Project Bluefin

Participation

Human and automated contributions with current contributors.

Show the numbers

Human and automation activity data for October 2026 UTC (2026-10-01 to 2026-10-31)

Label	Human	Automation
Report period	865	677

🏆 Hive Leaderboard

Hive Leaderboard: Community Heroes

Celebrating our top community builders across the Project Bluefin factory

RankContributorImpactProjectsMilestone

#01@hanthor251 PRscommontestsuiteactions+3Top Hero#02@castrojo154 PRscommondakotatestsuite+6High Velocity#03@kylerankin95 PRscommondakotatestsuite+7High Velocity#04@dtg0110081 PRscommondakotatestsuite+6High Velocity#05@jeefy53 PRsserverHigh Velocity#06@Danathar36 PRscommontestsuiteactions+5High Velocity#07@mendezr29 PRscommontestsuiteserver+4High Velocity#08@mrbobbytables28 PRstestsuiteserverdocumentation+2High Velocity#09@arteeh26 PRscommontestsuiteserver+3High Velocity#10@ahmedadan24 PRsdakotaserverHigh Velocity#11@thatguywob21 PRscommontestsuiteactions+2New Light#12@Karibhou20 PRstestsuitedocumentationutah+1New Light#13@codebymarshall16 PRstestsuiteactionsdocumentation+3New Light#14@j1mc11 PRscommontestsuiteserver+2New Light#15@theMimolet6 PRscommondakotautahHigh Velocity#16@buggtb3 PRscommonutah#17@juanresendiz8133 PRstestsuitedocumentationNew Light#18@repires2 PRscommonutah#19@bketelsen1 PRiso#20@HuntedRaven71 PRcommon

✨

Welcome New Lights (6)

First-time guardians who made their mark in the factory this month.

@thatguywob@j1mc@Karibhou@codebymarshall@juanresendiz813@xordspar0

Release details remain on the canonical /changelogs surface.

Completed work​

• fix(bootc): treat composefs "already up to date" refusal as success by @​kylerankin in #1568
• fix(flatpak): make FlatPark filter readable from sandboxed app stores by @​castrojo in #1595
• chore: update motd by @​theMimolet in #1567
• feat(bazaar): add popular AI editors to curated section by @​castrojo in #1552
• fix(bazaar): offer native installs for Cursor and Antigravity by @​mendezr in #1573
• feat(desktop): ship Compass launcher defaults by @​castrojo in #1356
• ci: keep pull request check tools at reviewed versions by @​thatguywob in #1589
• fix(brewfiles): trust third-party tap items so Homebrew 6+ loads them by @​hanthor in #1590
• docs: correct the test workflow version note by @​j1mc in #1581
• feat: add dakota extensions defaults + some renaming by @​theMimolet in #1523
• feat(flatpak): add flatpark system remote with deduplication filter by @​castrojo in #1549
• ci(release): install a pinned, checksum-verified git-cliff by @​Danathar in #1553
• ci(renovate): label the testsuite pin # v1 so Renovate can bump it by @​Danathar in #1546
• feat(gnome): bind Goose to Copilot+Enter and Ctrl+Alt+Backspace by @​castrojo in #1485
• fix(brew): drop Tavern from system-dx-flatpaks Brewfile by @​castrojo in #1551
• ci: keep assistant setup tools up to date by @​mendezr in #1574
• fix: route Bluefin and Bluefin LTS bug reports to projectbluefin/common by @​kylerankin in #1566
• fix: stop the bug-report tool repeating the shared-logs link on retry by @​kylerankin in #1561
• fix(fastfetch): drop rpm-ostree and ship stat placeholders for bootc images by @​castrojo in #1491
• docs(chairlift): update the vendored attribution to the cask-pin release by @​kylerankin in #1550
• docs(skills): document ChairLift GUI vs helper version skew by @​kylerankin in #1547
• docs(renovate): correct stale ChairLift rationale in packageRule by @​kylerankin in #1548
• fix: skip app catalog refreshes on metered connections by @​arteeh in #1538
• ci(validate): survive transient GitHub API failures in required checks by @​castrojo in #1470
• fix(gnome): launch Mission Center directly from the system menu by @​castrojo in #1500
• fix: clean-system prune only dangling images to match preview by @​kylerankin in #1488
• fix(check-oci-refs): time out the registry check so a stalled build cannot hang forever by @​kylerankin in #1522
• fix(homebrew): use the core casks for Zed and Antigravity CLI by @​Danathar in #1531
• fix: drop disabled font-opendyslexic cask from the Fonts collection by @​kylerankin in #1536
• docs(ghostty): link Dakota-specific theme override by @​castrojo in #1528
• fix: clarify the drawing tablet installer description by @​arteeh in #1537
• fix: stop audio configuration errors at login by @​arteeh in #1539
• fix(bazaar): denylist Steam by @​castrojo in #1542
• fix(ci): retry truncated GHCR bodies and malformed JSON in check-oci-refs by @​j1mc in #1472
• feat: added a more ptyxis like look to ghostty by @​HuntedRaven7 in #1495
• chore(motd): update sha + remove umotd tags by @​theMimolet in #1483
• docs(skills): replace deleted docs/design link in image-identity.md by @​castrojo in #1492
• ci(e2e): bump testsuite pin to pick up extension-default fix by @​castrojo in #1465
• test(brew-preinstall): cover stranded ublue-os/tap chairlift migration and rollback by @​castrojo in #1469
• fix(brew-preinstall): migrate legacy chairlift before the hash early-exit by @​dtg01100 in #1422
• fix(prow): pass app-ref pin to reusable transfer workflow by @​dtg01100 in #1451
• fix: point Ask Bluefin at ChairLift --ask-bluefin dispatcher by @​dtg01100 in #1430
• chore(deps): enable automerge for ChairLift release bumps by @​castrojo in #1425
• fix(actions-security): strip YAML quotes from uses: and catch flow-list pull_request_target by @​Danathar in #1434
• fix(chairlift): bump CHAIRLIFT_SCHEMA_REF to match the shipped cask by @​kylerankin in #1463
• feat(brew): install chairlift and bluefin-wallpapers-extra from projectbluefin/tap by @​castrojo in #1459
• feat(artwork): swap wallpaper container to projectbluefin/bluefin-wallpapers-gnome by @​castrojo in #1435
• fix(chairlift): point Help links at the pages their titles name by @​castrojo in #1414
• fix(apps): stop OpenTabletDriver user service on uninstall by @​kylerankin in #1457
• fix(chairlift): bump CHAIRLIFT_SCHEMA_REF to match the shipped cask by @​dtg01100 in #1452
• fix(oem): install the Framework system tool under its upstream cask name by @​dtg01100 in #1450
• chore: update motd by @​theMimolet in #1448
• fix: record setup version only after the hook body succeeds by @​kylerankin in #1196
• chore(prow): add /transfer command support for triagers by @​castrojo in #1444
• chore(printing): remove printer CI, fixtures, and tracking docs by @​castrojo in #1439
• feat: gate Prow triage commands and open area classification by @​castrojo in #1429
• feat: move to Prow-based development by @​castrojo in #1426
• fix(countme): report Bluefin Server (DDI, no bootc) by @​dtg01100 in #1419
• fix(chairlift): bump CHAIRLIFT_SCHEMA_REF to match the shipped cask by @​dtg01100 in #1403
• docs: remove dead specs, configs, and duplicated checks by @​castrojo in #1401
• fix(ci): restore literal @v1 on issue lifecycle workflow refs by @​castrojo in #1404
• docs(label-workflow): clarify manual maintainer release and verification gates by @​castrojo in #1398
• feat(lifecycle): expand intake autolabelling and enforce 4-kind taxonomy by @​castrojo in #1397
• docs(printer-app): record the unreviewed-release limit common cannot verify by @​dtg01100 in #1384
• docs(label-workflow): match shared bot messages and released gate behavior by @​castrojo in #1390
• feat: adopt shared issue lifecycle and reusable onboarding by @​castrojo in #1383
• fix(nvidia): save VRAM where systemd-sleep may write it by @​hanthor in #1374
• docs(bonedigger): correct stale lifecycle ownership in SKILL.md by @​dtg01100 in #1382
• docs: complete common label migration guidance by @​castrojo in #1378
• fix: preserve maintainer and reporter lifecycle Markdown formatting by @​castrojo in #1381
• fix: preserve human issue acceptance until actual implementation merges by @​castrojo in #1380
• fix: state exact Common lifecycle actions by @​castrojo in #1379
• fix: keep common backlog migration quiet by @​castrojo in #1376
• feat: streamline common issue intake and lifecycle by @​castrojo in #1367
• docs(devmode): correct moby-engine claim in docker daemon caveat by @​dtg01100 in #1363
• docs(factory-improvement): note common uses pilot lifecycle, not 1-triage/3-clanker-queue by @​dtg01100 in #1369
• feat(ci): check the printer forks' shared FSDK junction contract by @​dtg01100 in #1291
• docs: update gutenprint FSDK junction testing HEAD by @​kylerankin in #1352
• docs(skills): update clankers to agents.projectbluefin.io redirect landing page by @​castrojo in #1364
• fix(toggle-testing): refuse on testing-only and dated-testing tags by @​kylerankin in #1334
• fix(libsetup): create versioning dir before opening the flock lock by @​kylerankin in #1326
• docs(factory): reframe lifecycle ownership as Hive-managed by @​dtg01100 in #1351
• docs(workflows): correct lifecycle ownership framing by @​mendezr in #1360
• fix(bonedigger-report): restore hardware info capture in ujust report by @​dtg01100 in #1340
• docs: correct lifecycle ownership in SHA pinning guidance by @​mendezr in #1348
• docs(release-promotion): point fsdk-junction doc at scripts/check-printing-junction.py by @​dtg01100 in #1345
• docs(skills): record bootc upgrade unified-storage overlay bug + workaround (#1332) by @​dtg01100 in #1344
• docs: quality sweep and specification alignment by @​castrojo in #1349
• feat(chairlift): ship the helper, policy and schemas from the pinned release by @​castrojo in #1279
• fix(pwquality): disable dictionary check so initial-setup password reads strong by @​kylerankin in #1282
• feat(just): wire up ujust contribute by @​buggtb in #1278
• ci: derive the unit-tests catalog from disk (#1105) by @​kylerankin in #1261
• fix(just): drop the needlessly-escaped }} from clean-system preview and gate justfile brace syntax by @​dtg01100 in #1286
• feat(gnome): enable rounded blur on the shell popups by @​dtg01100 in #1287
• docs(release): record printer-app version semantics contract and check it by @​dtg01100 in #1289
• docs(security): establish org-wide GitHub Actions security baseline by @​repires in #1189
• feat(countme): replace bluefin-countme with a daily projectbluefin-countme ping by @​castrojo in #1205
• fix(flatpaks): drop Warehouse and Smile from default system-flatpaks by @​castrojo in #1284
• fix(goose): ship fixed Linux diagnostics preset by @​castrojo in #1321
• docs: reword stale bonedigger lifecycle ownership claim by @​dtg01100 in #1339
• feat(brew): add opt-in nsl bundle by @​arteeh in #1322
• docs: add knuckle to lifecycle caller pin lists by @​kylerankin in #1308
• fix: restore Justfile test exclusion format and update skill index by @​castrojo in #1337
• fix(clean-system): guard rpm-ostree cleanup for bootc images by @​kylerankin in #1335
• docs(ci-tooling): add Internal refs heading for cross-skill anchor by @​dtg01100 in #1316
• docs: document ipp-usb and raw USB ownership coexistence by @​kylerankin in #1223
• docs(release-promotion): record the shared FSDK junction baseline for the printer appliances by @​dtg01100 in #1292
• docs: correct false libvirt exclusion comment by @​castrojo in #1301
• docs: correct stale issue-routing ownership attribution (bonedigger, not actions) by @​kylerankin in #1302
• docs(design): add OGC branding decision record for gaming images by @​dtg01100 in #1288
• docs(design): record Bluefin-contract centralization RFC for #1328 by @​dtg01100 in #1329
• feat(skills): publish bluefin-review as the team review skill by @​castrojo in #1230
• docs(braille-maturity): assess braille-printer-app before an OCI appliance by @​castrojo in #1290
• docs(bonedigger): consolidate lifecycle workflow table by @​arteeh in #1314
• fix: reconcile ci-tooling SKILL.md with bonedigger retention-pin exception by @​kylerankin in #1311
• docs(wallpaper): explain Hidamari movie setup by @​arteeh in #1323
• docs: correct stale bonedigger lifecycle references by @​mendezr in #1312
• fix(e2e): publish v1-gate desktop screenshots on the stream tag by @​castrojo in #1079
• ci(e2e): free runner disk with the org setup-runner action by @​castrojo in #1077
• test(software): cover Compass FlatPark lifecycle and real Bazaar UI by @​castrojo in #1075
• fix(e2e): opt CI VMs out of the daily countme ping by @​hanthor in #1072
• fix(e2e): default the test image to dakota:testing by @​Danathar in #1061
• feat(e2e): test that first-boot setup really installs the default apps and tools by @​Danathar in #1051
• docs: show how to run the GNOME 51 check on the published test image by @​Karibhou in #1029
• feat(gnome): add a GNOME OS desktop check with real keyboard input by @​thatguywob in #1065
• fix(e2e): run kde-smoke as one job instead of two shards by @​Danathar in #1064
• fix(smoke): stop desktop tests waiting far too long when an app is missing by @​Danathar in #1056
• docs: explain which service failures tests tolerate by @​Karibhou in #1052
• fix(common): let the two immutable-OS checks ask with admin rights so a failure shows its cause by @​Karibhou in #1062
• fix(e2e): gate the Bazzite suite and route assert_passed.py edits to kde-smoke by @​Danathar in #1050
• fix(v1): hold v1 only for failures the tests at v1 do not have by @​Danathar in #1060
• feat(v1): move v1 only after the merged tests boot (Option A) by @​Danathar in #1055
• fix(smoke): stop Text Editor, Calculator, Settings and Firefox tests waiting far too long by @​Danathar in #1054
• feat(gnome-e2e): check the GNOME OS test machine before it starts and record which build was tested by @​codebymarshall in #1035
• fix(e2e): mandatory-coverage verdict blocks GNOME and KDE false green by @​kylerankin in #1045
• feat(ci): list which real test-machine runs a change needs before it ships by @​codebymarshall in #1042
• test(e2e): list every service the fast test run switches off and why by @​codebymarshall in #1040
• fix(lifecycle): require proof that the updated image actually ran by @​thatguywob in #1047
• docs: define how to test desktop startup and first login by @​thatguywob in #1043
• fix(lifecycle): require a real upgrade instead of skipping no-op qualification by @​kylerankin in #1039
• docs(gnome): update line citation for suite input in action.yml by @​mrbobbytables in #1041
• fix(e2e): clone grim from its new home, pinned, with retry by @​Danathar in #1034
• fix(smoke): restore checks for default PDF, image, and video apps by @​thatguywob in #1028
• docs(gnome): fix the GNOME OS extension-validation lane doc, which still said the gate was not wired by @​kylerankin in #1031
• test: Protect extension test reports in consumer projects by @​thatguywob in #1020
• feat(gnome-e2e): gate extension-validation runs with mandatory service gate by @​j1mc in #991
• fix(e2e): name the CI sudoers drop-in so it sorts after wheel by @​Danathar in #1011
• feat(gnome): add GNOME OS extension-validation gate and lane docs (#908) by @​castrojo in #916
• docs: correct the GNOME launch-wait time in the testing guide by @​kylerankin in #1008
• fix(smoke): skip Search Light scenario where the extension is not shipped by @​hanthor in #987
• fix(smoke): unblock power_status and GNOME Settings panel scenarios by @​hanthor in #986
• fix(quarantine): keep the quarantine date across a feature-file rename by @​Danathar in #971
• fix(scripts): keep validate_docs.py from tracebacking on out-of-repo links or list-valued category/status by @​dtg01100 in #958
• test(gnome): cover Shade overview clones and widget helper/dependency errors by @​dtg01100 in #936
• fix(ci): list build-runner.yml in its own paths filter by @​dtg01100 in #947
• docs(gnome): include extensions in e2e suite descriptions by @​mendezr in #946
• docs(e2e): align Promote step wording in distribution paragraph by @​dtg01100 in #943
• docs(ci): capture workflow-self-paths rule (ci-ops reference skill) by @​dtg01100 in #940
• fix(gnome): reject unsafe extension ZIP members before staging by @​mendezr in #930
• fix(ci): tolerate all-skipped suites in the desktop screenshot gate by @​kylerankin in #924
• ci: validate runner-image builds on pull_request by @​kylerankin in #933
• test(gnome): collect Hive extensions with behavioral Behave coverage by @​castrojo in #914
• fix(e2e): add the test user to wheel so privileged user setup can run by @​juanresendiz813 in #925
• fix(e2e): salvage truncated results.json from a crashed smoke lane by @​castrojo in #889
• feat(gnome): add packaged-extension ZIP validator for #909 step 1 by @​kylerankin in #915
• fix(common): gate the Logo Menu/custom-command-list dconf scenarios on the image contract by @​juanresendiz813 in #904
• fix(dashboard): guard all required converter arguments by @​arteeh in #922
• feat: package NetBird as opt-in sysext by @​mrbobbytables in #555
• chore: add pyproject.toml and pin python 3.14 floor by @​mrbobbytables in #557
• docs: an unpublished upstream tag now fails the local build with a clear message by @​kylerankin in #553
• fix: make the weekly homelab cluster test stop failing at random by @​mrbobbytables in #566
• fix(dogfood): open the installer's journal mirror after the journal flush by @​jeefy in #554
• fix(sysext): order boot-time sysext refreshes after the module loads by @​jeefy in #547
• ci(renovate): automerge through the merge queue with platformAutomerge by @​jeefy in #546
• fix(homelab): pull Argo CD's Redis from Docker Hub, not ECR Public by @​jeefy in #545
• ci(prow): enqueue with PROW_TOKEN so merge groups get their checks by @​jeefy in #542
• fix(os): arm the hardware watchdog while the system runs by @​jeefy in #538
• ci: merge queue with required checks, weekly opt-in e2e, coverage floor by @​jeefy in #536
• feat: package Tailscale as opt-in sysext by @​castrojo in #537
• docs: ruff target-version is the oldest Python caller, not the setup-python version by @​kylerankin in #533
• feat(home-server): package and bundle nspawn.org CLI tool by @​castrojo in #535
• test(installer): check that prompts and failures stay readable by @​arteeh in #529
• docs: keep NVIDIA driver examples current by @​arteeh in #526
• docs: link system container operators to the published guide by @​castrojo in #528
• build(junction): bump fsdk-containers for the brew machine ssh client by @​castrojo in #515
• feat(homebrew): install tmux and neovim for the Home Server owner by @​castrojo in #514
• Revise README with installation profiles and updates by @​castrojo in #513
• ci(release): stop the oras pin comments naming a version by @​jeefy in #505
• test: assert each contract once; name tests for what they check by @​jeefy in #498
• ci(boot-test): split the image artifact so each bucket downloads only what it reads by @​jeefy in #497
• test: shellcheck every tracked shell script at one severity by @​jeefy in #499
• test: run the unit tests in parallel and report coverage by @​jeefy in #500
• fix: extra reboot attempts only with FleetLock; keep sshd starting after the homebrew sysext is unmerged by @​jeefy in #494
• ci(release): publish image sizes and flag growth; report boot-test bucket durations by @​jeefy in #493
• docs(ci): label ownership map and the automations that write them by @​jeefy in #492
• feat(kernel): drop firmware-less Wi-Fi, Bluetooth and GPU drivers; compress vmlinuz with zstd by @​jeefy in #491
• ci(boot-test): run the scenarios as a matrix behind one gate, preflight the host tools by @​jeefy in #490
• feat(image): prune ICU from the initrd and the leftover tools from both trees by @​jeefy in #489
• feat(installer): add Home Server as an explicit opt-in profile by @​castrojo in #486
• feat(homebrew): ship the transparent bridge as an opt-in sysext by @​castrojo in #485
• feat(runtimes): ship opt-in rootless Podman and Docker sysexts by @​castrojo in #484
• feat(image): prune gnupg, cracklib, lvm2 and other command-line tools from /usr by @​jeefy in #487
• feat(host): one static Go binary for the runtime helpers, replacing twelve bash scripts by @​jeefy in #488
• fix(dogfood): do not judge console muting on the first held frame by @​jeefy in #481
• ci(prow): mark the issue_comment trigger as a reviewed zizmor ignore by @​jeefy in #480
• feat(prow): onboard server to Prow by @​castrojo in #441
• fix(tpm): skip PCR-lock services on unsupported hardware by @​TB516 in #469
• fix(build): declare explicit sed build-depend for image assembly by @​j1mc in #458
• fix(build): declare explicit gzip build-depend for image assembly by @​j1mc in #460
• fix(installer): mute console spam during prompts and boot by @​castrojo in #446
• fix(installer): stop userspace wait-online on offline USB installer boots by @​mrbobbytables in #452
• fix(installer): copy blocks directly from loop partitions during diskless install by @​mrbobbytables in #447
• docs: streamline README and add skills documentation index by @​castrojo in #455
• fix: refresh taiki-e/install-action pins to current v2 tip by @​kylerankin in #434
• feat(updates): FleetLock reboot lock for non-Kubernetes fleets by @​jeefy in #426
• ci(track): open a tracking issue when a scheduled tracker fails by @​jeefy in #425
• docs: element path note, image-version dev default, record the #249 kernel decision by @​jeefy in #423
• feat(boot): build shim with the Bluefin vendor cert behind a shim option by @​jeefy in #427
• fix(dogfood): end the Secure Boot enrollment step on the enrolled marker by @​jeefy in #424
• docs(installer): add step-by-step developer stick burn runbook by @​castrojo in #420
• feat(image): prune unused files from /usr and the initrd, guarded by check-image by @​jeefy in #419
• ci: pin taiki-e/install-action to v2.87.26 by @​jeefy in #415
• feat: appliance hostname, Bash prompt and mDNS for every install by @​jeefy in #412
• fix(sysupdate): make updatectl features work on installed and diskless nodes by @​jeefy in #411
• feat: dedicated Ignition config keyring, allow-unsigned as one build option by @​jeefy in #410
• fix(countme): re-track the reporter to common main and declare image-tag latest by @​jeefy in #408
• ci: lint Python with ruff and type-check the scripts with mypy by @​jeefy in #409
• ci: cache the dev-key kernel with a committed INSECURE dev module key by @​jeefy in #404
• test(join): wait for the source slot between rate-limit attempts by @​jeefy in #406
• ci: Go tests, unfiltered checks, pinned CI deps, workflow linting, nightly alerts by @​jeefy in #401
• ci: reproducibility covers every shipped element, shared CI scripts, doc drift by @​jeefy in #403
• ci: main-only environments for secrets, build/boot-test/release correctness by @​jeefy in #402
• fix(homelab): align dogfood checks with seeded sysexts by @​mendezr in #396
• fix(cache): add Bluefin CAS to freedesktop-sdk junction project.conf by @​castrojo in #400
• fix(homelab): add HSTS to add-on HTTPRoutes (issue #389) by @​dtg01100 in #390
• feat(os): current IANA protocols/services, tracked by date (Fixes #318) by @​jeefy in #397
• feat(installer): console path from disk choice to login (#311) by @​jeefy in #394
• fix(join): same-source replay rejected as busy while slot still held by @​kylerankin in #392
• fix(ignition): apply unit presets beyond first boot by @​arteeh in #379
• feat(homelab): terminate HTTPS on the Gateway for the LAN add-ons by @​dtg01100 in #383
• feat(installer): check Secure Boot before erasing anything (#309) by @​jeefy in #388
• fix(kernel): enable hardware watchdog core and drivers (issue #377) by @​dtg01100 in #384
• fix(updates): enable bluefin-update-status.service on nodes that updated into this image by @​dtg01100 in #368
• test: discover sysupdate feature/transfer pairs from disk; cover .feature schema by @​dtg01100 in #386
• fix(kubestellar-console): raise memory limit so it stops getting OOM-killed by @​kylerankin in #381
• fix(kubeadm): remove MetalLB exclude label on a single node by @​kylerankin in #378
• fix(installer): install onto disks that are not empty (#359) by @​jeefy in #369
• feat(updates): stick installs update out of the box, visibly (#310) by @​jeefy in #366
• docs: add release asset guide and USB quick start by @​arteeh in #362
• ci(kernel-cache): seed the project CAS instead of a ghcr.io tarball by @​ahmedadan in #365
• feat(homelab): KubeStellar Console without GitHub OAuth, behind a gated login by @​jeefy in #363
• docs: preserve README links for native rendering by @​castrojo in #364
• feat(homelab): Argo Workflows, MCP server and KubeStellar Console add-on sysexts by @​jeefy in #358
• fix(kubeadm): migrate /etc/containerd/config.toml to declare imports on next start by @​dtg01100 in #352
• feat(nvidia): ship nvidia-container-runtime (CDI mode) so GPU Operator operands with runtimeClassName nvidia can start by @​jeefy in #350
• fix(homelab): report a join rate limit before "busy" by @​jeefy in #357
• feat: Bluefin Server Homelab profile (opt-in sysexts + Ignition templates, multi-node join) by @​jeefy in #353
• fix(nvidia): blacklist nouveau and evict it before loading the open modules by @​jeefy in #348
• ci(release): skip a release whose commit can no longer be tagged by @​jeefy in #332
• ci(track-binaries): track the NVIDIA Container Toolkit by its tag's commit by @​jeefy in #333
• build(kernel-modules): sign and compress modules in parallel by @​jeefy in #331
• fix(renovate-automerge): skip instead of failing when a dependency update changed just before merge by @​Danathar in #701
• docs(composite-actions): retire legacy queue labels and reference Prow management by @​castrojo in #706
• fix(reusable-build): fail the build when a published image is left unsigned by @​codebymarshall in #693
• feat(pinned-fetches): supply-chain gate for unpinned, unverified downloads by @​kylerankin in #703
• fix: pass branch-sync inputs via environment instead of inline shell by @​kylerankin in #675
• docs(governance): remove obsolete 3-clanker-queue and align with prow management by @​castrojo in #705
• fix(scan-image): warn when the security scan cannot check operating system packages by @​codebymarshall in #692
• feat(promote-squash): forward a merge_note override to the PR body by @​Danathar in #680
• fix(chunka): stop the build when its tool can't be downloaded instead of continuing as if it worked by @​kylerankin in #676
• chore(ci): remove an unused workflow that could push test images to stable by @​codebymarshall in #696
• fix(ci): catch alternate spellings of unapproved credentials by @​thatguywob in #684
• chore: let the maintainers team approve as code owners by @​hanthor in #704
• docs(supply-chain): list the Discord release-announcement key among approved secrets by @​codebymarshall in #694
• fix(reusable-release): generate the inline SBOM in its own job by @​Danathar in #682
• feat(create-release): add enable-desktop-screenshot input to omit screenshot section by @​castrojo in #673
• feat(execute-release): add gate_test_ref to pin the release-gate testsuite by @​hanthor in #660
• fix(ci): remove bluefin-lts from consumer workflows and docs by @​castrojo in #659
• fix(factory): exclude pre-merge runs from factory health success rate by @​mendezr in #528
• fix(ci): pin renovate automerge merge to the qualified commit by @​kylerankin in #649
• fix(pkg-cadence): let first-seen packages reach bootstrap_interval() by @​Danathar in #641
• feat(execute-release): plumb gate_extra_tags to the release gate by @​hanthor in #658
• fix(render-pr-body): omit the screenshot section when the testsuite published none by @​tunix in #651
• docs(skills): align pkg-cadence bootstrap doc with PR-based workflow by @​kylerankin in #643
• fix(tests): reframe release-gate pin rationale onto testsuite repo by @​kylerankin in #637
• fix(docs): point testsuite e2e pin at testsuite repo, not archived bluefin by @​kylerankin in #635
• fix(workflows): drop misleading bluefin SHA-pin parenthetical in release-gate comment by @​dtg01100 in #627
• docs(action-reference): bump download-artifact example to current SHA by @​dtg01100 in #632
• fix(docs): align reusable-workflow pin check with bluefin floating @v1 by @​kylerankin in #620
• fix(ci): align testsuite e2e.yml pins with release gate v1 pin by @​Danathar in #610
• chore: preserve Markdown hard breaks in pre-commit and clean bats/Python fixtures by @​dtg01100 in #607
• fix(issue-policy): allow trusted maintainer removal of human-only label by @​castrojo in #609
• fix(issue-lifecycle): Hive decision pauses accepted issues instead of un-accepting by @​castrojo in #612
• fix(issue-lifecycle): shorten lifecycle and Prow bot messages by @​castrojo in #611
• feat: share reviewed issue lifecycle and constrained Prow onboarding by @​castrojo in #605
• ci(sync-templates): stop syncing to archived bluefin and bluefin-lts by @​Danathar in #100
• ci: add pull_request validation workflow for tests and pre-commit by @​kylerankin in #94
• fix(ci): detect untracked templates and add workflow_dispatch trigger by @​castrojo in #82
• docs: add ujust report screenshot analysis spec by @​castrojo in #43
• fix(dakota): show NVIDIA driver, downloads first, left-aligned species by @​castrojo in #1641
• feat(dakota): hero layout with dakotaraptor, wordmark, and inline release card by @​castrojo in #1640
• Update video link in GitHub Universe trip report by @​castrojo in #1639
• feat(blog): GitHub Universe 2026 Trip Report by @​castrojo in #1634
• fix: exclude image bot from contributor counts by @​Karibhou in #1622
• feat(analytics): show Utah's published images on the analytics page by @​hanthor in #1632
• fix(reports): stop counting actions-user as a contributor by @​mrbobbytables in #1616
• refactor: remove a leftover duplicate copy of the release-data checks by @​codebymarshall in #1617
• fix: keep published update measurements unchanged by @​mendezr in #1604
• i18n(de): translate installation.md for German by @​kylerankin in #1580
• docs: explain how to sync files between two Bluefin computers by @​arteeh in #1579
• fix(i18n/ko): fix garbled wording in the Press Kit by @​kylerankin in #1599
• fix(analytics): make failed refreshes visible and isolate failure tests by @​castrojo in #1597
• ci: run the lockfile's wrangler instead of a stale pinned copy by @​Danathar in #1596
• fix(analytics): show actual org-wide contributor participation by @​castrojo in #1595
• docs(ko): clean Konglish words and second-person in Korean prose by @​kylerankin in #1577
• fix(analytics): align contributor layout, methodology, and chart series by @​castrojo in #1594
• fix(analytics): align PR basis, add prsOpened, and remove synthetic fallbacks by @​castrojo in #1593
• feat(analytics): add org contributor analytics pipeline and charts by @​castrojo in #1592
• fix(analytics): plot the sum of all three Bluefin histories by @​castrojo in #1591
• docs(analytics): separate contributor metrics section by @​castrojo in #1590
• fix(analytics): include Classic total and remove churn charts by @​castrojo in #1589
• fix(analytics): simplify charts and add daily Bluefin total by @​castrojo in #1588
• Remove streams and throttle settings section by @​castrojo in #1586
• Remove GNOME extensions recommendation section by @​castrojo in #1587
• docs: add System Containers operator guide by @​castrojo in #1582
• docs(troubleshooting): remove ujust probe references by @​castrojo in #1578
• feat(changelogs): add Dakota release notes to changelog cards by @​castrojo in #1575
• ci(countme): fail up front when Cloudflare secrets are missing by @​Danathar in #1573
• Update downloads-testing.mdx with HP machines note by @​castrojo in #1574
• docs(blog): Still Roaring: Bluefin Classic and LTS by @​juanresendiz813 in #1572
• fix(tests): guard missing image releases data in catalog test by @​castrojo in #1570
• feat(server): add versioned download boxes and release timeline by @​castrojo in #1569
• fix(docs): redesign server page header and streamline hero layout by @​castrojo in #1568
• docs(server): add enabling-extensions guide and remove gap-analysis-distros by @​castrojo in #1565
• docs: simplify server operator guides for Linux sysadmins by @​castrojo in #1563
• docs(navigation): rename User Guide to Desktop Guide and reorder sidebar categories by @​castrojo in #1562
• docs(server): break out Bluefin Server into top-level collapsible section and render guide index by @​castrojo in #1561
• fix(images): streamline Utah identity artwork and remove FanCollector chart by @​castrojo in #1543
• docs(blog): add Fedora Hummingbird Linux podcast video post by @​castrojo in #1541
• Revise title and add introduction to blog post by @​castrojo in #1542
• fix(images): remove LTS card from images page by @​castrojo in #1534
• fix(docs): remove lts from sidebar by @​castrojo in #1533
• feat(images): replace the catalog with product cards and version pills by @​castrojo in #1531
• Remove 't2-mac' from sidebar items by @​castrojo in #1530
• feat(navigation): restore missing pages and organize into Lore category by @​castrojo in #1528
• ci(pdf): patch import assertions for Node 24 compatibility by @​mrbobbytables in #1518
• feat(pages): composite image template with testsuite QA screenshots by @​castrojo in #1527
• feat(leaderboards): add season week groups, local model highlights, and section anchors by @​castrojo in #1524
• feat: redesign recent milestones into moments of triumph emblems by @​castrojo in #1523
• fix(driver-versions): omit Mesa and GNOME cards on Bluefin Server stream by @​castrojo in #1522
• feat(driver-versions): add Bluefin Server stream and normalize tab shortcuts by @​castrojo in #1521
• fix: refresh monthly social cards from projectbluefin artwork by @​castrojo in #1520
• fix(drivers): recover historical snapshots and Mesa for Dakota by @​castrojo in #1519
• docs: translate remaining Korean (ko) docs by @​kylerankin in #1479
• Remove common contribution areas from guidelines by @​castrojo in #1513
• docs(contributing): document issue triage and prow commands by @​castrojo in #1512
• i18n(nl,zh-Hans): define Alpaca [^1] in translated ai.md by @​dtg01100 in #1496
• i18n(de): translate administration.md, ai.md, bluefin-dx.md by @​dtg01100 in #1492
• fix(churn): give Bluefin a discovered stable-daily tag series by @​kylerankin in #1507
• fix(churn): make compareTagsByDate a strict total order under partial created_at coverage by @​dtg01100 in #1501
• fix(churn): page build-time lookup until every matched tag is covered by @​dtg01100 in #1499
• fix(reports): readable monthly report — leaderboard, bots, charts, drop projectbluefin/bluefin by @​castrojo in #1491
• fix(blog): escape unclosed JSX tags in Stegosaurus report by @​castrojo in #1490
• docs: translate remaining zh-Hans docs (agentic-contributing, contributors) by @​kylerankin in #1469
• ci(monthly-reports): drop actions/cache restore for known-contributors.json by @​dtg01100 in #1486
• i18n(it): translate mission.md and values.md by @​dtg01100 in #1474
• docs: translate downloads page into Brazilian Portuguese by @​arteeh in #1468
• docs: translate download and image pages into Korean by @​arteeh in #1467
• docs: translate the installation guide into Italian by @​arteeh in #1466
• fix: escape angle brackets in markdown-generator PR titles by @​kylerankin in #1487
• docs(skills): update shipping-and-verifying branch rules and action_required pattern by @​castrojo in #1465
• docs: translate download guides and image catalog into Simplified Chinese by @​arteeh in #1459
• docs: translate code-of-conduct.md into German by @​dtg01100 in #1445
• docs: translate zh-Hans core pages by @​kylerankin in #1446
• docs: Dutch (nl) translations for core docs by @​kylerankin in #1443
• fix(de): "Images" not "Bilder" for the container-image sidebar category by @​kylerankin in #1454
• docs: translate command-line, supply-chain, dinosaurs and images into German by @​kylerankin in #1452
• fix(de): use "image-basiert" not "bilderbasiert" for image-based updates by @​dtg01100 in #1457
• docs: Fix headings in bluefin-dx by @​xordspar0 in #1456
• Update downloads documentation to remove old content by @​castrojo in #1464
• Remove outdated warning from downloads documentation by @​castrojo in #1463
• feat(docs): render server README at build time by @​castrojo in #1462
• feat(leaderboards): de-duplicate sections and showcase Hive newcomers by @​castrojo in #1458
• docs(agents): reconcile data-pipeline contract with run-parallel.mjs by @​castrojo in #1328
• i18n(ko): translate installation, command-line, mission, and values pages by @​mendezr in #1436
• fix(docs): remove stray backslash in ublue akmods backtick note by @​dtg01100 in #1438
• docs: add Portuguese (Brazil) i18n translations by @​castrojo in #1427
• i18n(ja): translate index.md and UI strings for Japanese by @​dtg01100 in #1430
• i18n(ru): translate index.md and UI strings for Russian by @​mrbobbytables in #1426
• i18n(it): translate index.md and UI strings by @​dtg01100 in #1432
• Translate docs: Dutch (nl) by @​kylerankin in #1431
• docs: translate mission and values pages into German by @​mendezr in #1441
• ci: pass GITHUB_TOKEN to update-churn compute step by @​kylerankin in #1435
• ci(iso): reclaim runner disk before builds by @​bketelsen in #69
• fix(iso): installers built from the stable release now keep machines on stable by @​codebymarshall in #595
• fix(ci): refresh promotion PR on push to main by @​castrojo in #577
• fix(validate-flatpaks): isolate flathub remote in FLATPAK_USER_DIR by @​castrojo in #565
• fix(ci): bound the unit-tests Install bats step against slow apt mirrors by @​dtg01100 in #498
• fix(validate-flatpaks): pin the Flathub remote descriptor to a fixture by @​kylerankin in #495
• fix(validate-flatpaks): verify Branch= against the flathub remote by @​dtg01100 in #514
• fix(promote): make repair-promotion-branch a no-op when there is no branch by @​Danathar in #522
• docs: keep 60-desktop-swap FROM major in sync with the base image by @​kylerankin in #476
• fix(promote): set auto_merge false so promotion body matches finpilot's manual merge by @​kylerankin in #456
• fix(renovate): disable major updates for quay.io/fedora-ostree-desktops/* by @​dtg01100 in #452
• ci: keep approved auto-merge candidates current without manual updates by @​hanthor in #1055
• ci: run required checks on merge_group by @​hanthor in #1052
• fix: validate boot-manager entries for composefs installs by @​kylerankin in #1043
• fix: re-baseline :testing when its baseline was rewritten out of main by @​kylerankin in #1042
• ci: verify the new image's SLSA provenance before the e2e gate by @​kylerankin in #1021
• docs: split the lifecycle harness out of local-testing.md by @​kylerankin in #1005
• fix(extensions): refresh GNOME-compatible upstream pins by @​hanthor in #998
• fix(ci): isolate invalid GNOME extension heads by @​hanthor in #1001
• ci: require exact versions for Python test tools by @​thatguywob in #999
• fix: include H.264 video decoding and playlist support by @​thatguywob in #994
• fix(iso): wait for the phone-pairing add-on to finish starting by @​thatguywob in #1000
• fix(docs): put nmcli --ask before the command object (adopts #980) by @​hanthor in #981
• docs: stop the front-page test note from warning about failures that did not happen by @​codebymarshall in #977
• fix(iso): show why a desktop add-on failed to start when the install-and-login test fails by @​codebymarshall in #971
• chore(deps): update os-minimal digest to 7a1982b and kernel-devel pin to 7.2.11 (adopts #956) by @​hanthor in #959
• docs: clarify installation test results (adopts #950) by @​hanthor in #960
• fix: keep Apache httpd disabled and assert it in the desktop contract (adopts #951) by @​hanthor in #958
• fix(branding): drop the fastfetch count placeholders, now shipped by Common (supersedes #763) by @​hanthor in #957
• fix: include newly added Bluefin desktop add-ons by @​mendezr in #949
• chore(deps): update ghcr.io/projectbluefin/common docker digest to ff1d621 (adopts #856) by @​hanthor in #954
• feat: record what each operating system image was built from by @​thatguywob in #937
• fix: stop extension updates when compatibility information is unreadable by @​thatguywob in #941
• feat: ship repair guidance with the Utah desktop by @​thatguywob in #943
• fix: keep the terminal overview free of missing-command errors by @​thatguywob in #942
• feat(kernel): enable native AMD and Intel Xe GPU drivers in OGC kernel by @​mrbobbytables in #927
• ci(release): release :stable weekly on a Monday schedule by @​hanthor in #905
• fix(contract): assert newly added network daemons stay disabled (#869) by @​kylerankin in #892
• ci(promote): ratchet :testing over E2E-green commits and gate :stable on per-digest evidence by @​hanthor in #885
• Revert #874 (SELinux policy-store relocation) until booted-update verification by @​Danathar in #893
• fix: guard extension dconf defaults against shipped schema paths by @​kylerankin in #889
• feat(artwork): source wallpapers and branding art from projectbluefin/artwork by @​hanthor in #881
• feat(packages): consume the second factory publish wave: tmux, sysstat, NFS, hplip, GStreamer, Papers integration (#263) by @​hanthor in #871
• fix(iso): raise the ISO size guard to 8 GiB (reduction tracked in #875) by @​hanthor in #876
• fix(e2e): detect the Take Tour welcome dialog by OCR (follow-up to #867) by @​hanthor in #870
• feat(packages): consume the published VPN, scanning, printing, tool and media parity packages (#263) by @​hanthor in #868
• feat(packages): consume factory GNOME apps and Help stack (#263) by @​hanthor in #862
• fix(e2e): skip GNOME Shell's welcome dialog before reading fastfetch by @​hanthor in #867
• fix(ci): bring the contract job on main back to green by @​Danathar in #858
• fix(os-release): rename 'Utah' to 'Bluefin' by @​theMimolet in #797
• fix(test): query GNOME extension state over session D-Bus by @​hanthor in #847
• fix(iso): compress initramfs with zstd to bring nvidia ISO under budget by @​repires in #750
• fix(iso): create /var/tmp for OCI flatpak installs in container builds by @​hanthor in #840
• docs: record Flatpak-first standing policy for overlay requests by @​hanthor in #832
• chore(baselines): refresh snapshots, drop installed gaps from triage by @​hanthor in #825
• docs(ci): correct cosign identity pin in kernel-and-build reference by @​hanthor in #799
• feat(flatpak): preinstall Ghostty from TunaOS OCI remote on first boot by @​hanthor in #788
• chore(baselines): triage remaining 54 gaps (50 planned under #263, 4 waived) by @​hanthor in #795
• feat(packages): add Slice 3 parity packages (qt6-qtbase, python3-charset-normalizer, python3-idna) by @​hanthor in #794
• feat(packages): add Slice 2 parity packages (gnupg2-scdaemon, dnf5daemon, tools) by @​hanthor in #793
• feat(packages): add Slice 1 parity packages (dbus-daemon, python, m4, tools) by @​hanthor in #792
• fix: prevent base media packages from replacing factory builds by @​Karibhou in #787
• ci(e2e): drop the ~@orca exclusion; full suite and release gate by @​hanthor in #782
• fix(packages): install speech-dispatcher-utils (spd-say) by @​hanthor in #781
• ci(release): pin the release gate to the testsuite commit post-testing validated by @​hanthor in #779
• docs: streamline README description and add ISO download link by @​castrojo in #776
• ci(release): restore the stable release gate, scoped like post-testing-e2e by @​hanthor in #772
• fix(extensions): make installed extension files readable, not writable by @​hanthor in #770
• fix(kernel): build zram in the OGC kernel by @​hanthor in #768
• ci(e2e): bump testsuite test_ref to include power_status and Settings fixes by @​hanthor in #764
• docs(ci): add testsuite triage runbook reference by @​hanthor in #756
• ci: override release gate for externally-blocked scenarios by @​hanthor in #758
• Adopt Dakota first-boot desktop integrations by @​hanthor in #732
• test(e2e): cover first-boot idempotence by @​hanthor in #715
• feat(packages): add GNOME rounded blur to parity by @​hanthor in #718
• feat(countme): enable shared client on Utah by @​hanthor in #720
• feat(pixmaps): use the accepted Utah wordmark in GDM by @​KiKaraage in #531
• fix(kernel): require INPUT_UINPUT in the OGC kernel by @​hanthor in #752
• fix(services): tolerate start bursts on countme ping service by @​hanthor in #746
• ci: scope testsuite exclusion to @orca until factory ships screen reader by @​hanthor in #745
• fix(boot): skip bootupctl adoption on systemd-boot layouts by @​hanthor in #744
• docs(packages): track orca screen-reader stack as unavailable parity debt by @​hanthor in #743
• fix(kernel): require OGC namespaces and TUN by @​hanthor in #710
• fix: drop the OGC external-module build tree from gaming images by @​mrbobbytables in #734
• fix(build): keep the utah-packages.repo flip in the published layer by @​mrbobbytables in #736
• fix(ci): fail closed on mismatched build refs by @​hanthor in #731
• fix(ci): pin Prow transfer parser source by @​hanthor in #730
• docs(ci): correct testing rechunk status by @​hanthor in #719
• chore(baselines): remove resolved triage entries by @​hanthor in #717
• docs(skills): clarify extension updater contract by @​mrbobbytables in #683
• chore(deps): sync Common digest with ChairLift contract by @​hanthor in #716
• docs(ci): split workflow guide into linked references by @​hanthor in #713
• fix: skip privileged setup from any GDM session, not just gdm-greeter by @​kylerankin in #692
• ci: add non-blocking testsuite reporting to post-testing-e2e (#161) by @​castrojo in #631
• feat: deploy Prow slash command workflow and OWNERS by @​castrojo in #705
• fix(boot): run bootupctl-adopt transient skips before version-script-check by @​j1mc in #696
• fix(boot): relabel boot.log so plymouthd can append to it by @​j1mc in #693
• ci(extensions): automate weekly GNOME extension submodule bumps by @​hanthor in #645
• docs: correct post-testing-e2e line citations in README by @​kylerankin in #161
• ci: add a read-only offline ISO test matrix by @​hanthor in #627
• fix(kernel): deploy and regenerate each flavor’s bootc kernel by @​hanthor in #566
• feat(extensions): package curated GNOME Shell extensions from Dakota by @​mrbobbytables in #680
• ci: prove package installs from hermetic Hummingbird snapshots by @​hanthor in #673
• test(chairlift): pin Control Center runtime invariants for #676 by @​dtg01100 in #679
• fix(ci): pin sync-dispatched testing build to the pushed SHA by @​hanthor in #663
• ci(build): run the unit suite alongside manifest validation by @​hanthor in #660
• fix: enable ChairLift Control Center installation on login by @​hanthor in #668
• fix(ntp): fall back to the public NTP pool when Hummingbird's is unresolvable by @​hanthor in #664
• fix: correct utah branding to match Bluefin desktop contract by @​castrojo in #319
• fix(build): reproducible image layers (forward-port of #314) by @​hanthor in #611
• fix(services): preserve enabled statistics timers after first boot by @​kylerankin in #485
• fix(contract): reject sslcacert trust-anchor rewrite by @​hanthor in #659
• feat(printing): install cups-filters, cups-browsed and ghostscript from the factory by @​hanthor in #665
• docs(site): update base image reference to os-minimal by @​castrojo in #655
• feat(boot): install factory-built plymouth and spinner theme by @​hanthor in #666
• fix(kernel): enable gaming desktop sandboxes and VPN devices by @​hanthor in #628
• test(e2e): cover resolve-e2e-inputs trust gate refusals and CLI by @​hanthor in #648
• fix(live): give the dock-pinned installer entry a resolvable icon by @​hanthor in #646
• packages: consume ffmpegthumbnailer for media codec parity (#383) by @​kylerankin in #647
• fix(build): switch base from bootc-os to os-minimal by @​hanthor in #644
• fix(e2e): drop trailing blank line in luks-e2e.sh README heredoc by @​kylerankin in #653
• fix(iso): share an immutable tacklebox image pin by @​hanthor in #624
• fix(contract): pin gpgkey= against [repositories.gpgkeys] by @​dtg01100 in #638
• fix(validation): restore static and pre-commit gates by @​hanthor in #623
• fix(docs): refresh stale reusable-build.yml digest in ci-workflows skill by @​kylerankin in #635
• fix(contract): scan dnf5 repo-override dirs on the on-image run (#524) by @​kylerankin in #527
• ci(parity): schedule pinned Bluefin contract updates by @​Danathar in #194
• fix(packages): consume published Intel media runtimes by @​arteeh in #397
• docs(desktop-contract): list all units the [services] contract asserts (#597) by @​dtg01100 in #606
• fix(tests): freeze the clock in the ago() relative-time test by @​hanthor in #610
• fix(e2e): copy the Flatpak parser to the installed target over scp by @​hanthor in #607
• fix(installer): ship an empty /var/home so useradd works pre-boot by @​hanthor in #604
• test(bootc): assert systemd-boot entries regenerate on upgrade and rollback by @​dtg01100 in #571
• style: wrap overlong new docstring and comment lines (#600) by @​dtg01100 in #601
• fix(boot): seed empty crypttab so dracut's crypt generator exits 0 by @​hanthor in #592
• fix(iso): ship the Flatpak parser the ISO bake calls by @​hanthor in #591
• fix(scripts): single shared parser for the Brewfile flatpak list (#510) by @​dtg01100 in #511
• fix: verify lifecycle kernel and initrd files in the guest by @​mendezr in #573
• fix(selinux): ship HOME=/home so ostree's policy rebuild keeps the home rules by @​Danathar in #576
• fix: keep build date out of retained package-origin report by @​Danathar in #581
• fix(contract): inspect global proxy/sslverify in dnf5 [main] by @​kylerankin in #582
• fix(ujust): honor IMAGE_NAME env fallback in utah-image-repo short-circuit by @​dtg01100 in #584
• fix(systemd): skip systemd-remount-fs.service on read-only composefs root by @​dtg01100 in #586
• fix(packages): record nss-mdns .local resolution parity gap as unavailable by @​kylerankin in #569
• feat(packages): consume 14 resolvable Bluefin parity + firmware packages from the factory by @​dtg01100 in #403
• fix(contract): require the shipped Firefox preference file on the desktop image by @​dtg01100 in #490
• docs: reconcile README with docs/utah and add Download/Documentation pointers by @​dtg01100 in #529
• docs(readme): align on-image allowlist wording with multi-dir scan by @​dtg01100 in #539
• fix(deps): make the packages digest pin discoverable by Renovate by @​arteeh in #365
• fix(system): silence the boot and session errors that bury real ones by @​hanthor in #545
• fix(services): stop unified-storage onboarding from holding up boot by @​hanthor in #548
• fix(branding): show the Bluefin raptor as the OS logo by @​hanthor in #546
• fix(contract): derive the on-image reposdir scan list from dnf5 config (#536) by @​dtg01100 in #540
• fix(services): enable Avahi and switcheroo-control by @​arteeh in #411
• fix(build): refresh Hummingbird packages daily despite the layer cache by @​hanthor in #542
• ci(factory-pin): propose the utah-packages rev daily against main by @​hanthor in #541
• fix(flatpak): install Bazaar on first boot of non-ISO installs, in the background by @​hanthor in #544
• fix(extensions): load Dash to Dock and GSConnect on GNOME 51 by @​hanthor in #543
• fix(avahi): let avahi-daemon enter its SELinux domain by @​hanthor in #549
• fix(packages): ship cracklib-dicts so passwords can be changed by @​hanthor in #547
• fix(live): keep bootloader-update.service off the live ISO by @​hanthor in #550
• test(bootc): validate bootc upgrade and rollback lifecycle by @​mrbobbytables in #140
• fix: mount extension verifier for desktop contract checks by @​arteeh in #522
• ci: drop stale testsuite note from execute-release pin by @​Danathar in #350
• docs(skills): scope ci-workflows list back to in-scope workflows (closes #501) by @​dtg01100 in #504
• docs: replace stale package bind-mount line reference by @​arteeh in #515
• fix(image-baseline): enumerate /usr/share/ublue-os/firefox-config in EXTRACT by @​dtg01100 in #507
• fix(hooks): unquote the bluefin prefs glob and bump the flatpaks hook to v2 by @​kylerankin in #493
• fix(verify): compare hummingbird_baseurl in parity baseline check by @​kylerankin in #481
• docs: fix stale Containerfile line references in package-contract.md by @​buggtb in #467
• fix(packages): install the Bluetooth printing backend by @​arteeh in #399
• fix(ci): sign and verify the utah-kernel-cache base image by @​castrojo in #306
• fix(libsetup): adopt version-script-commit in Utah hooks by @​kylerankin in #259
• fix(baselines): strip trailing tabs from generated elements.tsv by @​dtg01100 in #498
• feat(packages): track nvtop as unavailable pending factory build by @​dtg01100 in #453
• fix(verify): surface a stale parity baseline on ref or factory-pin bump by @​kylerankin in #477
• fix(services): pin fwupd-refresh.service to a static user (#385) by @​dtg01100 in #415
• fix(ujust): route ujust report through utah-image-repo shim (#446) by @​dtg01100 in #448
• test(ujust): pin override tests to just >= 1.56 by @​dtg01100 in #450
• fix(selinux): repair mis-keyed active homedirs before relabelling /var/home by @​buggtb in #475
• fix(packages): track the fish exclusion under #419 by @​dtg01100 in #482
• fix(ghostty): read ~/.config/ghostty and follow system light/dark by @​hanthor in #483
• fix(ujust): resolve changelogs to projectbluefin/utah not bluefin by @​kylerankin in #484
• fix(audit): docstring claim, baseline, dynamic fedora_v, and hummingbird checksum (#424) by @​dtg01100 in #429
• fix: unblock :stable signing, GDM logo, installer art, re-land zram (#404) by @​hanthor in #442
• fix: verify /etc/os-release in the desktop contract check by @​Danathar in #342
• test: executed coverage for install-packages.py install path by @​mrbobbytables in #197
• fix(just): forward audit parity flags through the shebang recipe by @​mendezr in #432
• docs: align Wi-Fi comments with the installed package contract by @​mendezr in #430
• fix(docs): correct parity-audit docstring claim about just check by @​kylerankin in #439
• fix(services): stop enabling grub-boot-success.timer by @​hanthor in #366
• feat(scripts): re-runnable Bluefin-vs-Utah image parity audit (#402) by @​dtg01100 in #417
• fix(branding): keep Hummingbird base os-release ID, VERSION_ID and CPE_NAME for CVE scanners by @​kylerankin in #380
• fix(boot): maintain the ESP boot manager on systemd-boot systems by @​hanthor in #370
• test(bootc): assert systemd-boot entries regenerate on upgrade and rollback by @​dtg01100 in #369
• ci: land factory-pin rev tool and weekly proposal workflow by @​hanthor in #367
• docs(packages): index [services] in packages/utah.toml header by @​dtg01100 in #416
• fix(logrotate): create the state directory at boot by @​arteeh in #413
• fix(ujust): handle missing Utah runtime dependencies by @​arteeh in #414
• fix(branding): swap fedora-logos for generic-logos, Bluefin-LTS style by @​hanthor in #400
• feat(contract): fail CI on stale [unavailable] entries by @​hanthor in #418
• fix(desktop): replace Fedora wordmark with Bluefin at GDM greeter (#378) by @​dtg01100 in #379
• fix(baselines): point zram-generator triage at #384 by @​dtg01100 in #409
• fix(packages): wire up zram-generator for bare-metal swap by @​kylerankin in #404
• fix: prevent concurrent fork Canary cleanup from blocking proof refresh by @​hanthor in #865
• ci: run required checks on merge_group by @​hanthor in #859
• ci: land built bumps and refresh armed PRs without manual intervention by @​hanthor in #863
• fix: stop committing derived inventory counts and backlog totals by @​hanthor in #858
• fix: keep the source lock sorted by package name by @​hanthor in #857
• fix(sources): use official download sites for three packages by @​mrbobbytables in #840
• import: Rawhide libotf, libXaw, gd and anthy-unicode (m17n-lib blockers) by @​mrbobbytables in #788
• feat: add Qt 6 graphics, Wayland, and translation packages by @​thatguywob in #652
• feat: add the virtual machine file-sharing service by @​thatguywob in #761
• feat: add a tesseract family recipe (tesseract + tesseract-tessdata) by @​kylerankin in #836
• feat: add a library for FireWire media streaming by @​Karibhou in #801
• feat: add YubiKey management tool by @​mrbobbytables in #839
• fix: restore factory validation baseline by @​hanthor in #850
• fix(rygel): install user-unit post scriptlet by @​hanthor in #851
• feat: import imath and rygel recipes for the gnome-apps batch (#484) by @​kylerankin in #823
• feat: add build instructions for the Microsoft CAB archive library by @​Karibhou in #846
• feat: add instructions to build the event loop library by @​thatguywob in #844
• feat: prepare libraries for audio plugin discovery by @​mendezr in #831
• feat: prepare tools for Apple HFS+ disks by @​thatguywob in #837
• feat: prepare tools for speeding up disk access by @​mendezr in #833
• fix: record published versions of eight requested system tools by @​mendezr in #832
• feat: prepare container networking without administrator access by @​mendezr in #830
• feat: add build support for VPN and smart-card authentication tools by @​kylerankin in #825
• feat: prepare the iwd Wi-Fi service for Utah by @​hanthor in #827
• feat: add build recipes for the VM networking and streaming-video libraries by @​Danathar in #789
• fix: keep Fedora package files from changing between builds by @​mrbobbytables in #795
• feat: add a tool to extract Broadcom wireless firmware by @​mendezr in #813
• feat: add a recipe for a data format library by @​Karibhou in #773
• feat: add tools for joining Windows domains by @​Karibhou in #774
• feat: add a library for security key files by @​Karibhou in #775
• feat: prepare security key sign-in packages by @​Karibhou in #776
• feat: add the Chinese pinyin typing library recipe by @​Karibhou in #796
• feat: add jaraco context, classes and functools recipes by @​kylerankin in #808
• runtime-contract: un-excite crun-krun now that libkrun and libkrunfw publish by @​kylerankin in #797
• feat: add an image processing library by @​Karibhou in #772
• feat: add a library for reading compressed images by @​Karibhou in #817
• reconcile codecs-media FFmpeg family in build backlog (#474) by @​kylerankin in #815
• feat: prepare the missing media artwork library for building by @​mendezr in #816
• feat: add the window-list library that the screen reader suggests by @​Danathar in #786
• feat: add the Perl add-on that standardizes accented text by @​Danathar in #783
• feat: add build recipe for ImageMagick image tools by @​mrbobbytables in #787
• fix: honor the decision to omit the legacy service command by @​mendezr in #811
• feat: add the service that creates home folders on first login by @​Danathar in #784
• feat: add a firewall address group management package by @​Karibhou in #809
• feat: import NetworkManager-ssh VPN plugin into the factory (Refs #499) by @​kylerankin in #770
• feat: add the Kyoto Cabinet database library recipe by @​mendezr in #767
• feat: add a Python library for querying JSON data by @​codebymarshall in #798
• feat: add ibus-chewing and libchewing recipes by @​kylerankin in #790
• import: add disk and desktop tools xfsprogs, udftools, uresourced by @​mrbobbytables in #782
• fix: record approved exclusion of USB network sharing by @​mendezr in #800
• docs: identify the source of a missing wireless library by @​mrbobbytables in #785
• docs: remove repeated package guide instructions by @​Karibhou in #792
• docs: align build instructions with the containers in use by @​mendezr in #799
• feat: add support for FireWire cameras by @​Karibhou in #794
• feat: add a library for command-line tools by @​mrbobbytables in #781
• fix: adopt published package accounting from #768 by @​hanthor in #780
• fix: record five packages already available to users by @​mendezr in #768
• feat: adopt python-h11 recipe on current main by @​hanthor in #778
• fix: recognize published libraries in the missing-package list by @​mendezr in #766
• fix: adopt published-library accounting from #766 by @​hanthor in #779
• feat: add support for reading compressed NTFS files by @​Karibhou in #771
• feat: add missing desktop collection library by @​thatguywob in #760
• fix: record seven published desktop support packages by @​mendezr in #765
• feat: add build recipes for the RabbitMQ client and Windows drawing-file libraries by @​codebymarshall in #756
• feat: adopt #756 onto current main by @​hanthor in #758
• fix(validate): make sure recipe folder matches provenance name by @​mrbobbytables in #753
• fix: adopt #750 Utah#629 logo source by @​hanthor in #754
• feat: add the strace debugging tool to the package factory by @​codebymarshall in #749
• feat: adopt strace recipe from PR #749 by @​hanthor in #755
• fix(wayland): let the Wayland documentation package install without two declined fonts by @​codebymarshall in #751
• feat: add PortAudio and PyAudio build recipes (adopts #748) by @​hanthor in #752
• feat: reconcile published terminal and desktop programs by @​mrbobbytables in #747
• chore: adopt libultrahdr and svt-vp9 from #626 by @​hanthor in #746
• chore: adopt zinnia and zix from #630 by @​hanthor in #745
• chore: adopt libkrun recipes from #639 by @​hanthor in #744
• chore: adopt qpdf recipe from #640 by @​hanthor in #743
• feat: add build recipes for the liburing and lrzsz system tools by @​codebymarshall in #742
• feat: add safe input-method data packages (adopts #731) by @​hanthor in #741
• feat: adopt #655 developer and hardware tools by @​hanthor in #740
• fix: add the missing update-history line to 15 packages updated before the history fix (adopts #734) by @​hanthor in #739
• fix: download 151 package sources directly from their projects (adopts #708) by @​hanthor in #738
• feat: add language and keyboard defaults for desktop tools (adopts #700) by @​hanthor in #737
• feat: prepare text encoding detection for Utah by @​thatguywob in #729
• fix: record published packages already available to users by @​mrbobbytables in #732
• feat: add a customizable shell prompt and its test tools (adopts #699) by @​hanthor in #728
• fix: record boot screen packages already available to users (adopts #698) by @​hanthor in #727
• feat: prepare cursor support without adding unwanted tools (adopts #620) by @​hanthor in #726
• feat: add tools for accessing removable-drive disk images (adopts #659) by @​hanthor in #725
• feat: prepare graphics tools needed for video playback (adopts #707) by @​hanthor in #724
• feat: prepare access to files on Apple devices (adopts #703) by @​hanthor in #723
• feat: add instructions to build WebDAV access tools (adopts #696) by @​hanthor in #722
• feat: add instructions to build the SPICE VM integration agent (adopts #679) by @​hanthor in #721
• feat: add instructions to build FireWire device communication libraries (adopts #681) by @​hanthor in #720
• feat: add instructions to build the S-Lang terminal library (adopts #710) by @​hanthor in #719
• feat: add instructions to build the YubiKey sign-in module (adopts #706) by @​hanthor in #718
• feat: add instructions to build smart card Python bindings (adopts #704) by @​hanthor in #717
• feat: add instructions to build NILFS filesystem utilities (adopts #702) by @​hanthor in #715
• feat: add instructions to build the firewall connection monitor (adopts #697) by @​hanthor in #714
• feat: add instructions to build the libdeflate compression library (adopts #695) by @​hanthor in #713
• fix: allow the braille converter build to find its manual tools (adopts #705) by @​hanthor in #712
• feat: add Python libraries for terminal automation by @​j1mc in #684
• feat: mark the text-conversion and touchscreen libraries as published by @​Karibhou in #709
• feat: record that the printer fonts for documents are built and published by @​Karibhou in #711
• docs: keep package backlog guidance current by @​j1mc in #680
• feat: add a library for recognizing audio recordings by @​j1mc in #692
• fix: record published GNOME packages and approved exclusions (adopts #662) by @​hanthor in #694
• feat: add libraries for reading Blu-ray discs (adopts #658) by @​hanthor in #693
• feat: add a Markdown reader for terminal release notes (adopts #650) by @​hanthor in #691
• feat: add the X11 display resource query library (adopts #646) by @​hanthor in #690
• feat: add Flex for building text scanners (adopts #654) by @​hanthor in #689
• fix: honor the decision against bulk font additions (adopts #651) by @​hanthor in #688
• fix: stop listing two published libraries as missing (adopts #649) by @​hanthor in #687
• feat: add a tool to measure filesystem compression savings (adopts #648) by @​hanthor in #686
• feat: add smart-card and security-key helper packages (adopts #647) by @​hanthor in #685
• fix: record already published smart-card packages (adopts #645) by @​hanthor in #683
• fix: record the existing GPU monitor recipe (adopts #653) by @​hanthor in #682
• feat(long-tail): import 6 source packages, resolve hyperv subpackages (#500) (adopts #607) by @​hanthor in #671
• feat: add Bison for building language parsers (adopts #615) by @​hanthor in #667
• feat: add the remaining braille document converters (adopts #616) by @​hanthor in #672
• feat: add Python libraries for dates and older software (adopts #613) by @​hanthor in #665
• feat: add missing compatibility libraries for development tools (adopts #614) by @​hanthor in #668
• fix: keep package update history current (adopts #601) by @​hanthor in #677
• feat: add support for camera RAW image files (adopts #618) by @​hanthor in #666
• feat: add a tool for automated remote logins (adopts #611) by @​hanthor in #670
• fix: record Utah’s choice to skip eleven optional fonts (adopts #660) by @​hanthor in #678
• feat: add password strength checking packages (adopts #644) by @​hanthor in #676
• feat: add the touchscreen input library recipe by @​thatguywob in #643
• fix: honor the decision against bulk font additions (adopts #610) by @​hanthor in #669
• fix(canary): a pull request that only adds recipes and inventory passes Canary at once (#369) by @​hanthor in #663
• docs: confirm screen reader and speech packages are available by @​arteeh in #657
• fix(canary): make the fork proof lookup runnable; reopen on a current merge commit (#369) by @​hanthor in #635
• fix(canary): refresh the fork PR's Canary from the button workflow (#369) by @​hanthor in #632
• fix(canary): make a fork PR's own Canary pass on a maintainer-run proof (#369) by @​hanthor in #628
• ci(canary): let a maintainer run Canary on a reviewed fork pull request (#369) by @​hanthor in #619
• fix(hplip): verify HP's signature before hp-plugin-download runs the plugin by @​Danathar in #599
• Import media runtime providers: libsrtp, gtksourceview5, djvulibre, a52dec, libmpeg2 by @​hanthor in #594
• feat: import tuned runtime providers and powertop libs (utah#388) by @​hanthor in #595
• feat: import printing runtime providers for hplip and system-config-printer by @​hanthor in #596
• feat: import libutempter, libhandy, gssproxy, quota, ding-libs; sysstat without PCP by @​hanthor in #597
• import: Rawhide foo2zjs, argyllcms, lcms, libXScrnSaver by @​hanthor in #588
• import: Rawhide sane-backends, sane-airscan, ipp-usb, gutenprint, libieee1284, printer driver tail by @​hanthor in #586
• import: Rawhide openconnect, NetworkManager-openconnect, vpnc, vpnc-script, stoken, pkcs11-helper, oath-toolkit, libuser, usermode by @​hanthor in #585
• import: Rawhide gstreamer1-plugin-libav by @​hanthor in #584
• import: Rawhide dev-tools (bc bolt borgbackup dnsmasq ethtool exfatprogs f2fs-tools gamemode hdparm lshw lsof man-pages mtr nvme-cli pinfo smartmontools tcpdump traceroute tree words) by @​hanthor in #587
• fix(sources): move sso-mib to 0.10.2, keep libjwt at 1.12.1 by @​hanthor in #583
• fix(ci): pin every factory-image load to the ref that signed its tag by @​hanthor in #582
• docs(skills): triage a stalled Hummingbird CDN during the lock step by @​hanthor in #578
• import: Rawhide sso-mib, libjwt by @​hanthor in #574
• import: Rawhide libvncserver, mozilla-filesystem, redhat-menus, mod_dnssd by @​hanthor in #573
• feat: import powertop and fpaste from Rawhide by @​hanthor in #572
• fix(git): re-import from Rawhide for curl 8.23 credential handling by @​hanthor in #569
• fix(gtk4): move to 4.24.1 for nautilus 51.1 by @​hanthor in #571
• fix(libsecret): re-import from Rawhide for the dbus-run-session BuildRequires by @​hanthor in #570
• feat: add GNOME System Monitor package by @​hanthor in #542
• feat: import GNOME color manager and user share by @​hanthor in #556
• feat: add GNOME C++ binding recipes by @​hanthor in #544
• feat: add glibmm2.68 recipe by @​hanthor in #543
• import: Rawhide libsigc++30 by @​hanthor in #560
• import: Rawhide freerdp by @​hanthor in #559
• feat: import papers (retry after libspelling publish) by @​hanthor in #532
• docs: add repo-inspection and lane-validation skills by @​hanthor in #533
• feat: import printing core wave (system-config-printer, hplip) by @​hanthor in #525
• feat: import thumbnailers and Disks wave by @​hanthor in #523
• feat: import H.264 and bad-free closure wave by @​hanthor in #526
• feat: import netfs and pinentry starters wave by @​hanthor in #524
• feat: import laptop-power and VPN recipe wave by @​hanthor in #522
• feat: import libvarlink, sysstat, pv closure wave by @​hanthor in #519
• fix(canary): account for buildroot shifts between canary passes by @​hanthor in #516
• ci(bump): regenerate and commit multimedia closure report on upstream bump by @​hanthor in #515
• feat: import dev-tools essentials: xdg-utils, rsync, nano, tmux, htop by @​hanthor in #514
• fix(screen-reader): build liblouis and brltty without Fedora's ICU 77 by @​hanthor in #470
• feat: import the GNOME screen-reader stack (orca, speech-dispatcher) by @​hanthor in #466
• fix(import): let the isolated lock step write its output by @​hanthor in #456
• ci(sources): let the scheduled source verification finish by @​hanthor in #453
• fix(sources): move pagure-hosted locks off releases.pagure.org by @​hanthor in #452
• feat(site): shareable package links in the catalog by @​hanthor in #451
• fix(flatpak): drop Fedora flatpak repository setup by @​hanthor in #454
• feat: publish an interactive package catalog on GitHub Pages by @​hanthor in #450
• feat: add gnome-rounded-blur recipe with Dakota mutter-51 port by @​hanthor in #440
• fix(pcsc-lite-ccid): do not disable pcscd.service in %preun by @​kylerankin in #431
• docs: defer architecture.md packit digest to its owning workflow by @​kylerankin in #427
• docs: clarify bot validation merge requirements by @​hanthor in #420
• feat(multimedia): measure recipe closure and honor indexed metadata by @​hanthor in #414
• fix(ci): validate bot PR heads without exposing write credentials by @​hanthor in #408
• fix(ci): make Canary perturbations unique per retry by @​hanthor in #418
• feat(terminal): import Ptyxis with its VTE and simdutf dependencies by @​hanthor in #413
• fix(sources): fetch 40 verified GNOME archives upstream by @​hanthor in #417
• fix(measure): refresh backlog after recipe imports by @​hanthor in #416
• feat(measure): preserve the identity of the factory audit backlog by @​hanthor in #412
• feat(factory): add source-locked nvtop recipe by @​hanthor in #410
• fix(sources): enforce SHA-512 manifests for live recipes by @​hanthor in #407
• fix(rawhide): guard Release and restore libnma provenance by @​hanthor in #409
• ci: measure queue wait using non-skipped job starts by @​hanthor in #411
• fix(validation): restore factory hooks and inventory guidance by @​hanthor in #406
• fix(publish): keep libcdio at 2.3.0 and bump pipewire to 1.6.9 by @​hanthor in #381
• fix(import): workflow writes the source lock, Packit block, and counts by @​hanthor in #398
• fix(tools): allow md5 verification on FIPS-mode OpenSSL by @​hanthor in #397
• fix(gate): wait on approved Canary run IDs, not the check-runs API by @​hanthor in #396
• docs: fix contributing.md gpm sources pin description by @​kylerankin in #391
• fix(pcsc-lite-ccid): correct unit-name typo in %preun scriptlet by @​mrbobbytables in #368
• feat(factory): build tpm2-tools, pcsc-lite and pcsc-lite-ccid by @​hanthor in #364
• chore(libayatana-appindicator): re-pin provenance to rawhide ce72ea5 by @​hanthor in #358
• fix(gate): approve parked pull_request runs on the gated commit by @​hanthor in #355
• fix(bump): give a dispatched relock its own PR branch by @​dtg01100 in #346
• fix: preserve auxiliary source pins during upstream bumps by @​j1mc in #326
• fix(bump): commit the empty holds file the bump PR adds by @​hanthor in #348
• fix(bump): read forge releases before tags, compare suffixed locks by prefix by @​hanthor in #347
• feat(bump): hold bumped packages that fail the gate, merge the rest by @​hanthor in #332
• fix(libgphoto2): update to 2.5.34 and drop the upstreamed music-players patch by @​hanthor in #337
• feat(sources): upstream feeds for the lookaside-locked recipes by @​hanthor in #342
• fix(libayatana-appindicator): update to 0.6.0 with Fedora mono metadata fix by @​hanthor in #339
• fix(libmtp): update to 1.1.23 and drop both upstreamed patches by @​hanthor in #338
• fix(libheif): update to 1.23.5 and drop the upstreamed no-hevc-tests patch by @​hanthor in #336
• fix(libqmi): update to 1.38.0 and build docs with gi-docgen by @​hanthor in #334
• fix(libqrtr-glib): update to 1.4.0 and build docs with gi-docgen by @​hanthor in #335
• fix(ddcutil): update to 2.2.7 and BuildRequire libacl by @​hanthor in #333
• fix(bump): keep bundled sources when moving a primary tarball pin by @​hanthor in #331
• feat(rawhide): re-import safe Rawhide recipe moves in one gated daily PR by @​hanthor in #329
• ci(bump): merge the daily upstream bump when its packages build by @​hanthor in #327
• fix(bump): commit only the lock and recipes in the bump PR by @​hanthor in #324
• ci: measure subprocess tool coverage and enforce an 80% floor by @​arteeh in #317
• fix(bump): fetch forge updates from their own URL, skip one failed download by @​hanthor in #321
• fix(plymouth): lock the source, add the Packit block, and count the recipe by @​hanthor in #320

Dakota (GNOME OS Prototype)​

• Remove ':btw' stream details from README by @​castrojo in #1835
• feat(bluefin): package VM guest agents for VMware, KVM, and Hyper-V by @​castrojo in #1790
• feat(bluefin): package cli performance tools by @​castrojo in #1786
• feat(packages): package powertop and libtracefs by @​castrojo in #1792
• feat(bluefin): package nfs-utils and rpcbind for NFS mounts by @​castrojo in #1789
• fix(gaming): expose 32-bit Vulkan ICDs on standard XDG path by @​castrojo in #1775
• docs(readme): refresh feature overview and copyedit text by @​castrojo in #1834
• chore(extensions): remove quick settings audio panel by @​castrojo in #1833
• perf(build): target x86-64-v3 across image variants by @​ahmedadan in #1831
• fix: remove three duplicate app icons from the Dakota image by @​kylerankin in #1829
• fix(ci): stop publish from silently dropping or racing images by @​ahmedadan in #1828
• chore(deps): Linux 7.3, Ghostty 1.4.0, Zig 0.17, common and brew by @​ahmedadan in #1827
• chore(deps): source update pass, drop GNOME OS zswap-generator, NVIDIA 615.78.08 by @​ahmedadan in #1825
• fix(ujust): remove probe recipe by @​castrojo in #1817
• ci(build): reuse the cached base image in signed publishes by @​ahmedadan in #1822
• fix(release): make published metadata and rollback match what ships by @​ahmedadan in #1820
• fix(kernel): enable intel_idle and x86 options, fix Kconfig pruning by @​ahmedadan in #1819
• fix(fastfetch): drop rpm-ostree glyph and missing stats lines by @​ahmedadan in #1813
• fix: drop eMudhra roots and restore uupd user updates by @​ahmedadan in #1808
• feat(wallpapers): consume multi-arch OCI wallpaper payload and install SVGs by @​castrojo in #1797
• chore(deps): bump sources for GNOME 51.1 and fdsdk 26.08.2 by @​ahmedadan in #1796
• fix(ci): raise publish timeout for signed nvidia-gaming by @​ahmedadan in #1794
• feat(tilingshell): new default layout by @​theMimolet in #1727
• feat(secure-boot): sign the boot chain and ship shim for EAC by @​ahmedadan in #1781
• feat(audio): package alsamixer and alsa-utils tools by @​castrojo in #1785
• fix(menu): retire custom-command-menu dconf override in favor of common by @​castrojo in #1768
• fix(chairlift): migrate default installation to projectbluefin tap by @​castrojo in #1772
• fix(libvirt): create secrets directory at boot by @​ahmedadan in #1777
• chore(prow): add /transfer command support for triagers by @​castrojo in #1763
• feat(image): add initramfs boot modules, refresh sources, fix image tag by @​ahmedadan in #1766
• ci(next): pause the next stream until the GNOME 52 beta by @​ahmedadan in #1765
• feat(kernel): broaden hardware driver coverage and zstd-compress modules by @​ahmedadan in #1762
• fix(sudo): let sudo find Homebrew binaries by @​ahmedadan in #1761
• feat(ci): onboard Dakota to Prow and remove legacy workflows by @​castrojo in #1758
• fix(network): let wheel add Wi-Fi from game mode by @​ahmedadan in #1752
• feat(virtualization): package and integrate virtiofsd by @​castrojo in #1749
• fix(printing): prevent truncated PDF page counts by @​ahmedadan in #1724
• feat(deps): restore source updates with patch checks by @​ahmedadan in #1740
• revert :"feat(deps): keep local source updates aligned with CI" by @​castrojo in #1739
• feat(deps): keep local source updates aligned with CI by @​ahmedadan in #1734
• ci: consumer validation for projectbluefin/actions#621 by @​dtg01100 in #1735
• fix(branding): use bluefin wordmark for about logo by @​castrojo in #1729
• ci(track): bundle source bumps into one PR to cut build queue by @​ahmedadan in #1722
• fix(gnome): ship rounded blur for Mutter 51 by @​castrojo in #1720
• fix(bluefin): sync ChairLift helper and policy to alpha.4 by @​ahmedadan in #1714

Contributors​

Sources​

• github-activity: available (2026-10-01 to 2026-10-31): source
• github-lanes: available (2026-10-01 to 2026-10-31): source
• github-releases: available (2026-10-01 to 2026-10-31): source
• github-releases: available (2026-10-01 to 2026-10-31): source
• github-releases: available (2026-10-01 to 2026-10-31): source
• countme: unavailable — Countme active-system measurement is incomplete. (2026-10-01 to 2026-10-31): source
• homebrew: available (2026-10-01 to 2026-10-31): source
• flathub: available (2026-10-01 to 2026-10-31): source

Participation

Human and automated contributions with current contributors.

Show the numbers

Human and automation activity data for September 2026 UTC (2026-09-01 to 2026-09-30)

Label	Human	Automation
Report period	780	420

🏆 Hive Leaderboard

Hive Leaderboard: Community Heroes

Celebrating our top community builders across the Project Bluefin factory

RankContributorImpactProjectsMilestone

#01@castrojo272 PRscommondakotatestsuite+7Top Hero#02@hanthor110 PRscommontestsuiteserver+4High Velocity#03@kylerankin67 PRscommontestsuiteserver+6High Velocity#04@mrbobbytables65 PRstestsuiteserveractions+4High Velocity#05@Danathar59 PRscommondakotatestsuite+7High Velocity#06@ahmedadan47 PRscommondakotadocumentationHigh Velocity#07@mendezr32 PRscommontestsuiteserver+5New Light#08@jeefy29 PRsserverNew Light#09@Siddhj220616 PRscommonactionsfinpilotHigh Velocity#10@repires15 PRscommontestsuiteactions+3High Velocity#11@buggtb14 PRscommontestsuiteactions+2New Light#12@dtg0110013 PRsserveractionsdocumentation+1High Velocity#13@sramkrishna12 PRscommontestsuiteactions+2New Light#14@arteeh5 PRscommonserverutah-packagesNew Light#15@KiKaraage5 PRscommonactionsutahHigh Velocity#16@HuntedRaven73 PRscommonactionsutahCross-Fleet#17@clubanderson3 PRscommonutah-packages#18@eltorrero3 PRscommonactions#19@TB5162 PRsserverdocumentationNew Light#20@bronson1 PRserverNew Light

✨

Welcome New Lights (11)

First-time guardians who made their mark in the factory this month.

@mendezr@sramkrishna@kronikpillow@buggtb@arteeh@xHope-tech@ericcurtin@KOTONEX@jeefy@bronson@TB516

Release details remain on the canonical /changelogs surface.

Completed work​

• fix(ci): report required checks on docs-only PRs by @​Danathar in #1181
• docs(secrets-policy): record Cloudflare secrets as provisioned by @​clubanderson in #1275
• feat(wallpaper): ship original looping movie for Hidamari by @​mendezr in #1207
• refactor: remove produced-but-unconsumed nvidia overlay by @​mendezr in #1263
• docs(ci-tooling): record Renovate fork processing for the printer forks by @​sramkrishna in #1259
• docs(release-promotion): record printer testing-to-stable promotion proof by @​kylerankin in #1257
• feat(brew): update opencode to the v2 formula by @​kronikpillow in #1270
• docs(ci-pitfalls): correct create-github-app-token owner/repositories scoping by @​castrojo in #1269
• fix(chairlift): refresh vendored desktop entry and icons to v26.09.0-alpha.2 by @​clubanderson in #1274
• docs(chairlift): fix broken brew-lifecycle doc reference in config.yml by @​buggtb in #1273
• fix: align ChairLift config and ship GSettings schemas by @​mendezr in #1265
• fix(nvidia): pin suspend notifiers so sleep is not vetoed by @​mendezr in #1176
• fix(brew): comment out kcl, use upstream kpt, remove aurora-wp by @​KiKaraage in #1131
• feat(wallpaper): add Damask first-run setup hook and non-destructive defaults by @​repires in #1186
• fix: reconcile inert .github Renovate configuration by @​repires in #1183
• feat(damask): ship flatpak overrides and background systemd service by @​repires in #1187
• feat(chairlift): add wallpaper slideshow and video wallpaper brew bundles by @​sramkrishna in #1185
• ci: run all maintained unit suites in CI by @​arteeh in #1249
• feat(testing): add a hardware-free eSCL scanner fixture by @​sramkrishna in #1225
• docs(contributing): add per-repo reviewer coverage map with refresh procedure by @​mendezr in #1248
• docs: inventory printer and scanner driver projects by @​arteeh in #1221
• docs: record printer application upstream source baseline by @​buggtb in #1251
• docs(skills): track PAPPL scanning API upstream status and ownership boundary by @​buggtb in #1218
• docs(printer-apps): add release-contract evidence matrix by @​buggtb in #1222
• docs(ci-tooling): correct stale claim about dockerfile manager and COPY --from by @​buggtb in #1255
• docs(skills): correct renovate versioned-binary tracking wording by @​mendezr in #1250
• docs: assess native HP PCL app against HPLIP OCI coverage by @​buggtb in #1236
• docs: evaluate LPrint v1.4.0 as FSDK OCI label-printer appliance by @​kylerankin in #1235
• docs: correct reusable lifecycle automation ownership (bonedigger, not actions) by @​buggtb in #1227
• docs(scanner): evaluate scanApp POC and pappl-retrofit scanning feasibility by @​buggtb in #1220
• docs: evaluate legacy SANE scanning appliance without claiming driverless parity by @​buggtb in #1219
• docs(contributing): add self-collision preflight draft for intra-lane duplicate PRs by @​sramkrishna in #1201
• fix(audio): make Bluetooth auto-switch opt-in instead of default by @​mendezr in #1179
• feat(brew): remove RamaLama from Bluefin AI tools bundle by @​kylerankin in #1204
• fix: honor NO_COLOR in local override output by @​Danathar in #1190
• fix: require review for GitHub Actions minor/patch updates by @​Danathar in #1146
• ci: run the suite-registration drift gate on every PR by @​kylerankin in #1192
• feat: WSL/container machine equivalent developer environment via Lima by @​repires in #1175
• fix(systemd): remove local-fs ordering cycle in rechunker-group-fix by @​kylerankin in #1208
• feat(countme): add dakota-scoped client and systemd units by @​castrojo in #1154
• feat(bazaar): Sept 2026 curation update, 7 new recs by @​KiKaraage in #1173
• fix: empty hooks directory made setup services exit 127 by @​kylerankin in #1193
• ci: block unpinned git checkouts in Containerfile builder stages by @​mendezr in #1178
• feat: Super+E should open a new Nautilus window on every press by @​repires in #1184
• chore: update motd + config by @​theMimolet in #1077
• fix(brew): drop tremor-runtime, removed from Homebrew by @​castrojo in #1206
• fix(countme): retry Dakota once per UTC week by @​castrojo in #1203
• fix(chairlift): track rebranded projectbluefin/chairlift release by @​eltorrero in #1121
• fix(apps): pin and sha256-verify OpenTabletDriver install fetches by @​mendezr in #1198
• docs(contributing): add agent-lane-throttle.md — demand-side throttle for the hold-gate queue by @​sramkrishna in #1197
• docs(contributing): add triage-sla.md — 14-day first-response SLA proposal for human-authored issues by @​mendezr in #1195
• docs(skills): record image-identity ownership decision — docs/skills/image-identity.md by @​sramkrishna in #1191
• docs: add systemd-homed-by-default decision record by @​eltorrero in #1200
• docs(bluespeed): mark bluefin-mcp as archived in the specification by @​kylerankin in #1199
• docs(contributing): add hold-gate PR queue prioritization rubric by @​repires in #1188
• docs: correct secrets-policy enforcement claim and add credential preflight rule by @​sramkrishna in #1180
• docs: document downstream label subsets separate from core factory catalog by @​mendezr in #1177
• docs(skills): widen category enum to include platform and product by @​repires in #1182
• docs(factory): ban COMMENT-only PR reviews and comment spam by @​castrojo in #1174
• fix(brew): preserve user-owned preinstall packages by @​Danathar in #1109
• fix(wireplumber): disable IR sensor on Kingcome hybrid webcam (2b7e:55c0) by @​castrojo in #1119
• fix(cli): replace atuin and bash-preexec with starship and add tests by @​castrojo in #1113
• docs(skills): maintainer-driven tool actions and duplicate-cluster resolution by @​castrojo in #970
• docs: fix grammatical and readability problems README.md by @​xHope-tech in #1017
• feat(bazaar): modernize curated layout and add Flathub IDE host integration hooks by @​castrojo in #1155
• fix(bling): ship working ujust completions for bash/zsh/fish by @​KiKaraage in #1129
• ci(actionlint): allow the ubuntu-26.04 runner labels by @​Danathar in #1151
• fix: add consistent bootc sudo policy by @​castrojo in #932
• fix(sec): ship Sigstore trust materials (Fulcio root + Rekor key) by @​hanthor in #933
• feat: add llmman to ai-tools Brewfile by @​ericcurtin in #1097
• fix(brew): allow dedicated ChairLift migration by @​ahmedadan in #1100
• fix(bling): rearm bash-preexec DEBUG trap on each prompt by @​castrojo in #943
• fix(brew): replace invalid brew tap --trust with brew tap + brew trust by @​castrojo in #941
• test: isolate UWELCOME_SHOWN in test_motd_integration.bats by @​castrojo in #1088
• refactor(just): move 00-entry.just to shared with optional imports by @​Siddhj2206 in #1042
• fix(flatpak): correct metered check in appstream refresh service by @​HuntedRaven7 in #1035
• fix: restore native recipes without bluefinctl by @​ahmedadan in #1083
• fix: resolve cask references and expose validation errors by @​ahmedadan in #1084
• fix(uwelcome): skip greeting for root and dedupe chained shells by @​ahmedadan in #1059
• fix(pages): dashboard CNAME qa.projectbluefin.io shadowed by redirect by @​kylerankin in #902
• fix(gate): let non-Bluefin images skip Bluefin-only scenarios, tolerate GNOME 51 display key by @​hanthor in #900
• fix(smoke): notify sandbox before app-availability early skips by @​hanthor in #899
• fix(e2e): allow unsafe-mode test extension on GNOME 51 shells by @​hanthor in #898
• fix(e2e): enable sshd via kernel arg so image presets cannot undo it by @​hanthor in #895
• fix(bazzite): mark extension 'is enabled' scenarios pending on state=6 regression by @​buggtb in #888
• refactor: remove unconsumed DEFAULT_SLA and SLA_STRICT from timing helper by @​repires in #882
• fix(renovate): restrict automerge to immutable-ref housekeeping by @​kylerankin in #886
• chore(scripts): remove dead parse_results script and tests by @​repires in #884
• docs(coverage): sync qa-review recount totals with suite-map snapshot by @​repires in #881
• chore(deps): update github-actions (non-major) by @​castrojo in #879
• docs(coverage): sync qa-review totals, add installer matrix row, fix flatpak gap by @​castrojo in #880
• test(smoke): comprehensive AT-SPI, stability, and presence coverage for Dakota GNOME extensions by @​castrojo in #808
• docs: remove ghost-lab dependencies and gate requirements by @​castrojo in #878
• chore: remove bluefinctl test coverage by @​castrojo in #822
• fix(shared): route AT-SPI tree dump through resolve_results_dir by @​kylerankin in #825
• fix(justfile): route results parsing through e2e_summary.py by @​mendezr in #873
• docs(software): audit the @future scenarios blocking GNOME 51 re-validation by @​sramkrishna in #877
• test(smoke): skip @vm_only scenarios in container lanes by @​castrojo in #740
• test(lifecycle): add settled-deployment barrier and activate bootc pin scenario by @​mrbobbytables in #837
• [sec-check] fix: declare top-level permissions: {} in e2e.yml by @​Danathar in #813
• refactor(ssh): Phase 2 — route dx/flatcar/kde-smoke/software/vanilla-gnome onto ssh_config.ssh_argv() by @​mrbobbytables in #790
• fix(gnome-e2e): source the results summary from scripts/e2e_summary (#797) by @​mendezr in #819
• docs(gnome): trim duplicate blank line to satisfy 500-line SKILL.md cap by @​Danathar in #869
• refactor: fold duplicated _first_value into shared ssh_config by @​mrbobbytables in #787
• docs(ci): make GNOME version string neutral across e2e summary and docs by @​mendezr in #854
• test(vanilla-gnome): add GNOME 51 reduced-motion and focus-ring gsettings round-trips by @​kylerankin in #851
• test(common): activate podman user socket scenario and track immutable status blockers by @​mrbobbytables in #852
• test(smoke): audit GNOME 50 workarounds against GNOME 51, update gnome.md by @​kylerankin in #848
• fix(ci): unify image-slug grammar across e2e workflow and artifact tags by @​mrbobbytables in #865
• ci: restore migration-target and extra-tags inputs to e2e.yml by @​kylerankin in #867
• test(software): re-anchor @future scenarios from closed #176 to #847 by @​mrbobbytables in #849
• test(vanilla-gnome): GNOME 51 readiness — Shell version canary by @​mrbobbytables in #864
• docs: align AGENTS.md and contributing/SKILL.md on skill-update gate by @​mrbobbytables in #862
• test(smoke): suppress session idle-lock in smoke setup to unblock GOA provider-list by @​mrbobbytables in #850
• test(quality): unit coverage for scripts/generate_skill_index.py by @​mrbobbytables in #788
• docs(scanner): fix malformed unit-test documentation block by @​mrbobbytables in #785
• fix(e2e): scope metadata artifacts by image by @​castrojo in #856
• fix(smoke): ignore Nvidia CDI failures in QEMU by @​castrojo in #855
• fix(e2e): stabilize Firefox accessibility workflow by @​castrojo in #853
• fix(e2e): robust toggle-updates probe, storage service lifecycle, and Firefox window lookup by @​castrojo in #792
• feat(nvidia): NVIDIA sysext skill and driver release tracking by @​dtg01100 in #326
• ci(build): run boot-test and release-dry-run when kernel-cache is skipped by @​jeefy in #328
• fix(initrd): verify the per-node Ignition config before applying it by @​kylerankin in #285
• fix(installer): keep console install failures visible instead of halting by @​dtg01100 in #321
• feat(nvidia): deliver the driver and toolkit sysexts to nodes by @​jeefy in #319
• fix(os): ship /etc/protocols and /etc/services (IANA netdb) for NFSv3 by @​jeefy in #317
• fix(sysupdate): ship the trust keyring in the vendor image by @​arteeh in #312
• feat(nvidia): container toolkit sysext (CDI) by @​jeefy in #304
• feat(nvidia): open-kernel-module driver sysext (nvidia-open-595) by @​jeefy in #305
• fix(kernel-cache): verify the whole tarball before restoring it by @​castrojo in #315
• ci(build): key-free kernel cache in ghcr.io for release builds by @​castrojo in #314
• ci(build): validate pull requests, build the image nightly, on main and on demand by @​castrojo in #313
• feat(installer): carry stick credentials to the installed disk; developer-mode admin user by @​castrojo in #300
• fix(security): clear group/other write from image paths; repair /etc on existing installs by @​castrojo in #303
• docs: sync the Booty story with jeefy/booty main by @​jeefy in #298
• feat(os): NFS client (nfs-utils + rpcbind, client-only) in the base image by @​jeefy in #295
• fix(installer): quiet vfat exec-bit repart warnings on diskless boot path by @​kylerankin in #283
• fix(installer): accurate login banner and first-boot password docs by @​castrojo in #297
• fix(installer): ask for a root password on the installed disk's first boot by @​castrojo in #293
• ci(build): queue main runs instead of cancelling them; upload installer logs by @​jeefy in #292
• ci(track-binaries): refresh amd64 and arm64 pins together, with tests by @​jeefy in #288
• build: drop FSDK os-release from the build sandbox and its patches by @​castrojo in #291
• fix(installer): no keymap or erase questions, reboot when done by @​castrojo in #290
• docs: follow-ups deferred from #276 by @​jeefy in #289
• ci: boot-test the offline USB installer end to end by @​jeefy in #277
• test: assert parsed properties instead of file text; no silent skips in CI by @​jeefy in #278
• build: reproducible image assembly, key-set safety, patch docs by @​jeefy in #281
• build: drop the gnome-build-meta junction by @​jeefy in #280
• refactor: shared sysext packing recipe, arm64 binary pins, base-image cleanups by @​jeefy in #279
• ci(release): dry-run the publish path on pull requests; attest provenance and publish an SBOM by @​jeefy in #269
• ci: boot-test tamper refusal, HTTP boot, Ignition and A/B rollback; skip image builds for docs-only changes by @​jeefy in #270
• fix(installer): boot offline, allow credential overrides, quiet repart warnings by @​castrojo in #268
• feat(update): automatic updates with a Kubernetes interlock, a boot health gate and a diskless update signal by @​jeefy in #271
• feat(initrd): explain diskless boot failures and ignored Ignition kargs by @​jeefy in #273
• docs: accuracy pass after the FSDK rebase by @​jeefy in #276
• ci: track patch releases of upstream binaries (Kubernetes, containerd, runc, CNI, k0s, ORAS) by @​jeefy in #272
• fix(security): ship root locked; provision access per node by @​jeefy in #275
• feat(installer): offline USB installer image booting into systemd-sysinstall by @​castrojo in #264
• fix(ci): install ORAS 1.3.4 by URL and checksum by @​castrojo in #266
• feat!: FSDK-composed OS with a signed, diskless-first boot chain by @​jeefy in #262
• Remove heading from README.md by @​castrojo in #261
• docs: add theme-adaptive wordmark to README by @​castrojo in #260
• feat(installer): opt-in network credentials pull (inst.creds_url / inst.creds_sha256) for PXE installs by @​jeefy in #253
• fix(ddi): restore the setuid/setgid bits Flatcar ships on sudo, su, passwd, mount, … by @​jeefy in #255
• fix(installer): actually wait for the network before the DDI download by @​jeefy in #252
• fix(installer): stage the network DDI in /dev/shm and check free space before decompressing by @​jeefy in #251
• fix(creds): apply firstboot.* credentials without systemd-firstboot by @​jeefy in #254
• fix(installer): rewrite the network DDI repart override without sed by @​jeefy in #250
• fix(installer): bare-metal USB install consolidation, preset ordering, and OVMF boot test by @​castrojo in #243
• fix(fsdk): disable tests in glib-stage1 bootstrap by @​castrojo in #51
• docs(arch): scope FSDK hard rule to installer by @​castrojo in #133
• chore(ci): pin runners to ubuntu-26.04 by @​castrojo in #237
• fix(kiosk): bridge guest loopback proxy via SSH port forwarding for QEMU by @​mrbobbytables in #202
• refactor: switch OS payload to Flatcar base, drop displaced FSDK components by @​kylerankin in #132
• refactor(arch): split release-version into installer and Flatcar axes by @​mrbobbytables in #136
• fix(flatcar): use flatcar-kernel-container-sha256 in flatcar-usr.bst by @​castrojo in #236
• feat(flatcar): add flatcar-usr.bst importing Flatcar /usr as the OS payload base by @​mrbobbytables in #140
• build: os-base option to compare FSDK payload against Flatcar reference by @​kylerankin in #163
• feat(installer): add opt-in PXE network DDI pull by @​kylerankin in #229
• test(installer): behavioural contract for the QEMU boot-proof readiness gate by @​Danathar in #219
• fix(k0s): pin argocd image by digest and upgrade past EOL v2.12.3 by @​kylerankin in #212
• fix(kiosk): console shows live local cluster state on first boot by @​kylerankin in #214
• arch: make include/flatcar.yml the single source of truth for Flatcar pins by @​kylerankin in #143
• feat(creds): extend systemd-creds provisioning to SSH keys, network, firstboot, and TPM2 by @​mrbobbytables in #221
• revert: remove unapproved appliance identity design (#208) by @​castrojo in #235
• fix(installer): harden flash-installer with refusal guards, write verification, and GPT backup relocation by @​castrojo in #225
• chore(renovate): disable the homebrew manager for binary-asset formulae by @​castrojo in #211
• ci: include scripts/** in unit-tests workflow paths filter by @​mendezr in #234
• fix(justfile): probe install-vm kiosk readiness from inside the guest (rebased) by @​castrojo in #227
• fix(installer): hard preflight abort when bluefin-installer-data is absent by @​castrojo in #224
• fix(boot): resolve QEMU installer boot deadlock and console readiness probe by @​mrbobbytables in #220
• fix(ci): pin just tool version in CI workflows by @​kylerankin in #190
• ci: expand unit-tests workflow paths trigger by @​mrbobbytables in #189
• fix(renovate): match the freedesktop-sdk series the junction actually tracks by @​hanthor in #84
• ci: land #190, #189 and #84 with the build.yml conflict resolved by @​castrojo in #217
• fix(ci): move junction ref tracking out of the pull_request path by @​castrojo in #180
• feat(flatcar): record container runtime parity by @​castrojo in #192
• feat(arch): produce Flatcar-to-FSDK version parity matrix (#142) by @​mrbobbytables in #184
• test(build-depends): lock in os-countme curl+jq FSDK paths by @​kylerankin in #122
• fix(installer): bound root-a partition to guarantee room for var by @​mrbobbytables in #207
• fix(test): preserve installer-created var partition by @​castrojo in #157
• ci: update installer evidence workflow pin by @​castrojo in #156
• fix(ci): support repart on hosted runners by @​castrojo in #152
• ci: update installer test workflow pin by @​castrojo in #151
• ci: run installer smoke through shared QEMU workflow by @​castrojo in #149
• Add kmod component and update depmod path by @​bronson in #146
• docs: mandate distributed BuildStream builds on ghost cluster by @​castrojo in #121
• fix(installer): fix kernel module extraction and probe USB storage drivers by @​castrojo in #120
• fix(e2e): support self-signed TLS certificates in readiness checks by @​castrojo in #118
• feat(lima): end-to-end Lima VM orchestration and automated browser login by @​castrojo in #117
• perf(kiosk): set KAGENTI_CONTROLLER_URL="none" in kc-agent gate command by @​mrbobbytables in #114
• feat(kiosk): forward kubernetes API port 6443 in install-vm by @​castrojo in #107
• feat(countme): ship the shared bluefin-countme reporter by @​castrojo in #94
• fix(kubestellar): correct container image tags and names in k0s manifests by @​kylerankin in #103
• fix(k0s): generate kubeflex postgres password at first boot instead of hardcoding it by @​kylerankin in #102
• fix(ci): restore dropped k0s sysext copy into dist/release/ by @​castrojo in #93
• feat(kernel): add Flatcar LTS kernel & ZFS sysext, export PXE release assets by @​castrojo in #92
• fix(installer): show interactive UI on the local display by @​TB516 in #79
• fix(k0s): complete first-boot activation and console readiness by @​castrojo in #63
• fix(build): prepare alpha release validation and sysext cleanup by @​castrojo in #59
• fix(fsdk): create uninstalled libappstream symlinks in appstream-minimal by @​castrojo in #58
• fix(build): add SONAME symlinks and LD_LIBRARY_PATH for gdk-pixbuf by @​castrojo in #56
• fix(fsdk): resolve libgirepository SONAME symlinks in gobject-introspection-base by @​castrojo in #54
• fix(chunka): pin chunkah's build clock so an unchanged rebuild keeps its digest by @​dtg01100 in #592
• chore: bump testsuite e2e pin for Utah gate fixes by @​hanthor in #588
• chore: bump testsuite e2e pin for GNOME 51 + early-skip fixes by @​hanthor in #587
• chore: bump testsuite e2e pin to include preset-proof sshd enablement by @​hanthor in #584
• fix(factory-health): dedupe open alerts by author by @​repires in #577
• fix(factory-health): close recovered alerts so dedupe stops muting pipelines by @​Danathar in #550
• ci(unit-tests): add missing workflow paths for tested guarded workflows by @​buggtb in #578
• fix(ci): annotate reusable-thin-caller-gate and drop hardcoded count in test by @​castrojo in #573
• fix(factory-health): require a minimum sample before alerting by @​Danathar in #560
• ci(promote-squash): let callers say the promotion PR is merged by a human by @​Danathar in #566
• fix(factory-health): fail the run when factory alerts are misrouted by @​Danathar in #564
• fix(workflows): stop PR-controlled CHUNKAH_VERSION reaching shell in vendor-chunka-files by @​sramkrishna in #570
• fix(release): normalize caller-supplied image reference by @​Siddhj2206 in #524
• feat(ci): annotate reusable workflows with required token type by @​mrbobbytables in #547
• ci(unit-tests): cover reusable-renovate-automerge.yml in the paths filter by @​Danathar in #553
• feat(reusable-build): allow testing-stream builds to opt into rechunking and SBOM by @​mendezr in #557
• fix(factory-health): bound the run fetch by the window, not a run count by @​Danathar in #551
• feat(ci): enforce thin-caller gate in consumer repos (issue #546) by @​Danathar in #554
• fix(ci): mint app token for renovate auto-merge wiring check by @​Danathar in #552
• docs(skills): add merge-governance and document the empty-commit consumer PR by @​castrojo in #537
• ci(unit-tests): cover ghcr-cleanup.yml in the paths filter by @​castrojo in #534
• ci(actionlint): make the required check reachable on PRs and merge groups by @​castrojo in #536
• fix(setup-runner): support ubuntu-26.04 runners and skip resolute apt source (#541) by @​castrojo in #549
• ci(unit-tests): cover guarded release workflows in paths filter by @​kylerankin in #532
• ci: test the Renovate auto-merge merge/outcome step (issue #403) by @​mendezr in #516
• test(bootc-build): add coverage and drift guards for ghcr-cleanup action by @​mrbobbytables in #511
• fix(promotion): treat missing E2E as pending by @​castrojo in #527
• fix(promotion): gate merge status on evidence by @​castrojo in #526
• fix(release): harden promotion orchestration by @​castrojo in #525
• fix(promotion): trust only Actions E2E status by @​castrojo in #521
• fix(promotion): forward E2E status context by @​castrojo in #519
• fix(promotion): bind E2E evidence to source commit by @​castrojo in #515
• fix(promotion): gate queue enrollment on verification by @​castrojo in #513
• refactor(ci): narrow installer artifact contract by @​castrojo in #506
• fix(ci): upload only QEMU serial logs by @​castrojo in #505
• fix(ci): stage QEMU failure evidence by @​castrojo in #504
• fix(ci): grant runner access to KVM device by @​castrojo in #502
• feat(ci): add server installer QEMU workflow by @​castrojo in #501
• fix(renovate): target caller repository by @​Siddhj2206 in #460
• fix(release): normalize OCI registry namespaces by @​Siddhj2206 in #461
• fix(chunka): create config temp file as root to avoid protected_regular denial by @​Siddhj2206 in #497
• ci: add scheduled Renovate auto-merge wiring assertion (#403) by @​kylerankin in #498
• arch: enforce thin-caller size gate (issue #411) by @​mendezr in #472
• fix(sign-and-publish): mitigate SBOM exceeding GitHub Attestations 16MB limit (fixes #480) by @​mrbobbytables in #484
• fix(pkg-cadence): open a PR instead of pushing to main by @​kylerankin in #476
• fix(cadence): pass app credentials to reusable workflow (fixes #425) by @​mrbobbytables in #492
• chore(ci): narrow MergeRaptor app token permissions to what's needed (fixes #421) by @​mendezr in #478
• docs(supply-chain): record cosign install trust policy (upstream-pinned single mechanism; refs #464) by @​eltorrero in #491
• docs(skills): add session-hygiene skill and mandatory gate by @​castrojo in #424
• docs(skills): capture merge-queue, consumer-CI, and Renovate learnings by @​castrojo in #402
• docs(skills): bring remaining skill files into canonical skill spec conformance by @​mrbobbytables in #471
• ci: test the Renovate auto-merge PR-lookup matcher end-to-end by @​kylerankin in #488
• fix(factory): exclude cancelled/action_required from success rate by @​kylerankin in #495
• [sec-check] fix: declare top-level permissions: {} in consumer-validation and prune-merged-branches by @​mrbobbytables in #466
• test(bats): add unit tests for 4 bootc-build composite actions by @​castrojo in #451
• ci(unit-tests): expand bootc-build path filter to cover all actions by @​castrojo in #452
• fix(validate-pr): handle spaces in system_files shellcheck paths by @​castrojo in #454
• fix(chunka): avoid E2BIG by passing inspect JSON via file instead of argv by @​mendezr in #473
• fix(promote): skip queued promotion branch rebuilds by @​castrojo in #463
• fix(scan-image): fail-closed when trivy-results.json is missing by @​HuntedRaven7 in #427
• fix(workflows): add top-level permissions: {} to consumer-validation and prune-merged-branches by @​mrbobbytables in #456
• fix: add top-level permissions: {} to consumer-validation and prune-merged-branches workflows by @​mrbobbytables in #457
• fix(ci): pass RESOLVE_OK via env in release-gate verify step by @​mrbobbytables in #458
• fix(tests): isolate podman-missing bats test from preinstalled runner podman by @​mrbobbytables in #459
• fix(promote): make reviewer requests optional by @​Siddhj2206 in #455
• fix(bootc-build): use kernel overlayfs in reusable-build by @​KiKaraage in #443
• fix(renovate-automerge): await nonterminal check states instead of blocking by @​castrojo in #448
• docs(ujust): specify console QR codes for reports by @​kylerankin in #44
• docs: update scope to ujust report framework and remove stale references by @​castrojo in #41
• chore: remove lifecycle workflow and obsolete files by @​castrojo in #40
• fix(ci): read MERGERAPTOR_APP_ID from secrets in sync-templates by @​castrojo in #39
• ci: allow ubuntu-26.04 runner labels in actionlint config by @​castrojo in #38
• fix(report): require diagnostic Gists by @​castrojo in #36
• Rename 2026-12-30-brazilian-bluefin.md to 2026-09-30-brazilian-bluefi… by @​castrojo in #1442
• Publish blog post on Ubuntu's community building by @​castrojo in #1440
• feat(blog): draft post for How We Built Ubuntu's 65M+ Community by @​castrojo in #1439
• Add brazilian-bluefins blog post by @​delphicmelody in #1428
• perf(ci): build locales in parallel shards so build time stays flat by @​castrojo in #1420
• docs(i18n): translate installation, mission, values, command-line into Czech by @​Danathar in #1423
• fix(i18n): correct ExtensionManager Flathub link casing across 5 locales by @​castrojo in #1424
• i18n(de): translate index.md and UI strings for German by @​castrojo in #1421
• i18n(sv): translate index.md and UI strings for Swedish by @​kylerankin in #1409
• feat(i18n): translate docs: Indonesian (id) by @​kylerankin in #1413
• feat(i18n): translate core docs and UI strings into Vietnamese (vi) by @​kylerankin in #1405
• docs: translate index.md and UI strings to Spanish by @​kylerankin in #1414
• i18n(uk): translate index.md and UI strings for Ukrainian by @​kylerankin in #1416
• i18n(ko): translate index.md and UI strings for Korean by @​dtg01100 in #1418
• docs(analytics): describe the daily projectbluefin-countme ping by @​castrojo in #1355
• fix: give Utah a real tag series in the update-churn pipeline by @​dtg01100 in #1419
• docs: add Czech (cs) i18n translations by @​castrojo in #1408
• i18n(fr): translate index.md and UI strings for French by @​castrojo in #1415
• perf(ci): cut pages.yml build time — parallel fetch-data, verify job, leaner caches by @​castrojo in #1411
• i18n(hi): translate index.md and UI strings for Hindi by @​dtg01100 in #1410
• i18n(tr): translate index.md and UI strings for Turkish by @​dtg01100 in #1407
• i18n(ar): translate index.md and UI strings for Arabic by @​dtg01100 in #1406
• docs: translate docs into Chinese (Traditional) (zh-Hant) by @​castrojo in #1401
• docs: add Chinese (Simplified) zh-Hans docs translation by @​kylerankin in #1404
• i18n(pl): translate index.md and UI strings for Polish by @​kylerankin in #1402
• Add download section to Utah documentation by @​castrojo in #1403
• fix(i18n): close review gaps in translated builds by @​castrojo in #1400
• docs(skills): add countme reporting diagnosis procedure by @​castrojo in #1354
• feat(i18n): open 20 locales for PR-based docs translation by @​castrojo in #1379
• Change header style in blog post by @​castrojo in #1378
• Update blog on Bluefin development insights by @​castrojo in #1377
• Add section on project visualization with gource by @​castrojo in #1376
• Revise Bluefin development visualization blog post by @​castrojo in #1375
• feat: Bluefin development visualized blog post by @​castrojo in #1374
• fix(docs): point the Dakota page's Bluefin Classic link at /classic by @​castrojo in #1369
• fix(driver-versions): order tabs Bluefin, Server, Classic, Utah by @​castrojo in #1368
• Update Dakota alpha information and add Bluefin Classic note by @​castrojo in #1367
• Revise Dakota description and alpha status by @​castrojo in #1366
• Revise Bluefin Classic documentation by @​castrojo in #1365
• fix(images): name the catalog cards Bluefin and Bluefin Classic by @​castrojo in #1364
• feat(docs): order the Images catalog Bluefin, Classic, Utah by @​castrojo in #1363
• feat(docs): order Images sidebar and add the Classic legacy ISOs by @​castrojo in #1362
• feat(docs): remove Bluefin LTS and GDX from the site by @​castrojo in #1361
• Rename Dakota to Bluefin and update content by @​castrojo in #1360
• Revise Utah documentation for alpha status by @​castrojo in #1359
• Update warning message for legacy ISOs by @​castrojo in #1358
• Modify sidebar items and remove Donations category by @​castrojo in #1357
• Update Docusaurus config for Bluefin documentation by @​castrojo in #1356
• feat(analytics): read the Bluefin card from daily pings too by @​castrojo in #1350
• feat(analytics): add a Bluefin Utah chart between Bluefin and Bluefin Classic by @​castrojo in #1349
• docs(ai): replace ramalama with llmman by @​castrojo in #1348
• refactor(countme): cut /v1 to a daily ping counted per image by @​castrojo in #1347
• feat(countme): allowlist Bluefin image names and split daily counts per image by @​castrojo in #1346
• fix(countme): create eos tables in the Worker, drop the migration step by @​castrojo in #1345
• feat(countme): receive eos-phone-home pings in the canonical Worker by @​castrojo in #1344
• feat(countme): chart Bluefin stable and testing check-ins by @​castrojo in #1343
• feat(portal): source PortalNews from local blog index and align unavailable state by @​repires in #1340
• fix(countme): preserve raw pings outside published Dakota series by @​castrojo in #1342
• fix(countme): acknowledge Dakota reports after storage by @​castrojo in #1339
• feat(leaderboards): render Recent Milestones as horizontal scroller below Community Builders by @​castrojo in #1337
• feat(images): rework catalog for Bluefin Classic at ublue-os, Dakota, and Utah by @​castrojo in #1335
• feat(leaderboards): add Recent Milestones leaderboard as a ledger of teamwork by @​castrojo in #1336
• feat(leaderboards): add GNOME seasons and modern standings by @​castrojo in #1333
• refactor: route remaining hand-rolled GitHub auth sites through shared clients by @​sramkrishna in #1327
• fix(registry): support REGISTRY_CACHE_HOURS=0 to keep live task data fresh on deploy by @​castrojo in #1332
• fix(ci): allow manual force refresh on update-hive-cache workflow by @​castrojo in #1331
• fix(leaderboard): restore freshness and accurate contributor ranking by @​castrojo in #1330
• fix: typo in contributors name by @​ahmedadan in #1329
• refactor: route sbom GHCR token reads through shared githubToken by @​mendezr in #1315
• fix(branding): make the monthly social preview card actually rotate by @​Danathar in #1313
• docs: record the green-skip signature for a missing BLUEFIN_DISCUSSIONS_TOKEN by @​Danathar in #1299
• Fix link text for latest Dakota daily snapshot by @​castrojo in #1325
• Embed YouTube video and update GNOME release note by @​castrojo in #1326
• fix(blog): use plain anchor for full resolution link in ImageCarousel by @​castrojo in #1323
• Revise bug reporting link and add lore content by @​castrojo in #1322
• fix(blog): use group role and aria-current for ImageCarousel thumbnail strip by @​castrojo in #1321
• feat(blog): add ImageCarousel component and gallery to Dakota Alpha 6 post by @​castrojo in #1320
• docs(blog): Dakota Alpha 6 release announcement and downloads by @​castrojo in #1319
• docs(analytics): switch countme opt-out instructions to systemctl disable timer by @​castrojo in #1308
• fix(countme): scope first-party telemetry tracking exclusively to dakota by @​castrojo in #1307
• fix/countme dakota exclusive by @​castrojo in #1306
• fix(countme): label dakota first-party charts as Bluefin by @​castrojo in #1305
• fix(analytics): focus first-party active systems chart solely on dakota by @​castrojo in #1304
• fix(countme): map root chart aliases to dakota by @​castrojo in #1303
• docs(skills): document Bluefin Classic rebadge in cloudflare-workers by @​castrojo in #1302
• fix(countme): rebadge upstream ublue-os/bluefin chart as Bluefin Classic by @​castrojo in #1301
• [architect] fix: propagate typecheck and lint exit codes in pages.yml validation step by @​castrojo in #1297
• [ci] skip open-discussion job when BLUEFIN_DISCUSSIONS_TOKEN is unset by @​castrojo in #1296
• refactor: converge CJS GitHub fetchers onto the shared request-queue client (#1232) by @​castrojo in #1295
• fix(blog): restore scrollable viewport constraint to left sidebar by @​castrojo in #1284
• ci: run the unit-test gate on every PR and run the knowledge-mcp suite by @​Danathar in #1290
• Revise warning about Dakotaraptor and legacy ISOs by @​castrojo in #1280
• Add warning for unsupported images in downloads by @​castrojo in #1278
• ci: add unit test gate for scripts by @​castrojo in #1226
• Factory: Optimize layout by combining data sections into 2-column rows on desktop by @​mrbobbytables in #1228
• fix(cards): parse HTML release-feed tables before generating Bluefin cards by @​mrbobbytables in #1213
• fix(sbom): add Bluefin LTS NVIDIA stream and retire dx/gdx package queries by @​mrbobbytables in #1212
• [architect] Converge ESM GitHub fetch sites onto lib/gh.js (#1232) by @​kylerankin in #1236
• fix(countme): count every published image variant under its family by @​castrojo in #1250
• test: add update artwork seams by @​TB516 in #1238
• fix(analytics): name the legacy panel for the image it counts by @​castrojo in #1251
• fix(repos): repair moved GitHub slugs and preserve partial repository-stat cache by @​kylerankin in #1256
• test: cover safeNum and loadHistory in fetch-hive-history.js by @​kylerankin in #1255
• [architect] converge hive-live + factory-stats fetchers onto shared lib/gh.js by @​kylerankin in #1257
• test: cover scripts/lib coverage-gap modules (#905) by @​kylerankin in #1254
• Add link to wolves.projectbluefin.io and follow-up note by @​castrojo in #1252
• fix(analytics): make the weekly active systems labels readable by @​castrojo in #1249
• fix(countme): ink the upstream chart title by @​castrojo in #1248
• feat(countme): serve the upstream chart in the Bluefin palette by @​castrojo in #1247
• Revise analytics documentation for Project Bluefin by @​castrojo in #1246
• feat(analytics): fold game mode into its image and show the upstream series by @​castrojo in #1245
• fix(analytics): serve weekly active systems from the first-party aggregate by @​castrojo in #1244
• fix(analytics): remove manufactured copy from the weekly active systems panel by @​castrojo in #1243
• fix(analytics): stop publishing internal service posture in a panel reason by @​castrojo in #1242
• fix(analytics): count our own images, and drop the last bar charts by @​castrojo in #1241
• feat(analytics): put the charts on the Bluefin palette and the real image matrix by @​castrojo in #1240
• feat(analytics): rebuild the charts around the full image matrix by @​castrojo in #1239
• feat(portal): add brand iconography, Karl backlog callout, and quotes to Users and Developers scenes by @​castrojo in #1211
• [quality] test: unit coverage for scripts/lib/sbom/api.js (GHCR tags, oras download, cosign verification) by @​Danathar in #1210
• test(scripts): silence unused-arg lint warning in build-metrics test by @​castrojo in #1225
• fix: consolidate CI supply-chain pins, light-mode repairs, and scripts/lib test coverage by @​castrojo in #1223
• test(portal): provide fixture data in PortalContributors static render test by @​castrojo in #1209
• fix(gnome-extensions): render missing and unavailable extension data states by @​castrojo in #1177
• fix(cards): preserve prevVersion on header chips by @​castrojo in #1174
• fix(driver-versions): generate Bluefin LTS release links with stable tags by @​castrojo in #1208
• feat(portal): implement PortalPageLoading overlay and character asset preloader by @​castrojo in #1207
• fix(portal): resolve nested <main> landmark, focus suppression, and WCAG AA contrast by @​castrojo in #1206
• feat(portal): implement PortalNews component consuming blog feed by @​castrojo in #1205
• feat(portal): implement PortalFlock section with DNF Count Me growth chart by @​castrojo in #1204
• feat(portal): harmonize design tokens, Inter font stack, and unified 956px/512px breakpoints by @​castrojo in #1203
• feat(portal): add "Try Out" secondary hero CTA and seasonal raptor character rotation by @​castrojo in #1202
• fix(analytics): align Countme family sparkline domains with rendered images by @​castrojo in #1201
• fix(portal): update navbar test links to match production navbar by @​castrojo in #1200
• fix(analytics): include Dakota and Utah in edition and workstation chart series by @​Danathar in #1194
• fix(analytics): retain Countme zeros and preserve missing values as gaps by @​Danathar in #1191
• fix(portal): reconcile TopNavbar navigation links and Docusaurus layout header by @​Danathar in #1169
• feat(portal): restore complete mission statements, Edith Wharton quote, and punchline by @​mrbobbytables in #1155
• fix(feed-items): supply NVIDIA versions at the data shape the release feed consumes by @​mrbobbytables in #1178
• fix(profiles): remove nonexistent chandeleer1698 GitHub username by @​mrbobbytables in #1151
• fix(pin-state): replace removed Bluefin LTS HWE workflow paths by @​Danathar in #1185
• fix(factory): calculate merged-this-week from merged pull requests by @​Danathar in #1190
• fix(factory): replace the Hive snapshot CTA hostname with a valid TLS endpoint by @​Danathar in #1189
• fix(factory): use a public queue-data fallback for anonymous visitors by @​Danathar in #1188
• fix(factory): render an unavailable change-failure rate instead of 0.0 percent by @​Danathar in #1187
• fix(sbom): migrate Bluefin LTS stream specs to its package and stable tags by @​Danathar in #1186
• fix(contributors): prevent visitor-side GitHub requests when contributor data is unavailable by @​mrbobbytables in #1197
• fix(countme): recognize Dakota and Utah without misclassifying Bluefin variants by @​mrbobbytables in #1198
• fix(blog): replace Printful CDN hotlinks blocked on five-years-of-bluefin by @​Danathar in #1196
• fix(catalog): generate Bluefin LTS rebases against the bluefin-lts package by @​Danathar in #1195
• fix(images): hide unpublished Utah testing image commands and attestations by @​Danathar in #1193
• fix(blog): remove expired Discourse CDN images from ublue-2024 wrap-up by @​Danathar in #1199
• fix(sbom): support version-qualified live tags in recent-release discovery by @​Danathar in #1163
• feat(portal): resolve 7 package version rows for Dakota product card by @​Danathar in #1164
• fix(ci): make generate-social-cards exit 0 when converters are missing by @​castrojo in #1182
• feat(analytics): modernize analytics and churn charts, promote page to top level by @​castrojo in #1181
• feat(branding): add rotating monthly night wallpaper social preview card by @​castrojo in #1179
• feat(branding): implement new social preview cards for documentation by @​castrojo in #1068
• fix(cards): parse HTML release-feed tables before generating Bluefin cards by @​castrojo in #1126
• fix(blog): replace Printful CDN hotlinks blocked on five-years-of-bluefin by @​castrojo in #1125
• fix(contributors): prevent visitor-side GitHub requests when contributor data is unavailable by @​castrojo in #1124
• fix(feed-items): supply NVIDIA versions at the data shape the release feed consumes by @​castrojo in #1123
• fix(gnome-extensions): render missing and unavailable extension data states by @​castrojo in #1122
• fix(pin-state): replace removed Bluefin LTS HWE workflow paths by @​castrojo in #1121
• fix(factory): render an unavailable change-failure rate instead of 0.0 percent by @​castrojo in #1120
• fix(factory): use a public queue-data fallback for anonymous visitors by @​castrojo in #1119
• fix(factory): replace the Hive snapshot CTA hostname with a valid TLS endpoint by @​castrojo in #1118
• fix(factory): calculate merged-this-week from merged pull requests by @​castrojo in #1117
• fix(analytics): calculate and format hero deltas for the selected range by @​castrojo in #1116
• fix(blog): remove expired Discourse CDN images from ublue-2024 wrap-up by @​castrojo in #1114
• fix(images): hide unpublished Utah testing image commands and attestations by @​castrojo in #1113
• fix(analytics): include Dakota and Utah in edition and workstation chart series by @​castrojo in #1111
• fix(analytics): retain Countme zeros and preserve missing values as gaps by @​castrojo in #1110
• fix(analytics): align Countme family sparkline domains with rendered images by @​castrojo in #1109
• fix(repos): repair moved GitHub slugs and preserve partial repository-stat cache by @​castrojo in #1107
• fix(sbom): migrate Bluefin LTS stream specs to its package and stable tags by @​castrojo in #1106
• fix(countme): recognize Dakota and Utah without misclassifying Bluefin variants by @​castrojo in #1105
• fix(driver-versions): generate Bluefin LTS release links with stable tags by @​castrojo in #1104
• fix(catalog): generate Bluefin LTS rebases against the bluefin-lts package by @​castrojo in #1102
• fix(profiles): remove nonexistent chandeleer1698 GitHub username by @​castrojo in #1101
• feat(portal): implement PortalNavigation floating dock and section scroll spy by @​mrbobbytables in #1153
• feat(portal): implement PortalContributors component and contributor harvester workflow by @​mrbobbytables in #1156
• fix(portal): update deprecated ublue-os links and synchronize Discord invite code by @​Danathar in #1165
• fix(portal): align Utah ecosystem card link destination to devconf.us by @​mrbobbytables in #1159
• feat(portal): generate bootc switch terminal command and copy button in PortalImageChooser by @​mrbobbytables in #1152
• test: add coverage reporting for data-fetching script tests by @​mrbobbytables in #1061
• fix(sbom): support version-qualified live tags in recent-release discovery by @​mrbobbytables in #1128
• feat(portal): add interactive image picker by @​castrojo in #1131
• feat(portal): complete static landing sections by @​castrojo in #1130
• feat(portal): add parallax portal prototype by @​castrojo in #1127
• docs: add Copilot workflow instructions by @​castrojo in #1108
• fix: link leaderboard contributor dossiers by @​castrojo in #1103
• fix: restore Hive leaderboard data and styling by @​castrojo in #1076
• feat: add standalone Hive leaderboards by @​castrojo in #1071
• feat(analytics): add update churn rate pipeline, analytics charts, and trigger workflow by @​castrojo in #1070
• feat: add Hive leaderboards landing by @​castrojo in #1069
• feat(nav): rename Factory to Hive in navbar linking to hive.projectbluefin.io by @​castrojo in #1058
• docs: announce Bluefin Server by @​castrojo in #1066
• fix(images): point bluefin-lts to projectbluefin/bluefin-lts package and update catalog by @​castrojo in #1067
• feat(analytics): unify Bluefin family countme charts and multi-image catalog by @​castrojo in #1065
• feat(analytics): add legacy bluefins and ecosystem countme analytics charts by @​castrojo in #1063
• feat(reports): migrate monthly reports to blog with infograms and Hive Leaderboard by @​castrojo in #1059
• fix: restrict countme worker entrypoint exports to default handler by @​castrojo in #1060
• docs: announce mcp.projectbluefin.io and update hive links by @​castrojo in #1057
• feat(mcp): serve the org knowledge base at mcp.projectbluefin.io by @​castrojo in #1055
• feat: refine image navigation, fix driver versions catalog, and track stable streams by @​castrojo in #1050
• feat(branding): use new Bluefin wordmark in docs and drop ublue 'u' by @​castrojo in #1043
• Add link to upstream doc about IME setup by @​sebjag in #1038
• fix(e2e): deliver the kickstart through an initramfs overlay by @​Danathar in #74
• fix(ci): restore ISO rename output and soft-fail arm64 legs by @​hanthor in #70
• fix(just): resolve sudo via PATH in sudoif and pass arguments without word-splitting by @​castrojo in #394
• fix(justfile): make the final artifact move idempotent in _build-bib by @​mendezr in #412
• ci(workflow): correct sync-stable-to-main header comment by @​kylerankin in #413
• ci(workflow): retry just download in unit-tests by @​kylerankin in #414
• fix(build): write an unverified update ref instead of a signed one by @​Danathar in #406
• fix(ci): skip Renovate when the token is not set by @​Siddhj2206 in #395
• ci(promote): stop citing the deleted scheduled approver by @​Danathar in #404
• fix(ci): restore merge_group trigger to pr-validation and unit-tests by @​castrojo in #418
• refactor: full rewrite of the template by @​castrojo in #393
• refactor: full rewrite of the template by @​Siddhj2206 in #383
• docs: document E2E gap as intentional release risk (#281) by @​mrbobbytables in #328
• ci: auto-approve action_required checks on trusted promotion PRs by @​mrbobbytables in #335
• fix(ci): validate Brewfiles statically instead of evaluating them as Ruby by @​Siddhj2206 in #320
• fix(just): use a per-invocation temp file for the registry tag list by @​Siddhj2206 in #314
• ci: run BATS unit tests on PRs touching build, tests, or Justfile by @​Siddhj2206 in #317
• fix(ci): stop inheriting all repo secrets in label-enforcement by @​Siddhj2206 in #318
• fix(just): build IMAGE_NAME from target_image so renames upgrade correctly by @​Siddhj2206 in #313
• fix(ci): derive ghcr-cleanup target from the repository name by @​Siddhj2206 in #319
• fix(ujust): stop install-jetbrains-toolbox when the checksum fails by @​Siddhj2206 in #315
• fix(just): repair clean recipe so it finishes and removes all artifacts by @​Siddhj2206 in #312
• fix(packages): stamp the provenance report from SOURCE_DATE_EPOCH, not the wall clock by @​dtg01100 in #343
• ci: add a tested factory-pin rev tool for #336 by @​dtg01100 in #337
• fix(packages): pin the baseurl of every allowlisted repository by @​dtg01100 in #334
• test(services): enforce the unit exit-tolerance convention by @​dtg01100 in #341
• fix(hooks): stamp 20-home-labels.sh after the body runs by @​dtg01100 in #327
• fix(e2e): accept substituted sentinel reads and re-read before reshooting by @​hanthor in #381
• fix(build): re-declare the factory pin ARG so the label bakes its value by @​hanthor in #374
• fix(build): key the package transaction on the factory pin, fail loud on skew by @​hanthor in #373
• chore(deps): update packages pin to GNOME 51.0 finals build by @​hanthor in #359
• test: label parity-ref tests as #152 pinned-ref work by @​kylerankin in #356
• docs: correct stale package-image copy statement in package-contract by @​kylerankin in #333
• fix(packages): reject proxy and sslverify=0 in allowlisted repositories by @​mendezr in #351
• fix(ci): let the kernel cache verify accept dispatch-run signatures by @​mendezr in #348
• feat(packages): add alsa-utils, restoring kernel mixer state across reboots by @​castrojo in #297
• fix(ci): sign the kernel cache digest the registry actually stored by @​kylerankin in #317
• chore(ci): bump actions pin for GNOME 51 gate fixes by @​hanthor in #315
• chore(ci): point release reusable at actions with preset-proof gate sshd by @​hanthor in #310
• feat(kernel): build v4l2loopback for every flavor's kernel by @​Danathar in #298
• fix(packages): add default-fonts-core-emoji to the parity contract by @​buggtb in #296
• fix(image): strip extension build toolchain closure from shipping image by @​hanthor in #295
• fix(iso): retry flaky Flathub pulls 5x so a timeout window can't fail E2E by @​hanthor in #285
• feat(packages): printing and cameras, from the 2026-09-26 factory image by @​hanthor in #282
• fix(selinux): keep Hummingbird's useradd HOME; only generate the rules from /home by @​hanthor in #283
• fix(selinux): label /var/home so GNOME Initial Setup can create the account by @​hanthor in #281
• fix(iso): build the tacklebox live ISO with release compression by @​hanthor in #280
• feat(iso): installs boot to GNOME Initial Setup, as Bluefin and Dakota do by @​hanthor in #279
• feat(packages): pin the 2026-09-26 factory image; Wi-Fi, Files, phones, printing, Initial Setup by @​hanthor in #265
• fix(packages): install samba, samba-winbind and samba-winbind-clients by @​buggtb in #268
• fix(ci): scope download-integrity clearance to each fetch by @​mendezr in #233
• feat: build live ISOs for unpublished variants via tacklebox by @​hanthor in #252
• fix(iso): installed systems get their Flatpaks (the dock was empty) by @​hanthor in #272
• fix(iso): retry flatpak remote-add, which fetches over the network by @​hanthor in #270
• chore(iso): pin bootc-installer v2026.09.25-51f8cfe6 (offline installs of Utah work) by @​hanthor in #269
• feat(baselines): measure Utah against the published Bluefin and Dakota images by @​hanthor in #264
• fix(parity): install the Bluefin base packages Utah can resolve today by @​hanthor in #266
• fix(e2e): count flatpak runtimes when checking the offline default set by @​hanthor in #267
• fix(iso): let the installer create the first account by @​hanthor in #260
• fix(iso): keep the listed GTK3 theme runtimes in the live ISO by @​hanthor in #256
• fix(desktop): enable per-user services — installed Utah had no audio by @​hanthor in #255
• fix(boot): installed systems boot again — keep the base's shim-paired GRUB, guard the EFI chain (#253) by @​hanthor in #254
• fix(iso): separate installed-desktop and installed-fastfetch captures by @​repires in #243
• ci: opt the testing stream into rechunking and build SBOMs by @​mendezr in #226
• fix(packages): install device firmware, which the bootable base ships none of by @​sramkrishna in #236
• fix: mask serial-getty@ttyS0 so desktops stop spamming the journal by @​sramkrishna in #235
• fix: repoint install-flatpaks.sh at tuna-os/bootc-installer by @​Danathar in #219
• ci: retain gated production ISO artifacts by @​Danathar in #198
• fix(iso): tighten live ISO size budget by @​Danathar in #206
• chore(deps): update actions/upload-pages-artifact action to v5 by @​hanthor in #234
• ci: gate the live boot on the UTAH_LIVE_READY serial marker by @​mendezr in #229
• fix(iso): force software GL rendering for the E2E test's terminal by @​Danathar in #224
• test(installer): assert offline payload and default Flatpaks survive encrypted install by @​Danathar in #215
• test: cover btrfs live-kernel contract by @​Danathar in #207
• ci: document Utah testing-stream rechunk gate by @​Danathar in #205
• docs: close README/skill package-count drift against the manifests by @​Danathar in #225
• fix(flavors): single-source flavor to image name mapping in flavors.py by @​mrbobbytables in #144
• fix(desktop): enable input-remapper.service for desktop input devices by @​mrbobbytables in #148
• ci(parity): pin check-parity upstream fetch to committed revision by @​mrbobbytables in #152
• ci: stop a testing build cancelling the one before it, which is losing the ISO evidence the release gate needs by @​hanthor in #185
• ci(release): stop a missed stable release from looking exactly like a normal merge by @​hanthor in #195
• fix: fall back to kernel module tree and refuse empty kernel releases in verify-rpm-contract by @​mrbobbytables in #204
• fix: enable PipeWire user units so GNOME screencast can start by @​KiKaraage in #177
• fix(installer): harden live-media boot paths and define Secure Boot strategy by @​mrbobbytables in #143
• Retry Flathub pulls, so one timed-out object cannot fail a flavor's ISO by @​hanthor in #162
• fix(nvidia): bump the driver for kernel 7.2, and make the base bump actually build by @​hanthor in #182
• fix(packages): correct evolution-ews-core parity debt after EDS closure builds by @​kylerankin in #191
• fix: disable nvidia-container repo on non-NVIDIA flavors by @​kylerankin in #192
• ci: drop timestamp from generated skill catalog to avoid merge conflicts by @​mrbobbytables in #193
• site: publish a status and project information page on GitHub Pages by @​hanthor in #164
• fix(image): stop shipping the 4 GB package repository in every image, and check Hummingbird signatures by @​hanthor in #133
• fix: enable the btrfs kernel module in the OGC gaming-flavor kernel by @​kylerankin in #158
• ci: stop fork pull requests failing on a GHCR permission they cannot have by @​hanthor in #184
• fix(packages): single-source install repository identity in packages/*.repo by @​mrbobbytables in #146
• fix(desktop): mask bootc-fetch-apply-updates across cross-vendor etc merge by @​mrbobbytables in #153
• fix: stop shipping the 4 GB package repository in every image (#128) by @​kylerankin in #156
• test(ci): add unit tests for check-download-integrity and check_workflow_outputs by @​mrbobbytables in #147
• fix: enable bluetooth.service for desktop adapters by @​kylerankin in #125
• feat(packages): install what Bluefin inherits from Fedora's base and Hummingbird already has by @​hanthor in #129
• fix(iso): get the LUKS end-to-end test green on all four flavors by @​hanthor in #94
• test: unit coverage for scripts/flavors.py flavor-matrix queries — new tests/test_flavors.py, just test recipe by @​mendezr in #118
• fix(uupd): pin and verify uupd.service/uupd.timer against committed digests by @​kylerankin in #124
• fix(e2e): capture the fastfetch shot at 1080p, with its logo by @​hanthor in #112
• fix(packages): ship glibc-all-langpacks so a chosen locale exists by @​hanthor in #116
• fix: keep GSConnect loading on GNOME 51 (clipboard final-type) by @​mrbobbytables in #89
• fix: resolve OGC kernels when assembling live ISOs by @​hanthor in #87
• fix(iso): repair CI handoff, payload digests, and live kernel support by @​hanthor in #86
• ci: automate LUKS ISO validation and screenshot evidence by @​hanthor in #84
• Build the Utah ISO, install it to an encrypted disk, and prove the desktop starts by @​hanthor in #41
• fix(build): resolve the pinned package contract before composing Utah by @​hanthor in #82
• docs: Utah's current status by @​HuntedRaven7 in #31
• feat: compose Utah from a local package repository by @​hanthor in #37
• supply-chain: pin and verify executable image and installer downloads by @​hanthor in #32
• ci: stop main waiting on the kernel cache; cut layer overhead per flavor by @​hanthor in #33
• feat: build zram-generator packages by @​mendezr in #294
• feat: build zram-generator packages (carries #294) by @​castrojo in #301
• fix(ci): report nothing for a cancelled run instead of every package as failed (carries #271) by @​castrojo in #300
• feat(feeds): poll 68 more upstreams via explicit lock feeds by @​hanthor in #296
• fix(libadwaita): drop obsolete sassc backport, merged upstream in 1.10.0 by @​hanthor in #299
• fix(gsettings): drop GConf .convert files removed upstream in GNOME 51.0 by @​hanthor in #298
• chore(gnome): bump the GNOME 51 stack off prerelease to 51.0 finals by @​hanthor in #295
• feat(supply-chain): lock factory buildroots and require recipe provenance by @​Danathar in #186
• fix: retry the hermetic lane's online steps and package v4l-utils' udevd drop-in by @​clubanderson in #288
• fix(sources): reset release on upstream version bumps by @​arteeh in #281
• fix(ci): drop canary inject_failure from build matrix (#285) by @​mrbobbytables in #286
• ci(validate): give check_workflow_quoting and runtime_contract a PR-wide trigger by @​buggtb in #282
• feat(libass): update to 0.17.5 by @​hanthor in #266
• fix: prevent lock screen password controls from overlapping by @​arteeh in #290
• feat(ci): let a dispatch build and publish only named packages by @​hanthor in #279
• fix(printing): import pdfio for libcupsfilters, and rebuild libgphoto2 by @​hanthor in #278
• fix(enchant2): build without the Nuspell backend by @​hanthor in #276
• feat(publish): resolve the blocking transaction in Utah's pinned base by @​hanthor in #277
• fix(build): resolve the hermetic root with best=0, like the container lane by @​hanthor in #275
• feat(publish): publish each wave's successes as that wave finishes by @​hanthor in #274
• fix(publish): a bootstrap build never replaces the real package by @​hanthor in #273
• fix(publish): resolve Utah's install set in Utah's own base image by @​hanthor in #272
• feat(publish): resolve what Utah actually installs, and track each gap by @​hanthor in #270
• fix(publish): import libexif and ghostscript for libgphoto2 and libppd by @​hanthor in #269
• fix(plan): call a published build stale only when its soname moved by @​hanthor in #268
• feat(xdg-terminal-exec): update to 0.14.3 by @​hanthor in #265
• feat(build): make the hermetic mock lane the default by @​hanthor in #264
• fix(publish): let a re-run publish over its own earlier attempt by @​hanthor in #262
• fix(ci): keep a canary dispatched on main away from the tracking issue by @​hanthor in #261
• feat(build): hermetic mock lane -- lock the build root, build offline from the lock by @​hanthor in #260
• feat(build): rebuild what changed and what BuildRequires it, on every merge by @​hanthor in #259
• ci(build): retry a failed %check once before failing the package by @​hanthor in #256
• feat(publish): publish each good build, keep a failed package's previous one by @​hanthor in #258
• ci(canary): prove pipeline changes on the real workflow in minutes by @​hanthor in #257
• fix(buildroot): keep the pin in config/ and move it to the first mirror image by @​hanthor in #255
• ci(buildroot): factory-owned build-root mirror, and a cache key that survives a publish by @​hanthor in #252
• fix(publish): lead the repository image with a repodata-only layer by @​hanthor in #254
• feat: import Utah runtime dependencies with no factory recipe by @​hanthor in #246
• fix(publish): log in for the provenance attestation and keep it from failing a publish by @​hanthor in #253
• fix(python-pydantic-core): BuildRequire python3-packaging for %prep by @​hanthor in #250
• fix(publish): close the ffmpeg and libosinfo runtime closure by @​hanthor in #249
• fix: restore python-pydantic and build pydantic-core from vendored crates by @​hanthor in #248
• fix(librist): backport upstream's nettle 4.0 support by @​hanthor in #245
• chore: remove python-pydantic and python-pydantic-core from the factory by @​hanthor in #244
• fix(libppd): include <cstdint> before cups/transcode.h by @​hanthor in #243
• fix(librist): correct the 0.2.11-1 changelog year so rpm accepts the spec by @​hanthor in #242
• fix(srt): build with the OpenSSL EVP backend instead of gnutls+nettle3.10 by @​hanthor in #241
• fix(ci): upgrade libxml2 to Hummingbird's split release before builddep by @​hanthor in #240
• fix(grub2): efi_vendor=fedora so GRUB sits beside Utah's shim (Utah install e2e red since 09-21) by @​hanthor in #238
• test: gate architecture inventory counts by @​Danathar in #194
• fix(factory): source rebuild matrix package set from source_locks by @​repires in #232
• fix(import): skip factory-sourced packages in Rawhide resolver by @​mrbobbytables in #185
• refactor(ci): align Justfile check with CI workflow gate catalog by @​mrbobbytables in #196
• fix(ci): verify cosign signature before seeding from the factory image by @​Danathar in #215
• fix(ci): gate sccache setup to mozjs140 to prevent token exposure by @​repires in #227
• fix(validate): refuse a recipe that silences its own %check by @​Danathar in #197
• fix(publish): close the consumer-transaction dep closure by @​hanthor in #229
• fix(dist_bump): tolerate macro-based Release fields (carries #100) by @​hanthor in #138
• fix(verify): pin srt, libcue, game-music-emu, cjson to Fedora lookaside primaries by @​hanthor in #231
• feat(printing): add cups-filters, cups-browsed, libcupsfilters, and libppd recipes by @​mrbobbytables in #214
• ci(audit): pin pyyaml and declare it for the unit tests job by @​mendezr in #221
• feat(packages): import google-noto-color-emoji-fonts and stix-fonts recipes by @​mrbobbytables in #199
• docs: define ORAS source lookaside policy by @​mrbobbytables in #189
• fix(linux-atm): pin kernel-headers to 6.19.6 for atmsvc.h by @​hanthor in #218
• fix: exclude libicu-77 from every build root by default, with per-package opt-in by @​hanthor in #217
• feat: ppp/libpcap/linux-atm/libgda closure parity (utah-packages#149) by @​kylerankin in #203
• feat: add libfprint + fprintd recipes for fingerprint login parity (#145) by @​kylerankin in #204
• feat: import microcode_ctl for CPU errata parity by @​kylerankin in #205
• fix(scan): skip malformed repoquery lines instead of crashing the scan by @​kylerankin in #206
• feat: add alsa-utils recipe for mixer-state restore (Dakota parity) by @​kylerankin in #202
• fix(rebuild): build nautilus-python after nautilus by @​Danathar in #213
• fix(gaps): drop runtime-contract [unavailable] packages from the parity report by @​mendezr in #207
• fix(renovate): require human review for github-actions updates by @​mrbobbytables in #193
• fix(factory): defer base packages to Hummingbird by @​hanthor in #191
• docs(ci): preserve the package cache contract by @​hanthor in #184
• feat(ci): restore and publish per-package RPM cache by @​hanthor in #183
• feat(ci): cache key for per-package build reuse, and the rule for when to use it by @​hanthor in #178
• fix: enforce recipe-set agreement across the three package sources by @​kylerankin in #164
• fix(dist_bump): tolerate macro-based Release fields by @​kylerankin in #100
• ci: pin zstandard version in rebuild-rpms prepare job (#105) by @​mendezr in #109
• ci: pin zstandard in the prepare job (carries #109) by @​hanthor in #137
• fix(quality): add missing provenance for gnome-desktop3 and malcontent-bootstrap by @​mrbobbytables in #98
• fix(ci): guard build toolchain containers against mutable tags by @​kylerankin in #110
• fix(workflows): bind rawhide dispatch inputs via env, not run interpolation by @​kylerankin in #114
• Build the whole Utah contract: 343 recipes, Firefox as a Flatpak, four stage failures fixed by @​hanthor in #70
• test: add unit coverage for tools/scan_rawhide_state.py by @​kylerankin in #99
• fix(ci): pin build toolchain containers by digest by @​kylerankin in #88
• ci: repin Packit SRPM image to live digest by @​Danathar in #85
• fix(buildroot): exclude legacy ruby default-gems from Hummingbird repo by @​mrbobbytables in #83
• fix(tailscale): disable incompatible jsonv2 experiment by @​Danathar in #86
• ci: publish factory repositories atomically after closure validation by @​kylerankin in #89
• fix(gcc): drop gcc from the rebuild set, let Hummingbird supply it by @​kylerankin in #90
• fix(batch): consolidate verified fixes for tools, ci checksum, rawhide import, and contract (#71, #72, #56, #57) by @​castrojo in #92
• refactor(tools): wrap check_workflow_quoting and validate in testable functions by @​castrojo in #73
• ci: make the compiler cache outlive the build container by @​hanthor in #33
• fix: keep GSConnect loading on GNOME 48+ (clipboard final-type) by @​hanthor in #53
• feat: compose a local Utah package repository by @​hanthor in #34
• feat(packit): wire packit srpm into a real pilot job by @​castrojo in #41
• fix(packit-sdk): use upstream quay.io/packit/packit instead of rebuilding by @​castrojo in #40
• fix(packit-sdk): publish as ghcr.io/projectbluefin/packit-sdk by @​castrojo in #38
• fix(packit-sdk): share DOCKER_CONFIG auth between podman and cosign by @​castrojo in #37
• feat(packit-sdk): add pinned Packit+Mock build image by @​castrojo in #36
• ci: build WebKitGTK as two shards on two runners by @​hanthor in #32

Dakota (GNOME OS Prototype)​

• feat(bluefin): ship ChairLift's privileged helper, policy and schemas by @​castrojo in #1680
• fix(next): apply Dakota fdsdk patches and mesa-extra on next by @​ahmedadan in #1700
• fix(next): apply Dakota fdsdk patches and mesa-extra on next by @​ahmedadan in #1696
• feat(image): enable hardware video codecs for host apps by @​ahmedadan in #1687
• fix(ghostscript): avoid CMYK crash in ROM profiles by @​ahmedadan in #1682
• feat(image): ship nspawn for OCI-backed nspawn machines by @​ahmedadan in #1681
• fix(libvirt): restore PolicyKit-authorized access by @​ahmedadan in #1673
• fix(image): make /usr/local a real link to /var/usrlocal by @​ahmedadan in #1661
• fix(ci): require diagnostic report intake by @​castrojo in #1528
• feat(bluefin): add user-configured IBus Rime with Lua support by @​KOTONEX in #1662
• revert(countme): restore pre-session common pin (#1649, #1656) by @​castrojo in #1657
• fix(countme): pin shared weekly reporter by @​castrojo in #1656
• fix(image): vendor libvirt and make shadowed packages actually ship by @​ahmedadan in #1651
• fix(countme): ship shared Dakota reporter by @​castrojo in #1649
• feat(countme): remove local countme client and units by @​castrojo in #1622
• ci(release): require explicit stable promotion by @​ahmedadan in #1637
• fix(gnome-shell): use portable unzip flags for extension installs by @​ahmedadan in #1628
• fix(virtualization): prevent default NAT firewall failures by @​ahmedadan in #1625
• fix(ujust): drop flatpak -y so polkit can prompt by @​ahmedadan in #1630
• fix(bluefin): stop GDM fingerprint retry loop on unenrolled readers by @​ahmedadan in #1627
• ci: gate merges on the PR build when a PR is labeled build by @​ahmedadan in #1618
• fix(kernel): carry hid-asus build fix for OGC 7.2.6-ogc1 by @​ahmedadan in #1617
• fix(kernel): carry hid-asus build fix for OGC 7.2.6-ogc1 on next by @​ahmedadan in #1616
• chore(kernel): bump OGC gaming kernel to 7.2.6-ogc1 on testing by @​ahmedadan in #1613
• chore(kernel): bump next to 7.3-rc3 and OGC 7.2.6-ogc1 by @​ahmedadan in #1612
• ci: label-gated PR builds and SBOM job repair by @​ahmedadan in #1610
• fix(ci): smoke-test the image Publish built, not the default-branch tip by @​Danathar in #1605
• fix(ci): pin cosign to a digest-pinned installer instead of releases/latest by @​Danathar in #1606
• chore(just): drop the monitor-pipeline recipe whose script no longer exists by @​Danathar in #1607
• feat(ghostty): disable resize overlay by default to prevent Wayland loop by @​castrojo in #1571
• fix(kernel): restore desktop capabilities across streams by @​ahmedadan in #1598
• ci(next): empty NEXT_MERGED and track GBM master by @​ahmedadan in #1590
• chore(next): track gnome-build-meta master by @​ahmedadan in #1589
• feat: NVIDIA 615.71.09 and freedesktop-sdk 26.08.1 on testing by @​ahmedadan in #1588
• feat: GNOME 51 and freedesktop-sdk 26.08 on testing by @​ahmedadan in #1579
• ci(arm): pause automation until boot validation works by @​ahmedadan in #1566
• fix(chunkah): fetch remote companion data before reading by @​ahmedadan in #1564
• feat(chunkah): generate ownership during image builds by @​ahmedadan in #1563
• feat(extensions): update syncthing-toggle to bluefin-bling v2 by @​castrojo in #1557
• fix(ci): isolate ChairLift tests from runner defaults by @​ahmedadan in #1550
• fix(brew): migrate ChairLift off the Frostyard tap by @​ahmedadan in #1542
• fix(desktop): avoid broken and intrusive defaults by @​ahmedadan in #1538
• fix(next): avoid adjacent dependency sync conflict by @​ahmedadan in #1526
• fix(skills): make factory frontmatter parseable by @​ahmedadan in #1525
• fix(extensions): preserve metadata when extracting ZIPs by @​ahmedadan in #1518
• docs(factory): audit documentation and standardize skills by @​castrojo in #1516
• feat(launcher): package vicinae and bind launcher toggle to Super+Space by @​castrojo in #1515
• feat(ghostty): configure dual-theme to track GNOME Dark/Light style by @​castrojo in #1514
• feat(extensions): swap bluetooth-battery-meter for budslink-companion and preinstall flatpak by @​castrojo in #1512
• feat(extensions): package and enable quick-settings-audio-panel by @​castrojo in #1511
• feat(extensions): package curated gnome shell extensions by @​castrojo in #1510
• fix(devmode): adapt developer setup to Dakota by @​ahmedadan in #1509
• fix(fastfetch): inherit Bluefin presentation from common by @​ahmedadan in #1507
• chore(build): remove unreachable architecture configuration by @​ahmedadan in #1499
• fix(scripts): gen-filemap refuses partial caches, tests pin kernel match by @​ahmedadan in #1484
• feat(kernel): Linux 7.2 bump with Fedora-audited hardware enablement by @​ahmedadan in #1473
• ci: revalidate retargeted PRs and document CI-run Justfile recipes by @​ahmedadan in #1485
• fix(ci): open monthly filemap PRs against testing, not main by @​ahmedadan in #1467
• fix(ci): sync-next owns files/linux-ogc with the rest of the kernel set by @​ahmedadan in #1475
• chore(packages): bump uwelcome to v0.3.5 for the portal timeout fix by @​ahmedadan in #1462

Contributors​

Sources​

• github-activity: available (2026-09-01 to 2026-09-30): source
• github-lanes: available (2026-09-01 to 2026-09-30): source
• github-releases: available (2026-09-01 to 2026-09-30): source
• github-releases: available (2026-09-01 to 2026-09-30): source
• github-releases: available (2026-09-01 to 2026-09-30): source
• countme: unavailable — Countme active-system measurement is incomplete. (2026-09-01 to 2026-09-30): source
• homebrew: available (2026-09-01 to 2026-09-30): source
• flathub: available (2026-09-01 to 2026-09-30): source

Alright, here it is, Bluefin Server, this one actually boots. This is the base of the Bluefin Factory, the thing you'll build your homelab on. And in turn, your desktops or whatever you want. Kubernetes for the home.

An FSDK-based, image-based Linux server OS.**

To celebrate this milestone, enjoy the latest video, with some fresh lore!

Bluefin Server targets the same use-case space as Flatcar Container Linux, Kairos, Fedora CoreOS, and Talos, but is built from scratch with BuildStream 2 from freedesktop-sdk (FSDK 26.08) components and uutils coreutils.

It is designed to be installed and then managed entirely through the Kubestellar GUI. I'll be releasing point releases quickly over the next few days. After the install it will give you a web address, then you go to it on your computer. Then that's it, your perfect home server.

Except the dashboards are empty. The more people we have making these the better, including a ZFS one! This variant will have ZFS support so now's the time to jump onboard!

It is DDI first: the OS payload is a compressed XFS DDI filesystem image that is deployed by an offline, systemd-native installer.

Release status: Alpha​

Bluefin Server is currently in Alpha:

• Milestone status: Phase A (reproducible build path, uutils, k0s sysext, graph validation) is complete. Phase B (automated boot verification on lab cluster) is in progress.
• systemd-sysupdate should work, we're about to find out! configurations.
• Readiness roadmap: Track completed criteria and remaining gates toward 1.0 in docs/MVP_1_0_READINESS.md.

How this works​

• A/B root rollback — an MVP 1.0 gate: 50-root.transfer names root-a and root-b; the installer currently creates only root-a.
• DDI-first delivery — the installer embeds the OS payload as a data partition; no network is required at install time. This is basically Linux systemd style.
• Minimal, distroless OS image — no shell in the running rootfs by default IS what we are shooting for. We'll probably fail at this lol.
• systemd-native installer — systemd-sysinstall provides the interactive terminal UI and systemd-repart handles partitioning and block-copy DDI placement. Finally distro installers can all go die!
• Optional k0s as a systemd-sysext so the base image stays distroless. We started with k3s but I want to see how this one goes, stripped down for the home.

SSH ON: SSH is enabled for cluster boot tests and remote debugging. It is scheduled for removal once diagnostics move to serial logs or a guest agent. See docs/skills/factory-integration.md.

Quick start​

Bare metal sorely needed! However this runs on any Linux, feel free to fire up a VM and start designing that dashboard! Once we get home assistant and all the goodies it'll be amazing! Thanks for checking it out!

You need only podman and just. BuildStream runs inside the FSDK bst2 container, so BuildStream is not installed locally.

just validate              # resolve the element graph
just show-me-the-future    # end-to-end QEMU installer smoke test

See AGENTS.md for the full build command matrix, hard rules, and agent skill routing.

Contributing​

See CONTRIBUTING.md for the contributor checklist, Conventional Commit rules, and docs/skills/index.md for task-specific guidance.