergedstoryping-bootstrap gitlab-com/public-sector/utilities/storyping-bootstrap · !4 chore: reorder badges -- PubSec first
+ 2 MORE FROM storyping-bootstrap · SHOW+ 2 MORE FROM storyping-bootstrap · HIDE
04-14mr mergedstoryping-bootstrap gitlab-com/public-sector/utilities/storyping-bootstrap · !3 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedstoryping-bootstrap gitlab-com/public-sector/utilities/storyping-bootstrap · !2 chore: add CODEOWNERS
04-14mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !3 chore: reorder badges -- PubSec first
+ 2 MORE FROM manifold · SHOW+ 2 MORE FROM manifold · HIDE
04-14mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !2 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedmanifold gitlab-com/public-sector/utilities/manifold · !1 feat: bump Go 1.24, add golangci-lint, Renovate, catalog v1.
04-14mr mergedclosure-check gitlab-com/public-sector/utilities/closure-check · !4 chore: reorder badges -- PubSec first
+ 3 MORE FROM closure-check · SHOW+ 3 MORE FROM closure-check · HIDE
04-14mr mergedclosure-check gitlab-com/public-sector/utilities/closure-check · !3 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedclosure-check gitlab-com/public-sector/utilities/closure-check · !2 chore: add CODEOWNERS
04-14mr mergedclosure-check gitlab-com/public-sector/utilities/closure-check · !1 chore: add MIT LICENSE
04-14mr mergedserviceping-archive gitlab-com/public-sector/utilities/serviceping-archive · !3 chore: reorder badges -- PubSec first
+ 2 MORE FROM serviceping-archive · SHOW+ 2 MORE FROM serviceping-archive · HIDE
04-14mr mergedserviceping-archive gitlab-com/public-sector/utilities/serviceping-archive · !2 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedserviceping-archive gitlab-com/public-sector/utilities/serviceping-archive · !1 chore: add CODEOWNERS
04-14mr mergedpipeline gitlab-com/public-sector/pipeline · !3 chore: reorder badges -- PubSec first
+ 2 MORE FROM pipeline · SHOW+ 2 MORE FROM pipeline · HIDE
04-14mr mergedpipeline gitlab-com/public-sector/pipeline · !2 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedpipeline gitlab-com/public-sector/pipeline · !1 feat: v1.1.0 supply chain hardening and Renovate
04-14mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !5 chore: reorder badges -- PubSec first
+ 3 MORE FROM storyping · SHOW+ 3 MORE FROM storyping · HIDE
04-14mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !4 chore: standardize badges with GitLab Public Sector group ba
04-14mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !3 chore: add CODEOWNERS
04-14mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !2 feat: migrate to CI catalog, bump Go 1.24, add security scan
04-13mr mergeddsop-scripts gitlab-org/build/dsop-scripts · !79 fix: Update hardening_manifest maintainer from Steven Terhar
04-09newgitlab-profile Nomograph Labs group profile
04-08firstsynthesist nomograph/synthesist · v1.0.0
04-07newpipeline CI/CD components for dunn.dev web deploys
04-07firstpipeline dunn.dev/pipeline · v1.0.0
04-07newpipeline CI/CD component catalog for all nomograph builds. Rust CLI, LaTeX papers, CloudFlare Pages
04-07firstpipeline nomograph/pipeline · v1.0.0
04-07firstkit nomograph/kit · v0.1.0
04-07mr mergedgitlab gitlab-org/gitlab · !229504 Docs: Add authorization behavior to GraphQL API page
04-06newdesign dunn.dev design system. Mark, tokens, typography.
04-06newkit Verified tool registry manager. Manages developer toolchains from git-based registries.
04-06firstrune nomograph/rune · v0.2.2
04-06mr mergedknowledge-graph gitlab-org/orbit/knowledge-graph · !778 feat(testkit): add assert_all_edge_types_covered for neighbo
04-05newkits Verified tool registry for kit. Pinned versions, checksums, cosign signatures.
04-05newrune Registry-fronting manager for AI coding agent skills, agents, and rules; rune push is auth
04-05newlever Reference architecture for LLM-correct codebases. Four primitives: derived obligations, pr
04-05writingInference on a Schedule writing
04-04newbootc-base-imagectl Rust rootfs-transform tool, frozen at v0.1.4-gl
04-04firstbootc-base-imagectl dunn.dev/immutable/bootc-base-imagectl · v0.1.3-gl
04-04writingThe Hunt for Leverage writing
04-01firstkebnf nomograph/kebnf · v0.2.1

March 2026

SHOW 49 EVENTSHIDE EVENTS

Mostly bootc-dev/bootc and anomalyco/opencode; 2 releases; 10 essays; landed in gitlab-org/modelops/applied-ml/code-suggestions/ai-assist, bootc-dev/bootc, gitlab-org/gitlab, and jackyzha0/quartz.

03-29writingGet Lamp writing
03-28firstmuxr nomograph/muxr · v0.1.0
03-27newmuxr Harness session multiplexer for AI coding workflows. Owns the harness/campaign/session/seg
03-26newbasef FROM-scratch Fedora bootc base images with source-built ZFS and NVIDIA kmods
03-26mr mergedai-assist gitlab-org/modelops/applied-ml/code-suggestions/ai-assist · !4518 feat: Make Duo Chat max_tokens configurable for self-hosted
03-26pr closedbootc-dev/bootc feat(container): add finalize-rootfs subcommand for building base imag
+ 2 MORE FROM bootc-dev/bootc · SHOW+ 2 MORE FROM bootc-dev/bootc · HIDE
03-26pr closedbootc-dev/bootc feat(install): enable systemd-boot for ostree backend
03-26pr closedbootc-dev/bootc feat(install): defer LUKS encryption to first boot
03-25pr closedanomalyco/opencode feat(tui): add persistent token usage display in session footer
+ 2 MORE FROM anomalyco/opencode · SHOW+ 2 MORE FROM anomalyco/opencode · HIDE
03-24pr closedanomalyco/opencode feat(ui): add copy format options -- Markdown and Email-ready HTML
03-24pr closedanomalyco/opencode feat(ui): add copy format options -- Markdown and Email-ready HTML
03-24pr mergedbootc-dev/bootc fix(install): set DM_DISABLE_UDEV=1 to prevent dm semaphore deadlock i
03-24writingAI Harnesses Are For Everyone writing
03-24writingLLM-Mediated Experimentation writing
03-22newgo-yoto Go client for the Yoto API — 96% endpoint coverage, 100% field coverage, validated weekly
03-17newvalidation VM-based validation harness
03-17newcaddy Caddy with Cloudflare DNS-01 plugin for ACME — consumed by instance images
03-17mr mergedgitlab gitlab-org/gitlab · !226947 Docs: Clarify baseline pipeline selection for MR metrics rep
03-16pr mergedbootc-dev/bootc initramfs: Inherit SELinux label on transient root tmpfs
03-15newfixtures Test fixtures for YotoShelf. Public domain classic stories and nursery rhymes with TTS aud
03-15newgitlab-profile Group profile for the YotoShelf project.
03-15newdesign YotoShelf Design Language System. Tokens, components, and living reference site for the Yo
03-15newyotoshelf.dev YotoShelf project website and documentation.
03-15newyotoshelf A self-hosted library manager for Yoto Make Your Own audio cards. Create collections, auth
03-13newinstance Forkable reference instance on basef for dunn.dev/immutable
03-13newbasec CentOS Stream 10 bootc base, archived for reference
03-13newgitlab-profile Landing page for dunn.dev/immutable — homelab bootc estate
03-13newpipeline CI/CD Catalog components for FROM-scratch bootc images
03-13firstpipeline dunn.dev/immutable/pipeline · v1.0.0
03-13pr mergedbootc-dev/bootc deploy: fix progress bar math for containers-storage transport
03-13pr mergedbootc-dev/bootc podstorage: fsync storage root before and after creating .bootc_labele
03-11newlatex Nomograph Labs paper templates. LaTeX style files and CI image for academic and manuscript
03-10newsysml-bench-results Raw benchmark results and statistical analysis.
03-10newkebnf Convert OMG KeBNF grammars to ANTLR4 and tree-sitter. Parses all KerML and SysML v2 rules.
03-10newtree-sitter-sysml Tree-sitter grammar for SysML v2. Incremental parsing with bindings for Rust, Node, Python
03-10newsysml-bench Evaluation harness for measuring how well AI models perform on SysML v2 modeling tasks.
03-10newsysml SysML v2 CLI and MCP server. Composable tools for AI to query, validate, and render engine
03-10mr mergedgitlab gitlab-org/gitlab · !222395 Resolve "Docs: Clarify Custom Agent tool availability by env
03-08newsynthesist Specification graph manager for AI-augmented projects, on the nomograph-claim substrate.
03-05writingBack to Composable writing
03-03writingMeeting Notes RAG writing
03-02newcaddy-cloudflare ARCHIVED — moved to dunn.dev/immutable/caddy-cloudflare
03-02pr mergedjackyzha0/quartz fix: await micromorph() to prevent race condition with nav event handl
03-01newhomelab [Quarto](https://quarto.org/) book of the homelab journey, focused on design decisions wit

February 2026

SHOW 9 EVENTSHIDE EVENTS

Mostly gitlab-org/gitlab and dunn.dev/playbill; 0 releases; 4 essays; landed in gitlab-org/gitlab.

02-27mr mergedgitlab gitlab-org/gitlab · !224768 Docs: Fix Duo analytics availability details and add missing
02-22newplaybill TOML-driven video program assembler that sequences title cards, video clips, and credits i
02-22newpinboard Ken Burns-style video generator that composites photos as vintage Polaroids on panoramic b
02-15writingA Reading Roadmap for My Kids writing
02-15writingSelf Inventory writing
02-15writingThings I Want to Build writing
02-10mr mergedstoryping-bootstrap gitlab-com/public-sector/utilities/storyping-bootstrap · !1 feat: verify binary signature with cosign before extraction
02-10mr mergedstoryping gitlab-com/public-sector/utilities/storyping · !1 feat: cosign keyless signing for binaries

January 2026

553 contributions logged privately, no public releases; 0 essays.

heads-down publicly — 553 contributions logged privately this month, volume without detail

December 2025

234 contributions logged privately, no public releases; 0 essays.

heads-down publicly — 234 contributions logged privately this month, volume without detail

November 2025

SHOW 1 EVENTHIDE EVENTS

Mostly dunn.dev/immutable-base; 0 releases; 0 essays.

11-15newimmutable-base ARCHIVED — moved to dunn.dev/immutable/basec

Data refreshed 2026-09-26 · public APIs only · no tokens, no LLM