Desktop​

GNOME desktop environment, Aurora variant (KDE), and terminal enhancements

Planned Work​

• fix(motd): build umotd from source, move to shared layer, remove legacy ublue-motd by @​castrojo in #744
• fix(ux): toggle-user-motd exits 0 when user declines and fix fall-through by @​castrojo in #662
• fix(ujust,gnome): fix changelog repos + LTS support + BT auto-switch by @​castrojo in #543
• fix(gnome): open documentation link as local PDF with browser fallback by @​castrojo in #637
• test(bling): add bats coverage for bling.sh by @​castrojo in #629
• test(scripts): add bats coverage for ublue-motd and profile.d scripts by @​castrojo in #628
• chore: simplification audit — remove dead weight, harden edge cases by @​castrojo in #569
• feat(ghostty): add GNOME profile for new users by @​castrojo in #548
• feat(fonts): set Adwaita Mono as default monospace, move opendyslexic to Homebrew by @​castrojo in #547
• feat: replace logomenu with custom-command-menu extension by @​castrojo in #514
• fix: add help: URI handler to redirect to GNOME help website by @​castrojo in #509
• fix(bling): skip brew bundle when bluefin-cli disables bling by @​hanthor in #362
• feat: replace old MOTD with umotd by @​castrojo in #489
• fix(#266): drop monospace-font-name override — use GNOME default (Adwaita Mono) by @​hanthor in #348
• fix: remove Readymade installer from dock favorite-apps by @​hanthor in #353
• feat: switch to ublue-os/aurorafin-shared by @​renner0e in #395

Opportunistic Work​

• feat(brew): move CLI tools to brew-preinstall, remove starship image binary by @​castrojo in #554
• fix(ci): remove stale che/nerd-fonts COPR check by @​castrojo in #502
• feat(fonts): remove font RPMs and nerd-fonts COPR from OCI image by @​castrojo in #476
• fix: migrate custom-command-menu dconf to command1..N tuple format by @​castrojo in #348
• feat(build): add extension-builder stage to avoid build deps in final image by @​castrojo in #333
• security: verify starship binary checksum before extraction (CWE-494) by @​castrojo in #173
• fix(e2e): pin testsuite test_ref and restore shell defaults by @​castrojo in #337
• feat(fonts): remove jetbrains-mono-fonts-all from OCI image by @​castrojo in #144
• fix(packages): remove che:nerd-fonts COPR install by @​castrojo in #79
• fix: migrate custom-command-menu dconf from entryrow* to command1..N tuples by @​castrojo in #76
• fix(ci): use epel-10 chroot for jreilly1821/c10s-gnome-50 COPR URL by @​castrojo in #55
• fix(hive): hero font rendering + more sparklines by @​castrojo in #919

Dakota (GNOME OS Prototype)​

• feat(fonts): remove jetbrains-mono from image, manage via Homebrew by @​castrojo in #763
• fix(gnome-ponytail-daemon): use systemd.bst for systemd.pc pkgconfig by @​castrojo in #725
• feat: add gnome-ponytail-daemon to image by @​castrojo in #618

Development​

Development tools and IDE integrations

Planned Work​

• feat(dx): add tuna-os/Tavern flatpak to DX mode by @​castrojo in #792
• feat(bluefinctl): wire ujust recipes to bctl + move caffeinate to profile.d by @​castrojo in #730
• feat: rewrite toggle-devmode to be standalone DX mode by @​castrojo in #545
• fix(dx): move vscode extension installs to Brewfile by @​castrojo in #635

Opportunistic Work​

• Bump dockerd to 29.6.1 by @​jumpyvi in #460

Homebrew​

Package Updates​

36 automated updates this month via GitHub Actions. Homebrew tap version bumps ensure Bluefin users always have access to the latest stable releases.

Quick Summary​

Ecosystem​

Homebrew packages, AI/ML tools (Bluespeed), and Flatpak applications

Planned Work​

• fix(nvidia): update system flatpaks when rebooting into new nvidia image by @​castrojo in #769
• fix(flatpak): refresh appstream on every boot instead of firstboot only by @​castrojo in #767
• feat(oem): add Framework brew hook for framework_tool and wallpapers by @​castrojo in #753
• fix(brew): move bluefinctl.Brewfile to shared so all variants get bctl by @​castrojo in #750
• feat(bazaar): add Collabora + Spelling Bee + Whisp, refresh curation by @​KiKaraage in #731
• fix(brew): fix Homebrew 6.0 breakage across brew lifecycle by @​castrojo in #728
• chore(brew): remove bbrew, bluefinctl replaces it by @​castrojo in #729
• fix(brew): remove aichat + whisper-cpp, update agy + kimi-code by @​KiKaraage in #715
• fix(brew): Unblock system-cli & CNCF brewfiles validation by @​KiKaraage in #721
• feat(oem): move Framework/Ampere hardware hooks and icons to common by @​castrojo in #672
• fix(brew): trust ublue-os taps for Homebrew 6.0 compatibility by @​castrojo in #695
• feat(oem): add ASUS hardware auto-install hooks by @​castrojo in #692
• test(brew): add brew-preinstall bats tests, codecov, and sync test recipe by @​castrojo in #693
• feat(brew): add brew-preinstall service and system-cli.Brewfile by @​castrojo in #664
• feat(just): add ujust install-asus for ASUS laptop tools by @​castrojo in #503

Opportunistic Work​

• chore(oem): remove Framework brew hook now in common by @​castrojo in #670
• feat(brew): move CLI tools to brew-preinstall by @​castrojo in #205
• fix(cask): vsc-insiders versioning and vscodium linting by @​nklowns in #450
• fix(casks): revert arch-conditional sha256 in on_linux block, as breaks brew bump by @​nikodunk in #424

Dakota (GNOME OS Prototype)​

• feat(brew): move glow and fzf to brew-preinstall by @​castrojo in #834

System Services & Policies​

Systemd services and system-level policies

Planned Work​

• feat(uupd): smart AC-aware update scheduling by @​castrojo in #768
• fix: align rechunker-group-fix with bootc upstream recommendations by @​castrojo in #530
• feat: manage triager permissions via CODEOWNERS sentinel block by @​castrojo in #399
• add dynamic wallpaper timer by @​joshyorko in #349
• feat(profile): add caffeinate alias by @​hanthor in #360
• feat(ops): implement 7-day stale-claim reclaim automation by @​hanthor in #445
• fix(governance): activate TRIAGERS block in CODEOWNERS by @​hanthor in #437
• Fix LUKS UUID parsing on Dakota by @​dylanmtaylor in #385

Opportunistic Work​

• fix(countme): replace broken rpm-ostree-countme with dnf5-based service by @​castrojo in #326
• fix(services): enable rechunker-group-fix.service to prevent boot failure by @​castrojo in #133

Dakota (GNOME OS Prototype)​

• feat(bluefin): add Incus daemon, systemd integration, and ujust recipes (2/2) by @​bketelsen in #1126
• fix: wire firstboot-services.bst into deps.bst (#603) by @​hanthor in #608

Hardware​

Hardware support, drivers, NVIDIA GPU, and ARM64 architecture

Planned Work​

• fix(framework): migrate hid_sensor_hub karg to bootc toml by @​castrojo in #793
• test: add unit tests for check-oci-refs, bazaar-hook, hardware hooks, and nvidia-flatpak-sync by @​castrojo in #785
• feat(oem): add WirePlumber hardware profiles for Framework Desktop AMD Ryzen AI Max 300 by @​castrojo in #760

Opportunistic Work​

• fix(akmods): add --tmpdir /boot to dracut call to fix EXDEV on nvidia builds by @​castrojo in #586
• feat(nvidia): install nvidia-container-toolkit-base and configure CDI by @​castrojo in #559
• test(build): add BATS unit tests for 04-install-kernel-akmods.sh by @​castrojo in #548
• fix(ci): rename nvidia-open flavor to nvidia by @​castrojo in #434
• feat(build): conditional initramfs rebuild — skip dracut when kernel unchanged by @​castrojo in #362
• fix(ci): gate nvidia-open promotion on e2e smoke test by @​castrojo in #296
• feat: release notes redesign — variants table, dual kernel, richer components by @​castrojo in #376
• feat(ci): rename bluefin-lts-nvidia → bluefin-lts-hwe-nvidia by @​castrojo in #293
• fix(kernel-swap): run depmod after noscripts install to fix dracut modules.dep error by @​castrojo in #268
• fix(kernel-swap): use tsflags=noscripts + explicit dracut to fix EXDEV by @​castrojo in #263
• fix(kernel-swap): sync ENABLE_GDX → ENABLE_NVIDIA to unblock squash promotion by @​castrojo in #249
• fix(kernel-swap): use dracut.conf.d instead of DRACUT_TMPDIR to fix HWE EXDEV by @​castrojo in #248
• feat: rename bluefin-gdx to bluefin-lts-nvidia, add :stable alias by @​castrojo in #225
• feat(nvidia): wire CDI configuration for rootless Podman GPU passthrough (GDX) by @​castrojo in #209
• fix(build): re-add DRACUT_TMPDIR=/boot workaround for kernel-swap by @​castrojo in #174
• fix(gdx): remove libnvidia-ml from explicit install by @​castrojo in #32
• fix(driver-versions): guard against null pins in hweKernel pinned tooltip by @​castrojo in #933
• feat(sparklines): shared Sparkline component + version trend sparklines on driver versions page by @​castrojo in #969

Dakota (GNOME OS Prototype)​

• fix(nvidia): add OpenCL, VDPAU, and suspend/hibernate support by @​castrojo in #837
• feat(nvidia): Upgrade drivers to 610.43.02 and ship nvidia-settings by @​dylanmtaylor in #643

Infrastructure​

ISO images, upstream integration, build systems, and testing frameworks

Planned Work​

• fix: changelog reads repo from image-info.json and add tests by @​castrojo in #791
• fix(ci): remove continue-on-error incompatible with uses: in e2e.yml by @​castrojo in #787
• ci(renovate): use --auto merge for merge queue on main by @​castrojo in #782
• fix(bonedigger): persist local report copies before cleanup by @​castrojo in #748
• ci: bump testsuite pin to 8d9ca0b (fix common E2E failures) by @​castrojo in #752
• fix(ci): revert to secrets.MERGERAPTOR_APP_ID matching track-common.yml by @​castrojo in #741
• fix(ci): mark notify-downstream continue-on-error by @​castrojo in #740
• fix(ci): use vars.MERGERAPTOR_APP_ID and client-id in notify-downstream by @​castrojo in #739
• fix(ci): remove owner+repositories from create-github-app-token in notify-downstream by @​castrojo in #738
• fix(ci): use workflow_dispatch for bluefin/bluefin-lts common tracking by @​castrojo in #735
• fix(ci): add continue-on-error to dispatch steps by @​castrojo in #734
• fix(ci): dispatch common-updated to dakota after manifest publish by @​castrojo in #733
• ci: bump testsuite pin for custom-command-list checks by @​castrojo in #719
• chore: ponytail shrink — dedup Justfile loops, extract OCI ref check, combine test deps install by @​castrojo in #725
• fix(ci): remove unnecessary mergeraptor token from renovate-automerge; fix vars/secrets inconsistency by @​castrojo in #709
• fix(ci): make downstream dispatch non-blocking by @​castrojo in #698
• fix(ci): login to GHCR before cosign signing in manifest job by @​castrojo in #697
• fix(ci): promote rootless buildah image to root storage before push by @​castrojo in #696
• fix(ci): pass mergeraptor token to reusable automerge workflow by @​castrojo in #694
• fix(keybinding): restore Super+E to open Files (Nautilus) by @​castrojo in #690
• fix(ci): update create-github-app-token to v3 in build.yml by @​castrojo in #688
• feat(report): add crash detection, PII scrubbing, and journal.txt to ujust report by @​castrojo in #684
• fix(tests): remove orphaned uutils.sh tests from test_profile_d.bats by @​castrojo in #674
• fix(update): detect layered rpm-ostree packages and block with guidance by @​castrojo in #663
• fix(ci): restore btrfs storage backend so push-image can find built image by @​castrojo in #661
• fix(ci): skip CVE scan in merge queue to fix SARIF upload ref error by @​castrojo in #660
• test: add unit tests for profile.d scripts, dynamic-wallpaper, and geoclue-latitude by @​castrojo in #648
• test(scripts): add bats coverage for ublue-image-info.sh by @​castrojo in #640
• fix(ci): modernize build pipeline, restore Dakota E2E, event-driven releases by @​castrojo in #598
• ci(tests): upload pytest coverage report as workflow artifact by @​castrojo in #630
• test(just): add bats coverage for update.just and toggle-updates recipes by @​castrojo in #626
• ci(factory): notify downstream repos when common publishes by @​castrojo in #632
• fix(build): P0 — export image to tar before scan-image, non-blocking by @​castrojo in #625
• feat(ci): supply chain hardening — keyless cosign, Trivy CVE gate, SBOM, SLSA L2 (Phase 6) by @​castrojo in #595
• chore(renovate): group projectbluefin/actions ref updates by @​castrojo in #593
• ci: add git-cliff + e2e gate to monthly release workflow by @​castrojo in #592
• test(quality): add bats coverage for ublue-fastfetch, wire into CI by @​castrojo in #579
• test(quality): bats tests for rechunker-group-fix, ublue-bling-fastfetch, changelog.just + coverage gate by @​castrojo in #573
• fix(ujust): route lts/lts-hwe tags to projectbluefin/bluefin-lts in changelogs by @​castrojo in #582
• fix(ci): bump lifecycle-caller SHA to 3025b5d3 (matches bluefin-lts) by @​castrojo in #581
• chore(lifecycle): move lifecycle.yml to projectbluefin/actions by @​castrojo in #574
• feat(testing): expand shellcheck + add bats by @​castrojo in #568
• fix(ci): expand shellcheck to all shell scripts in system_files/ by @​castrojo in #554
• feat: setup VMs for people by @​castrojo in #544
• fix(just): remove rebase-helper and ublue-rollback-helper by @​castrojo in #567
• feat(ci): auto-merge on lgtm label via merge queue by @​castrojo in #555
• feat(ujust): add toggle-testing command by @​castrojo in #535
• feat(testing): add unit tests for hooks.py and shell scripts by @​castrojo in #540
• fix(ci): remove emoji from promotion-candidate E2E failure issue title by @​castrojo in #539
• docs: add upstream-contributions tracking document by @​castrojo in #527
• feat(ci): add AI commit attribution trailer check to validate.yml by @​castrojo in #515
• fix(ci): use client-id and fail fast on missing mergeraptor secrets by @​castrojo in #510
• ci: bump testsuite SHA to e2b36dc (all env + ptyxis quarantine + screenshot fixes) by @​castrojo in #506
• Update curated.yaml: added Ecosia browser in the browser section by @​k3nsh0 in #466
• chore: add Renovate automerge rule for digest/pin/patch/minor updates by @​castrojo in #495
• feat(just): add caffeinate recipe to prevent system sleep by @​hanthor in #351
• fix(ci): close factory determinism gaps in pipeline workflows by @​castrojo in #500
• fix(ci): switch e2e to projectbluefin images, re-enable pr-e2e gate by @​castrojo in #496
• fix(just): return to ujust menu after bbrew and cncf submenus by @​hanthor in #357
• fix(ci): add bonedigger lifecycle workflow by @​castrojo in #490
• fix(ci): add missing RUN for umotd curl and fix pre-commit violations by @​castrojo in #492
• fix: bug batch may23 — toggle-devmode tag, branding update by @​castrojo in #488
• feat(just): ship ujust report via common with Renovate tracking by @​hanthor in #382
• docs(qa): define hardware canary program for post-promotion testing by @​hanthor in #447
• feat(qa): formalize hardware testing into factory loop — template, labels, policy by @​castrojo in #486
• fix(deps): add Renovate config for GHA version tracking by @​castrojo in #485
• feat(ujust): wire flutter devcontainer recipe import by @​castrojo in #356
• feat(just): add check-sb-key recipe for Secure Boot status by @​hanthor in #370
• docs(skills): add frontmatter and Trail of Bits CI integration by @​hanthor in #444
• docs(skills): add frontmatter and Trail of Bits skill-improver CI by @​castrojo in #461
• feat(ci): add common factory guardrails by @​castrojo in #480
• fix(ci): add skill-drift.yml to detect stale agent skills by @​castrojo in #463
• fix(deps): track OCI image digests in Containerfile with Renovate by @​castrojo in #479
• fix(security): pin curl fetches in Containerfile to verified hashes by @​castrojo in #455
• fix(ci): add bonedigger lifecycle workflow by @​castrojo in #453
• fix(docs): add aurorafin-shared and bluefin-branding submodules to AGENTS.md layout by @​castrojo in #454
• docs(skills): update e2e-ci, governance for P0 session 2026-06-03 by @​castrojo in #452
• fix(ci): add hive-progress-sync workflow by @​castrojo in #450
• feat(ci): add pre-merge e2e composition gate for PRs by @​castrojo in #451
• fix(scripts): Check for rpm-ostreed.conf existence before grep by @​dylanmtaylor in #387

Opportunistic Work​

• fix: use generate_sbom_inline for release notes to avoid testing build SBOM OOM by @​castrojo in #740
• fix(ci): pass explicit credentials to reusable-pkg-cadence by @​castrojo in #737
• fix(sbom): add --parallelism 1 to gen-sbom Syft invocation by @​castrojo in #736
• fix(release): use build-time SBOM artifact instead of inline scan by @​castrojo in #730
• fix(ci): exclude main-targeting PRs from remaining pull_request triggers by @​castrojo in #718
• fix(ci): remove pull_request:main triggers that block merge queue by @​castrojo in #717
• fix(release): pass fast_forward_sha to reusable promotion by @​castrojo in #713
• ci(sync): remove BLUEFINBOT dependency from sync-main-to-testing by @​castrojo in #704
• ci(promote): post validate status to unblock merge queue enqueue by @​castrojo in #703
• ci: move to daily releases, remove approval gate by @​castrojo in #702
• feat: release notes redesign — richer key components by @​castrojo in #701
• feat(ci): enable E2E release gate for bluefin by @​castrojo in #693
• fix(ci): correct execute-release commit message trigger pattern by @​castrojo in #686
• fix(ci): add guard against undeclared gitlinks in PR validation by @​castrojo in #685
• fix(agents): revert bluefin-lts branch target to testing by @​castrojo in #673
• test(hooks): add edge-case coverage for setup hook scripts by @​castrojo in #669
• fix(ci): revert to generate_sbom_inline for release notes by @​castrojo in #667
• ci: align testsuite with lts; remove pr-smoke; restore libratbag by @​castrojo in #666
• ci: remove post-testing E2E and issue spam; simplify gate by @​castrojo in #661
• fix(ci): add variants table and mesa to release notes by @​castrojo in #657
• chore(ci): pin testsuite e2e.yml to @v1 by @​castrojo in #654
• ci(promote): weekly Tuesday 04:00 UTC release with conditional auto-merge by @​castrojo in #652
• chore: remove OEM hooks/icons, drop opendyslexic, fix sync token, remove noisy e2e reporter by @​castrojo in #637
• test: add BATS coverage for runtime hook scripts and TAP artifact upload by @​castrojo in #639
• chore: remove OEM hooks now in common, drop opendyslexic RPM, fix sync token by @​castrojo in #614
• fix(ci): switch testsuite ref to @main managed tag by @​castrojo in #629
• fix(ci): add event-driven common digest tracking by @​castrojo in #619
• fix(ci): trigger promote on PR review for zero-touch merge queue enqueue by @​castrojo in #612
• fix(ci): disable e2e gate in promote workflow, fix post-testing-e2e branches filter by @​castrojo in #611
• fix(ci): remove invalid timeout-minutes from post-testing-e2e run-e2e job by @​castrojo in #597
• fix(ci): use inline cosign_identity_regexp to avoid startup_failure by @​castrojo in #596
• fix(ci): fix execute-release trigger and remove unknown reusable inputs by @​castrojo in #594
• ci: kick post-testing-e2e after push-image fix by @​castrojo in #591
• fix(ci): switch bonedigger caller to @main — eliminate SHA drift by @​castrojo in #582
• revert: remove invalid workflows permission scope by @​castrojo in #581
• fix(ci): add workflows write permission to promote caller by @​castrojo in #580
• fix(ci): enable merge queue enqueue for promote PR by @​castrojo in #579
• fix(ci): remove cosign pre-check for common/brew; bump cosign to v3.1.1; fix Renovate SHA pins by @​castrojo in #575
• fix(tests): sync unit tests with removed packages and scripts by @​castrojo in #573
• chore: remove niche/redundant packages and COPR bloat from base image by @​castrojo in #558
• fix(ci): use @v1 managed tag for all projectbluefin/actions refs by @​castrojo in #552
• fix(verify): switch common image verification to keyless Sigstore OIDC by @​castrojo in #561
• refactor(build): extract package arrays to TOML manifest by @​castrojo in #539
• feat(cadence): add pkg-interval cadence tracking by @​castrojo in #537
• chore(ci): use reusable-vulnerability-scan from actions by @​castrojo in #534
• chore(ci): use reusable validate-renovate workflow from actions by @​castrojo in #533
• chore(ci): remove dead lifecycle-caller.yml by @​castrojo in #532
• test: add unit tests for 03-packages.sh and 05-override-install.sh by @​castrojo in #515
• ci: trigger build — v1 tag fixed at 549249ef by @​castrojo in #529
• ci: retrigger Testing Images after v1 tag fix by @​castrojo in #528
• chore(ci): bump actions SHA pin to 549249e (scan-image severity_rank fix) by @​castrojo in #526
• fix(ci): bump actions SHA pin to v1 (6c2278ad) — drop broken 355f162b by @​castrojo in #523
• fix(ci): replace artifact-metadata with issues:write in Testing Images by @​castrojo in #514
• fix(test): run all BATS unit tests in just test-unit by @​castrojo in #509
• fix(ci): enable shellcheck coverage for system_files scripts by @​castrojo in #510
• ci: consumer validation — Design C promotion PR + release notes overflow fix (actions 9e4ba16) by @​castrojo in #508
• fix(ci): auto-close stale e2e failure issues on success by @​castrojo in #504
• test(bats): add 00-image-info.sh unit tests by @​castrojo in #503
• fix(ci): expand promote-testing-to-main permissions for reusable workflow by @​castrojo in #500
• fix(ci): remove duplicate lifecycle caller, fix validate-renovate paths by @​castrojo in #490
• chore(ci): remove per-repo cleanup workflows (centralized in actions) by @​castrojo in #499
• feat(ci): add cliff.toml for structured changelog generation by @​castrojo in #498
• fix(factory): pin @main floating refs to SHA and adopt thin-caller promote by @​castrojo in #496
• ci(promote): replace 343-line promote workflow with thin caller — no more merge friction by @​castrojo in #486
• fix(security): remove dead SCORECARD_TOKEN PAT comment by @​castrojo in #485
• ci(consistency): pin @main reusable-workflow refs to SHA by @​castrojo in #484
• chore(ci): bump projectbluefin/actions SHA pins to 3025b5d31f34 by @​castrojo in #483
• chore(lifecycle): call lifecycle.yml from projectbluefin/actions by @​castrojo in #481
• fix(ci): promotion gate never stalls — e2e fires on testing builds + feedback trigger by @​castrojo in #480
• fix: port several fixes from ublue-os/bluefin by @​castrojo in #475
• feat(build): remove rpm-ostree rechunk, centralize through actions chunka by @​castrojo in #473
• fix(ci): add projectbluefin/ exemption to no-floating-action-tags; remove dead generate-release.yml by @​castrojo in #472
• feat(ci): replace weekly-testing-promotion with PR-based release gate by @​castrojo in #470
• chore: promote testing to main by @​castrojo in #468
• fix(renovate): enable automerge + add image-versions.yml manager for common by @​castrojo in #467
• chore: remove stable branch build workflow by @​castrojo in #461
• chore: remove :latest, :stable-daily, and :gts streams by @​castrojo in #460
• fix(ci): remove environment: production from generate-release by @​castrojo in #454
• fix(ci): restore local generate-release.yml with inline SBOM support by @​castrojo in #451
• fix(ci): bump reusable-release to d290241 — remove secrets: inherit by @​castrojo in #448
• fix(ci): bump reusable-release to beb89cf — add empty secrets block by @​castrojo in #445
• fix(ci): bump reusable-release SHA — drop reserved github_token secret by @​castrojo in #442
• chore: remove rechunker-group-fix duplicate — now in common by @​castrojo in #439
• ci: centralise Renovate and release workflows via projectbluefin/actions reusables by @​castrojo in #438
• ci: remove duplicate scheduled-stable-release workflow by @​castrojo in #436
• ci: add environment:production gate to weekly stable promotion by @​castrojo in #432
• fix(ci): generate SBOM inline with Syft in generate-release by @​castrojo in #431
• fix(ci): tolerate runner preemption and add skopeo fallback in vulnerability-scan by @​castrojo in #430
• fix(ci): bump reusable-release SHA pin and add mergeability poll loop by @​castrojo in #429
• ci: handle missing SBOM in generate-release gracefully by @​castrojo in #425
• ci: use sigstore/cosign-installer in promotion instead of curl by @​castrojo in #422
• ci: fix cosign cert identity regexp in promotion verify by @​castrojo in #417
• ci: fix cosign cert identity regexp in promotion verify by @​castrojo in #414
• ci: remove software suite from weekly promotion e2e by @​castrojo in #410
• chore: promote testing to main by @​castrojo in #409
• fix(ci): unblock stable release — disable lifecycle gate and fix vuln scan by @​castrojo in #406
• fix(ci): allow auto/promote-testing-to-main through base-branch check by @​castrojo in #405
• fix(ci): squash testing commits into single branch for clean promotion PRs by @​castrojo in #402
• fix(ci): correct vulnerability-scan artifact pattern and bonedigger workflow ref by @​castrojo in #399
• fix(ci): disable SBOM in sign-and-publish for testing stream by @​castrojo in #395
• fix(ci): skip SBOM generation for testing stream to unblock builds by @​castrojo in #393
• feat(ci): add sync-main-to-testing workflow by @​castrojo in #389
• fix: centralize scheduled stable release workflow by @​castrojo in #387
• fix(ci): clean up promotion workflows — fix artifact name, stop comment spam, auto-close issues by @​castrojo in #385
• fix(ci): update COPR health monitor to check uupd instead of ublue-update by @​castrojo in #381
• ci: align all reusable-build pins to actions v1 (trivy oci-archive fix) by @​castrojo in #377
• test: pin build-image-testing to actions fix/trivy-oci-archive-scan SHA by @​castrojo in #374
• fix: retain default tag in tag-images so vulnerability scan can find the image by @​castrojo in #372
• feat: add weekly gated stable release on Tuesday by @​castrojo in #371
• feat: migrate generate-release to bootc-build/create-release by @​castrojo in #370
• test(build): add bats unit tests for 17-cleanup.sh and 18-workarounds.sh by @​castrojo in #365
• chore: remove stale 60-custom.just report recipe by @​castrojo in #367
• ci: gate :testing tag behind post-build e2e (#518) by @​castrojo in #369
• test(build): add bats unit tests for clean-stage.sh by @​castrojo in #361
• test(build): add bats unit tests for disable-repos.sh by @​castrojo in #360
• fix(ci): handle FORBIDDEN gracefully in promote-testing-to-main enqueue step by @​castrojo in #358
• fix(ci): replace auto-merge with enqueuePullRequest for main merge queue by @​castrojo in #355
• fix(ci): use GITHUB_TOKEN directly in promote-testing-to-main — remove GitHub App token by @​castrojo in #338
• fix(ci): pin reusable-build to @v1 SHA — retire @fix/sha-skew validation ref by @​castrojo in #353
• chore(ci): validate actions reusable-build SHA normalization by @​castrojo in #342
• feat(ci): enforce PR base branch — require testing, block PRs targeting main by @​castrojo in #349
• ci: validate shared generate-release-notes action by @​castrojo in #344
• test(ci): validate actions pre-commit pinning by @​castrojo in #345
• chore(ci): validate actions timeout pin by @​castrojo in #341
• test(ci): run all bats unit tests in PR validation by @​castrojo in #350
• chore(labels): retire type/* labels in issue templates by @​castrojo in #347
• chore: promote testing to main by @​castrojo in #337
• fix: add promotion conflict reporting and main PR builds by @​castrojo in #334
• chore: switch lifecycle automation to common-owned workflow by @​castrojo in #332
• ci: bump testsuite SHA to e2b36dc (all env + ptyxis quarantine + screenshot fixes) by @​castrojo in #315
• test(build): add bats unit tests for validate-repos.sh and copr-helpers.sh by @​castrojo in #318
• fix(ci): update COPR health monitor for new API response format by @​castrojo in #316
• fix: use app token for promotion PRs by @​castrojo in #328
• ci: add local Renovate runner by @​castrojo in #324
• feat: generate GitHub release after weekly testing promotion by @​castrojo in #325
• ci: automate testing→main branch promotion by @​castrojo in #326
• feat(quality): add bats unit tests for package-lib.sh by @​castrojo in #298
• fix(release): handle bootstrap case when no previous release tag exists [backport #264] by @​castrojo in #265
• fix(ci): handle new GHCR repos in skopeo list-tags version probe by @​castrojo in #281
• fix(ci): scope workflow permissions to job level, drop secrets:inherit by @​castrojo in #297
• fix(ci): harden weekly testing promotion by @​castrojo in #294
• fix(just): stop bootstrapping cosign from unverified container by @​castrojo in #295
• fix(ci): centralize testsuite pin in pr-validation + pin pre-commit version by @​castrojo in #292
• chore: automerge Renovate digest/pin/patch/minor updates when CI passes by @​castrojo in #286
• fix(ci): resolve TOCTOU vuln scan, PR image namespace, testsuite SHA drift by @​castrojo in #250
• fix(ci): centralize testsuite SHA pin through run-testsuite.yml by @​castrojo in #262
• fix(ci): scope weekly-promotion permissions and drop secrets:inherit from build callers by @​castrojo in #255
• fix(release): handle bootstrap case when no previous release tag exists by @​castrojo in #264
• ci: remove E2E smoke test from PR validation by @​castrojo in #285
• fix(security): make base image cosign verify fatal on failure by @​castrojo in #280
• fix(ci): add hive-progress-sync workflow by @​castrojo in #279
• chore: bump upgrade-test.yml SHA to 0527fe28 by @​castrojo in #276
• feat(ci): wire lifecycle upgrade-test into post-build e2e gate by @​castrojo in #275
• fix(ci): replace inline pr-validation steps with validate-pr composite action by @​castrojo in #271
• fix(security): make base image cosign verification fatal in CI by @​castrojo in #244
• ci(hive): add hive-progress-sync workflow by @​castrojo in #243
• feat(ci): add skill-drift wrapper workflow by @​castrojo in #239
• feat: add production environment gate to promotion workflow by @​castrojo in #237
• chore: update centralized actions ref to @v1 by @​castrojo in #234
• feat: port to centralized projectbluefin/actions reusable workflow by @​castrojo in #232
• feat(ci): remove bluefin-dx image variant (retiring) by @​castrojo in #208
• feat(build): split monolithic RUN into cacheable stages for build efficiency by @​castrojo in #198
• feat(ci): enable previous-build delta for rechunking by @​castrojo in #195
• security: pin base image by digest to prevent TOCTOU (CWE-494) by @​castrojo in #191
• fix(build): remove version tag from cache-from/cache-to refs (Podman 5.x compat) by @​castrojo in #196
• feat(ci): auto-file e2e test failures as GitHub issues by @​castrojo in #192
• feat(build): tag large unpackaged assets with user.component for rechunking by @​castrojo in #190
• feat(ci): add preflight job and rechunk metadata verification by @​castrojo in #189
• feat(build): switch SBOM generation from podman-export to oci-dir scan by @​castrojo in #188
• feat(ci): add Grype vulnerability scanning with SARIF upload by @​castrojo in #179
• refactor(ci): extract reusable run-testsuite.yml wrapper workflow by @​castrojo in #185
• refactor(ci): extract composite action for checkout+just bootstrap by @​castrojo in #184
• feat(ci): add PR smoke test gate and Renovate risk-tier automerge by @​castrojo in #187
• feat(ci): implement registry-side layer cache with --cache-from/--cache-to by @​castrojo in #183
• feat(ci): add COPR repository health monitoring by @​castrojo in #182
• security: vendor cosign public keys instead of fetching from mutable URLs by @​castrojo in #180
• chore: remove dead rpm-ostreed.conf and migrate kargs to grubby by @​castrojo in #178
• fix(ci): prevent /e2e dispatch from overwriting canonical :testing tags by @​castrojo in #177
• refactor: read common/brew image refs from image-versions.yml at build time by @​castrojo in #176
• fix(ci): retag tested digest instead of rebuilding for weekly promotion by @​castrojo in #175
• fix(ci): upload SBOM as GitHub Actions artifact for release workflow by @​castrojo in #174
• security: restrict GITHUB_TOKEN to GitHub-owned hosts in ghcurl (CWE-201) by @​castrojo in #172
• fix(ci): pass explicit credentials to reusable-pkg-cadence by @​castrojo in #387
• fix(release): use build-time SBOM artifact instead of inline scan by @​castrojo in #385
• fix(ci): add statuses:write permission to promote workflow by @​castrojo in #384
• fix(release): pass fast_forward_sha to reusable promotion by @​castrojo in #381
• fix(ci): guard post-release-variants against duplicate prepend by @​castrojo in #379
• ci: move to daily releases (04:00 UTC) by @​castrojo in #377
• feat(ci): add E2E gate to post-merge workflow, enable run_e2e for lts by @​castrojo in #369
• fix(ci): pin bonedigger lifecycle.yml SHA instead of floating @v1 tag by @​castrojo in #365
• fix(ci): use build-time SBOM artifact to avoid 2GB inline extraction limit by @​castrojo in #363
• fix(ci): update pkg-cadence comment :lts→:stable by @​castrojo in #353
• fix(ci): guard publish_stream_tag on PR builds; drop main from pr-testsuite by @​castrojo in #352
• ci: align testing-first branch model and drop :lts for :stable by @​castrojo in #351
• ci: remove post-merge E2E gate — promote :testing on successful build by @​castrojo in #342
• fix(ci): restore bonedigger @v1 — tag now exists in projectbluefin/bonedigger by @​castrojo in #341
• fix(ci): revert bonedigger ref to @main — @v1 tag does not exist yet by @​castrojo in #340
• ci(e2e): fix trailing blank line in post-merge-e2e.yml by @​castrojo in #339
• ci(e2e): remove auto-issue-filing on E2E failure by @​castrojo in #338
• chore(renovate): exclude projectbluefin/testsuite from SHA pinning by @​castrojo in #336
• ci(promote): fully automate weekly lts release — no human approval required by @​castrojo in #330
• ci(testsuite): switch run-testsuite.yml from SHA pin to @v1 managed tag by @​castrojo in #328
• ci(pre-commit): exempt projectbluefin/testsuite from floating-tag check by @​castrojo in #327
• chore(ci): pin testsuite e2e.yml to @v1 by @​castrojo in #322
• ci(promote): weekly Thursday 04:00 UTC release with conditional auto-merge by @​castrojo in #320
• fix(ci): exempt projectbluefin/testsuite from floating-tag hook by @​castrojo in #312
• fix(ci): switch testsuite ref to @main managed tag; bonedigger @main → @v1 by @​castrojo in #311
• fix(ci): add event-driven common digest tracking by @​castrojo in #301
• fix(ci): revert bonedigger ref to @main — @v1 tag does not exist by @​castrojo in #295
• feat(ci): add bonedigger lifecycle workflow by @​castrojo in #243
• chore(oem): remove Framework hooks now shipped by common by @​castrojo in #220
• revert: remove invalid workflows permission scope by @​castrojo in #238
• fix(ci): add workflows write permission to promote caller by @​castrojo in #237
• test: add pytest coverage for changelogs.py by @​castrojo in #222
• test: add bats unit tests for build scripts by @​castrojo in #221
• fix(ci): remove racing push trigger, fix stale squash-merge rules by @​castrojo in #236
• fix(ci): align renovate and promote workflows with factory pattern by @​castrojo in #218
• fix(ci): pass base_branch: main to renovate-automerge reusable by @​castrojo in #216
• fix(ci): disable Renovate SHA-pinning for projectbluefin/ actions by @​castrojo in #215
• fix(ci): replace stale testsuite SHA pin with @main by @​castrojo in #211
• fix(ci): use @v1 managed tag for all projectbluefin/actions refs by @​castrojo in #204
• fix(ci): bump actions SHA to e6aaccdf (fix sed title-case in render step) by @​castrojo in #200
• fix(ci): bump actions SHA to 26a4fb2 (squash -X theirs, no conflict issues) by @​castrojo in #198
• fix(ci): use printf to build variants table in execute-release by @​castrojo in #194
• fix(ci): report correct image (bluefin-lts-hwe:testing) in e2e failure issues by @​castrojo in #193
• fix(ci): add missing end-of-file newline to pkg JSON files by @​castrojo in #196
• chore(ci): use reusable-vulnerability-scan from actions by @​castrojo in #179
• chore(ci): use reusable validate-renovate workflow from actions by @​castrojo in #178
• chore(ci): pin floating @v1 tags to SHA in renovate-automerge and release-reminder by @​castrojo in #177
• refactor(build): extract package arrays to TOML manifest by @​castrojo in #182
• feat(cadence): add pkg-interval cadence tracking by @​castrojo in #181
• fix(ci): bump actions SHA pins to @v1 and skip rhc postun in container build by @​castrojo in #173
• fix(ci): fix dead workflow_run triggers on promote-testing-to-main by @​castrojo in #169
• fix(ci): normalize action SHAs, add renovate, remove vestigial workflows by @​castrojo in #164
• feat(ci): add weekly standalone vulnerability scan by @​castrojo in #168
• feat(ci): add cliff.toml for structured changelog generation by @​castrojo in #167
• fix(ci): trigger post-merge-e2e on HWE build, not regular build by @​castrojo in #163
• fix(ci): expand caller permissions to fix promote startup_failure by @​castrojo in #162
• ci(promote): replace 354-line promote workflow with thin caller — no more merge friction by @​castrojo in #161
• ci(consistency): pin @main reusable-workflow refs to SHA by @​castrojo in #159
• fix(ci): set Renovate baseBranchPatterns to testing by @​castrojo in #158
• chore(ci): bump projectbluefin/actions SHA pins to 3025b5d31f34 by @​castrojo in #157
• chore(lifecycle): call lifecycle.yml from projectbluefin/actions by @​castrojo in #156
• fix(ci): promotion gate never stalls — e2e fires on testing builds + feedback trigger by @​castrojo in #155
• fix(ci): remove COPY of nonexistent system_files_overrides/base/ by @​castrojo in #154
• fix(ci): bump testsuite SHA to include udev-settle mask (PR #419) by @​castrojo in #148
• fix(ci): add actions: read to release-notes job to unblock startup_failure by @​castrojo in #141
• fix(ci): add check-trigger regular job before reusable workflow calls by @​castrojo in #140
• fix(ci): grant id-token at workflow level to unblock startup_failure by @​castrojo in #139
• fix(ci): fix YAML syntax error in execute-release if condition by @​castrojo in #138
• fix(ci): change execute-release trigger from pull_request to push by @​castrojo in #137
• feat(build): remove vendored Containerfile.splitter, centralize through actions chunka by @​castrojo in #132
• fix(ci): add mergeability poll loop and close-failure-issue job to promote workflow by @​castrojo in #129
• feat(ci): replace scheduled-lts-release with PR-based release gate by @​castrojo in #128
• fix(deps): bump common + fix Renovate tracking for critical fixes by @​castrojo in #123
• fix(ci): bump projectbluefin/actions SHA to fcd2a6b — fix build failure by @​castrojo in #120
• ci: centralise Renovate and release workflows via projectbluefin/actions reusables by @​castrojo in #118
• ci: fix branch sync direction, Renovate flow, and promotion pipeline by @​castrojo in #117
• ci: scope PR E2E smoke to image content changes only by @​castrojo in #115
• ci: add environment:production gate and fix renovate automerge by @​castrojo in #114
• fix(ci): restore blocking sign-and-publish, unblock Renovate auto-merge, add pre-merge e2e gate by @​castrojo in #111
• fix(ci): skip lts fast-forward when sync-main-to-lts already merged it by @​castrojo in #107
• fix(ci): use always() && needs.X.result on post-promote jobs by @​castrojo in #106
• fix(ci): add explicit if conditions to update-lts-branch and generate-release by @​castrojo in #104
• fix(ci): use lts repo main SHA for promote guard and branch update by @​castrojo in #103
• fix(ci): make upgrade-test non-blocking until testsuite registry check fixed by @​castrojo in #102
• fix(ci): use cosign v3 installer in verify-signatures job by @​castrojo in #101
• fix(ci): broaden cosign cert-identity-regexp to include actions repo by @​castrojo in #100
• feat(ci): replace scheduled rebuild with digest promotion + 7-day floor by @​castrojo in #92
• fix(ci): use PACKAGES_TOKEN for GHCR login in verify-signatures by @​castrojo in #98
• ci: restore sync-main-to-lts workflow by @​castrojo in #97
• chore: promote main → lts (2026-06-06) by @​castrojo in #95
• fix(ci): bump actions SHA — sign-and-publish non-blocking by @​castrojo in #91
• fix: chown sbom_out after sudo gen-sbom so sign-and-publish can write by @​castrojo in #90
• fix(hwe,gdx): dynamically follow Fedora CoreOS stable instead of pinned F43 by @​castrojo in #89
• fix(ci): bump actions SHA — sudo podman inspect fix by @​castrojo in #88
• fix(ci): bump actions SHA — PACKAGES_TOKEN + localhost image refs by @​castrojo in #86
• fix(ci): bump actions SHA — disable Trivy scan blocking release by @​castrojo in #85
• feat(ci): add sync-main-to-testing workflow by @​castrojo in #84
• fix(ci): bump actions SHA — docker format for Trivy archive scan by @​castrojo in #83
• fix(ci): bump projectbluefin/actions SHA to fix Trivy OCI scan by @​castrojo in #82
• fix(justfile): use oci-dir export for SBOM generation by @​castrojo in #81
• fix(ci): remove stale bonedigger.yml duplicate by @​castrojo in #78
• ci: migrate to shared reusable-build.yml; rename images to bluefin-lts/bluefin-gdx by @​castrojo in #73
• fix: add LTS release failure guards by @​castrojo in #70
• feat: parallelize LTS build watching (~5h → ~90min) by @​castrojo in #71
• chore: switch lifecycle automation to common-owned workflow by @​castrojo in #69
• chore: add explicit renovate.json extending org config by @​castrojo in #67
• ci: bump testsuite SHA to e2b36dc (all env + ptyxis quarantine + screenshot fixes) by @​castrojo in #63
• fix: add failure issue auto-filing to LTS post-merge e2e by @​castrojo in #66
• fix: wait for HWE builds and verify cosign signatures in scheduled LTS release by @​castrojo in #65
• fix: remove trailing whitespace from Containerfile by @​castrojo in #59
• chore(ci): add bonedigger.yml lifecycle workflow by @​hanthor in #40
• feat(ci): upgrade podman via resolute, double-push, --compression-level 3, bootc unified storage by @​castrojo in #19
• feat(qa): add post-merge E2E for bluefin-lts by @​hanthor in #41
• feat(ci): migrate to shared projectbluefin/actions by @​castrojo in #46
• fix(ci): add hive-progress-sync workflow by @​castrojo in #44
• feat(ci): adopt validate-pr and detect-changes from projectbluefin/actions by @​castrojo in #37
• ci(hive): add hive-progress-sync workflow by @​castrojo in #28
• feat: migrate reusable-build-image.yml to projectbluefin/actions shared actions by @​castrojo in #23
• chore(lockdown): add CODEOWNERS per-path entries and mandatory gates (Track C-2) by @​castrojo in #26
• feat(ci): production environment gate on LTS release workflow (Track C-1) by @​castrojo in #25
• feat(ci): add skill-drift wrapper workflow by @​castrojo in #24
• Add formula and cask builder by @​jumpyvi in #459
• ci: fix fw-fanctrl python 3.14 bundle by @​ahmedadan in #461
• fix(hive): bypass CORS by fetching registry data at build time by @​castrojo in #956
• feat(hive): fetch all GitHub Search data at build time using GITHUB_TOKEN by @​castrojo in #958
• feat(dakota): add Alpha 3 ISO to downloads testing page by @​castrojo in #931
• feat(hive): org-wide contributor wall + history trends pipeline by @​castrojo in #923
• ci: remove Playwright E2E tests entirely by @​castrojo in #914
• Revert "feat: Bluefin bootc-ISO builder (bootcDirect + containers-storage, 8 GB)" by @​hanthor in #66
• feat: Bluefin bootc-ISO builder (bootcDirect + containers-storage, 8 GB) by @​hanthor in #61
• chore: add CODEOWNERS by @​castrojo in #60
• refactor: modernize template to projectbluefin/actions composite workflow pattern by @​Siddhj2206 in #94
• fix(ci): cosign digest only by @​scrocquesel in #58

Dakota (GNOME OS Prototype)​

• feat(bluefin): add Incus native library elements (1/2) by @​bketelsen in #1125
• fix(bluefin-cli): correct sysupdate path, tar import, and mount masking by @​castrojo in #1108
• Add snapd by @​valentindavid in #1117
• fix(ci): trigger renovate automerge from validate by @​castrojo in #1122
• chore(deps): batch common + sudo-rs updates by @​castrojo in #1116
• ci(build-aarch64): remove push trigger (next) by @​castrojo in #1107
• ci(build-aarch64): remove push trigger — workflow_run and dispatch only by @​castrojo in #1106
• ci(next): sync CI fixes from testing — push config, exclude merge_group, aarch64 paths by @​castrojo in #1104
• ci(build-aarch64): exclude .github/actions/** from push trigger by @​castrojo in #1103
• fix(ci): generate push config so bst artifact push actually warms CAS by @​castrojo in #1102
• ci(build): switch to strict daily build model, drop push triggers by @​castrojo in #1099
• ci(build): disable CAS push/remote-exec — server still unstable by @​castrojo in #1098
• fix(ci): remove undeclared build_run_id input causing execute-release startup_failure by @​castrojo in #1096
• ci(build): disable remote execution to fix CAS workaround by @​castrojo in #1093
• ci(build): disable remote CAS push to unblock builds by @​castrojo in #1092
• fix(ci): remove ${{ }} wrapper from post-release-verify if condition by @​castrojo in #1091
• fix(ci): replace !inputs.dry_run with inputs.dry_run != true to avoid startup_failure by @​castrojo in #1089
• fix(release): harden OCI-native promotion (supply chain + ARM signing + post-release cleanup + rollback) by @​castrojo in #1086
• fix(build-aarch64): resolve correct SHA in workflow_run context by @​castrojo in #1084
• fix(publish): only move stream tags from trunk builds, not merge queue by @​castrojo in #1085
• fix(release): pin promotion to immutable SHA; guard testing SHA drift by @​castrojo in #1083
• ci(build): add daily 13:00 schedule; trigger ARM from publish by @​castrojo in #1079
• ci: delete workflows obsoleted by OCI-native promotion by @​castrojo in #1078
• chore(ci): delete release-reminder workflow by @​castrojo in #1075
• ci(release): adopt OCI-native daily promotion in execute-release by @​castrojo in #1077
• ci(next): skip nightly dispatch if next build already running by @​castrojo in #1076
• ci: retarget workflows from main to testing by @​castrojo in #1080
• feat(audio): add lsp-plugins-lv2 for PipeWire DSP filter-chain by @​castrojo in #974
• fix(ci): add statuses:write permission to promote caller by @​castrojo in #1070
• fix(ci): guard count-elements step against bst show failures by @​castrojo in #1069
• ci(build): enforce serial BST builds — max-parallel: 1 by @​castrojo in #1068
• feat: add .github/release.yml for release notes categorization by @​castrojo in #1065
• fix(ci): add workflows permission to renovate-automerge by @​castrojo in #1054
• fix(ci): run validate job on merge_group events by @​castrojo in #1052
• ci(aarch64): standalone build workflow, decoupled from x86_64 release by @​castrojo in #1051
• fix(bst-progress): correct action priority dedup and count step exit handling by @​castrojo in #1049
• ci(build): live BST progress monitor with cache hit/miss stats by @​castrojo in #1048
• ci(aarch64): standalone build workflow, decoupled from x86_64 release by @​castrojo in #1045
• chore(just): remove just-overrides, use common recipes directly by @​castrojo in #1035
• fix(ci): pin bonedigger lifecycle.yml SHA instead of floating @v1 tag by @​castrojo in #1037
• ci(cache-warm): add parallel aarch64 warm-cache job by @​castrojo in #1036
• fix(ci): restore next branch workflows after main merge by @​castrojo in #1032
• fix(ci): remove dangling .workflow-scripts submodule, add PR guard by @​castrojo in #1030
• fix(ci): remove validate from testing branch protection to unblock sync by @​castrojo in #1014
• ci(triage): merge on maintainer ack — no more stuck approved PRs by @​castrojo in #1011
• ci: use @v1 for all projectbluefin/actions refs, stop renovate managing org actions by @​castrojo in #1010
• feat(countme): report to Fedora countme infrastructure by @​castrojo in #1003
• feat(deps): add flatpak-builder by @​castrojo in #993
• fix(ci): allow all testing-targeted PRs in pr-triage gate by @​castrojo in #1009
• fix(ci): renovate automerge base_branch testing (testing-first model) by @​castrojo in #1008
• fix(ci): restore :testing publishing — independent branch, paths-ignore by @​castrojo in #1004
• fix(ci): use BST SBOM for release notes, add variants table by @​castrojo in #998
• ci(build): drop push-to-testing trigger — eliminates redundant 5h build by @​castrojo in #997
• chore(ci): pin testsuite e2e.yml to @v1 by @​castrojo in #994
• ci(promote): weekly Tuesday 04:00 UTC release with conditional auto-merge by @​castrojo in #991
• fix(motd): add missing env.sh, remove duplicate umotd.sh profile hook by @​castrojo in #992
• fix(ci): remove persist-credentials: false from sync workflow by @​castrojo in #990
• ci: add sync-next-from-main workflow to main branch by @​castrojo in #987
• fix(ci): fix automerge and auto-update for mergeraptor dep PRs by @​castrojo in #989
• chore(next): sync from main — bring next up to date with all main changes by @​castrojo in #986
• feat(next): update bootc to v1.16.1 matching main branch by @​castrojo in #983
• fix(ci): exclude promotion PR from pr-autoupdate by @​castrojo in #971
• fix(ci): exempt projectbluefin/testsuite from floating-tag hook by @​castrojo in #959
• fix(ci): switch testsuite ref to @main managed tag; bonedigger @main → @v1 by @​castrojo in #958
• fix(ci): make common tracking event-driven, CI-gated via testing by @​castrojo in #942
• fix(ci): align execute-release trigger with actual promotion commit format by @​castrojo in #932
• fix(ci): guard squash branch deletion when promotion PR is open by @​castrojo in #931
• feat(ci): nightly next branch build at 03:00 UTC by @​castrojo in #926
• fix(ci): enable auto-merge silently on maintainer approval by @​castrojo in #927
• fix(ci): drop GitHub App token from sync-main-to-testing by @​castrojo in #922
• fix(ci): wait for multi-user.target before health check by @​castrojo in #919
• fix(ci): check gdm not-failed instead of is-active in headless QEMU by @​castrojo in #918
• fix(ci): find OSTREE_PATH from boot.1 tree instead of BLS entries by @​castrojo in #915
• fix(ci): add --bootloader none and --ipc=host to boot-check by @​castrojo in #912
• fix(ci): use ext4 for boot-check; add xfsprogs to bootc runtime deps by @​castrojo in #909
• fix(ci): unblock dakota publish pipeline by @​castrojo in #908
• fix(ci): unstick dakota publish pipeline by @​castrojo in #899
• fix(ci): pre-partition disk before bootc to avoid udev race on node creation by @​castrojo in #889
• fix(ci): use losetup -P (PARTSCAN) so bootc can find partition nodes by @​castrojo in #883
• fix(ci): also exempt projectbluefin/bonedigger from floating-tag hook by @​castrojo in #878
• fix(ci): switch bonedigger caller to @main — eliminate SHA drift by @​castrojo in #875
• fix(ci): add workflows write permission; unpin reusable SHA to @v1 by @​castrojo in #871
• revert: remove invalid workflows permission scope by @​castrojo in #872
• fix(ci): pre-create host loop device for boot-check; drop --via-loopback by @​castrojo in #864
• ci(pr): enable auto-merge after approval; add pr-autoupdate workflow by @​castrojo in #858
• fix(bootc): require xfs root filesystem in install config by @​castrojo in #859
• fix(ci): read OSTREE_PATH from BLS entry; detach loop device by @​castrojo in #852
• ci(publish): make smoke gate observational, not a promote blocker by @​castrojo in #849
• fix(sbom): mkdir -p pip cache dir before podman bind-mount by @​castrojo in #848
• fix(export): revert buildah mount+commit to podman build --squash-all by @​castrojo in #846
• chore: remove standalone report recipe and OTel config duplicate by @​castrojo in #845
• ci(publish): speed up pipeline — skopeo promote, job split, buildah export, pip cache by @​castrojo in #832
• fix(ci): use @v1 managed tag for all projectbluefin/actions refs by @​castrojo in #830
• fix(ci): bump reusable-renovate-automerge SHA — drop --auto by @​castrojo in #829
• ci: restore testing→main promotion pipeline — parity with bluefin by @​castrojo in #822
• chore(deps): update projectbluefin/actions SHA pins to c4e9e551 by @​castrojo in #823
• fix(ci): use direct merge for auto-merge group — bypass not honoured by --auto by @​castrojo in #820
• fix(ci): revert promote SHA to 6c2278 — release-gate@5f8abb not found by @​castrojo in #819
• fix(ci): add missing packages: read and actions: read to promote workflow by @​castrojo in #817
• chore(ci): use reusable-vulnerability-scan from actions by @​castrojo in #813
• chore(ci): use reusable validate-renovate workflow from actions by @​castrojo in #812
• chore(ci): migrate promote-testing-to-main to reusable-promote-squash by @​castrojo in #811
• feat(ci): add cache-warm scheduled workflow by @​castrojo in #782
• chore(ci): allow common.bst updates to automerge without review by @​castrojo in #807
• ci: consumer validation — Design C promotion PR + release notes overflow fix (actions 9e4ba16) by @​castrojo in #805
• feat(umotd): add umotd element by @​castrojo in #762
• fix(ci): switch execute-release to push trigger + commit-msg gate by @​castrojo in #800
• fix(ci): add workflow_dispatch to execute-release; fix if guard by @​castrojo in #799
• fix(ci): grant required permissions to execute-release caller by @​castrojo in #798
• ci: promote testing images to stable (96dec33c80b7b4e3) by @​castrojo in #797
• fix: use @projectbluefin/maintainers team in CODEOWNERS by @​castrojo in #796
• chore(ci): remove per-repo GHCR cleanup (centralized in actions) by @​castrojo in #795
• feat(ci): add weekly standalone vulnerability scan by @​castrojo in #794
• feat(ci): add cliff.toml for structured changelog generation by @​castrojo in #793
• fix(ci): fix lifecycle wiring, remove duplicate GHCR cleanup by @​castrojo in #789
• chore(lifecycle): call lifecycle.yml from projectbluefin/actions by @​castrojo in #780
• fix(ci): bump projectbluefin/actions SHA to 2a09e72e9be1 — fix 65% publish failure by @​castrojo in #792
• fix(renovate): align config with org standard — extend shared config, automerge digests by @​castrojo in #790
• ci(C1): thin caller for reusable-promote workflow by @​castrojo in #788
• ci: add scheduled cache-warm workflow for BST remote cache by @​castrojo in #787
• fix(ci): pin reusable-workflow @main refs to SHA by @​castrojo in #786
• chore(ci): bump projectbluefin/actions SHA pins to 3025b5d31f34 by @​castrojo in #781
• fix(ci): gh pr create has no --json flag — capture URL instead by @​castrojo in #778
• fix(ci): fire build on main push; auto-merge PRs target main; force-sync testing mirror by @​castrojo in #777
• feat(ci): use centralized bootc-build/chunka action; remove dead code by @​castrojo in #773
• fix(ci): track-bst-sources: use --squash for auto-merge, not --merge by @​castrojo in #767
• fix(ci): publish :testing on every testing merge; fix track-bst branch base by @​castrojo in #766
• chore(build): upgrade chunkah v0.5.0 to v0.6.0 by @​castrojo in #761
• fix(ci): point Renovate at main, exempt bonedigger from pinning by @​castrojo in #741
• fix(ci): remove dead release.yml, add daily promote schedule, fix project_name casing by @​castrojo in #760
• feat(ci): add PR-based release gate; replace weekly-testing-promotion by @​castrojo in #757
• fix(ci): skip storage-service in export/publish jobs by @​castrojo in #756
• ci(next): wire next branch into main CI pipeline by @​castrojo in #751
• fix(sbom): use runc runtime to bypass crun 1.21 GHA runner failures by @​castrojo in #749
• fix(sbom): add seccomp=unconfined to just sbom podman invocations by @​castrojo in #747
• fix(sbom): drop --privileged from bst show / buildstream-sbom runs by @​castrojo in #745
• ci(e2e): remove pull_request trigger from e2e workflow by @​castrojo in #740
• revert(uutils-coreutils): remove ghost-specific LTO override by @​castrojo in #737
• ci: centralise Renovate runner via projectbluefin/actions reusable by @​castrojo in #735
• ci: fix Renovate to target testing branch and add runner workflow by @​castrojo in #734
• ci: relax TOCTOU guards from exact-equality to ancestor check by @​castrojo in #732
• ci: replace inline cosign curl install with sigstore/cosign-installer by @​castrojo in #730
• ci: ship :testing on every merge, drop nightly schedule and e2e gate by @​castrojo in #731
• ci: harden release.yml and publish.yml pipeline by @​castrojo in #729
• ci: harden promotion pipeline and fix lifecycle workflow by @​castrojo in #728
• fix(uutils-coreutils): override LTO to thin to fix SIGABRT on ghost by @​castrojo in #726
• feat: switch to weekly gated release on Tuesday by @​castrojo in #720
• feat: migrate release.yml to bootc-build/create-release by @​castrojo in #719
• ci: align weekly promotion pipeline to spec (#520 #521 #522 #524) by @​castrojo in #718
• chore: switch lifecycle automation to common-owned workflow by @​castrojo in #717
• ci: bump testsuite SHA to e2b36dc (all env + ptyxis quarantine + screenshot fixes) by @​castrojo in #714
• chore(ci): clarify bonedigger @main is intentional managed tag by @​castrojo in #715
• fix(deps): add Renovate config for GHA version tracking by @​castrojo in #707
• fix(ci): block floating GitHub Action tags in pre-commit by @​castrojo in #702
• feat(justfile): push-local recipe + zstd + SC2129 lint fix by @​castrojo in #642
• fix: improve gh gist upload guidance in report recipe by @​dylanmtaylor in #646
• feat(just): add debug-session recipe with serial capture and journal logging (#558) by @​hanthor in #600
• fix(ujust): read actual booted image from bootc status for toggle-devmode by @​hanthor in #599
• build: parallelize validate and consolidate CI BST config by @​castrojo in #602
• feat: add weekly GHCR cleanup workflow by @​castrojo in #672
• feat: add bluefin-countme weekly user count ping by @​castrojo in #616
• fix: remove bootc installer flatpak on first boot by @​castrojo in #656
• feat(justfile): feedback loop tooling — preflight, serial log, boot-test expansion, OTLP hint by @​castrojo in #561
• ci: switch to projectbluefin/actions@v1.1.0 by @​castrojo in #641
• ci: fix reporting-triage-review-verification loop by @​castrojo in #583
• chore(agents): remove PR rate limit — gate is human now by @​castrojo in #669
• chore(ci): add .pre-commit-config.yaml by @​hanthor in #682
• chore(ci): add renovate.json5 configuration by @​hanthor in #683
• chore(ci): add bonedigger.yml lifecycle workflow by @​hanthor in #684
• fix(publish): remove job-level permissions from e2e-gate reusable workflow call by @​castrojo in #699
• fix(publish): remove invalid artifact-metadata permission causing startup_failure by @​castrojo in #698
• fix(publish): replace read-all with explicit permissions by @​castrojo in #697
• fix(publish): add packages:write to e2e-gate, pin testsuite SHA by @​castrojo in #696
• chore(deps): land testing dep updates into main by @​castrojo in #695
• fix(ci): count hive p1 in status sync by @​castrojo in #691
• fix(ci): use hive labels in status sync by @​castrojo in #690
• fix(shellcheck): rework writes to GitHub output by @​dylanmtaylor in #647
• ci(e2e): always report status — skip for non-image PRs by @​castrojo in #666
• fix(ci): group consecutive GITHUB_OUTPUT redirects (SC2129) by @​hanthor in #663
• ci(hive): migrate to org board and hive/* labels in hive-status-sync by @​castrojo in #662
• chore(lockdown): add CODEOWNERS per-path entries and mandatory gates (Track C-2) by @​castrojo in #661
• feat(ci): add skill-drift wrapper workflow by @​castrojo in #660
• feat: add production environment gate to promotion workflow by @​castrojo in #659
• chore(ci): run weekly testing promotion on Sundays by @​castrojo in #658

Documentation​

Documentation improvements and additions

Planned Work​

• docs(agents): staging audit rule, duplicate PR check, lts branch target, copilot setup by @​castrojo in #757
• docs(factory): align bluefin-lts to completed testing-first migration by @​castrojo in #754
• fix(ci): exclude docs/factory and specs from ublue-os ref check by @​castrojo in #749
• docs(release-promotion): fix e2e gate model — run_e2e is false for bluefin and dakota by @​castrojo in #724
• chore(docs): drop completed audits and stale planning docs by @​castrojo in #642
• docs(factory): deprecate housekeeping repo — actions is canonical home by @​castrojo in #636
• ci: delete docs-quality workflow by @​castrojo in #556
• chore(ci): remove hive-progress-sync workflow and PROJECT_TOKEN dependency by @​castrojo in #529
• feat(labels): add hardware/* labels to labels.json by @​castrojo in #512
• fix(governance): add knuckle to sync-codeowners matrix by @​castrojo in #491
• docs(ci): CI lifecycle bot consolidation strategy by @​hanthor in #443
• docs: establish common as org brain — factory docs, skills hub, migration status by @​castrojo in #426
• docs(agents): add missing workflows to AGENTS.md inventory by @​castrojo in #462
• docs(skills): add lifecycle automation table and common workflow inventory by @​castrojo in #456
• docs(skills): add all OS factory skills to common by @​castrojo in #427

Opportunistic Work​

• docs(release): rewrite release.md with correct build-time SBOM pattern by @​castrojo in #731
• docs: replace skills/README.md with redirect to SKILL.md by @​castrojo in #728
• docs: add merge queue operational failure modes to AGENTS.md by @​castrojo in #726
• docs(ci): document merge queue AWAITING_CHECKS and locked branch failure modes by @​castrojo in #724
• chore: remove orphaned gif; fix README stable promotion cadence by @​castrojo in #723
• docs(ci): remove pr-release-gate.yml from pipeline diagram by @​castrojo in #722
• docs: fix remaining stale references from full docs audit by @​castrojo in #720
• docs: brutal accuracy pass — kill stale facts and broken links by @​castrojo in #719
• docs: final audit — fix remaining stale references by @​castrojo in #711
• docs: require Context7 tool lookup before any tool or library use by @​castrojo in #694
• docs(ci): add failure modes for SBOM OOM, merge queue dequeue, statuses 403 by @​castrojo in #707
• docs: brutal audit — delete stale files, align to daily automated factory by @​castrojo in #708
• docs(agents): add CI verification command and done-means-verified rule by @​castrojo in #684
• docs(agents): fix lts branch target, add staging audit and pr dedup check by @​castrojo in #671
• docs: onboard factory skill-improvement mandate; fix CI docs by @​castrojo in #668
• docs(skills): add dracut EXDEV nvidia failure mode to build.md by @​castrojo in #587
• fix(ci): pin testsuite SHA, fix stale known-bug docs, narrow hook exemptions by @​castrojo in #583
• docs: update AGENTS.md — fix promotion model, remove deleted workflow refs by @​castrojo in #578
• docs(ci): record testing branch recovery learnings by @​castrojo in #531
• docs(skills): update ci.md for expanded shellcheck and full bats inventory by @​castrojo in #513
• docs: quality follow-up — fix missing entries and stale notes by @​castrojo in #512
• docs: link copr-security.md from SKILL.md router by @​castrojo in #511
• docs: install-hooks step, remote trap warning, 2-human gate, skill-drift CI docs, iso.md fix by @​castrojo in #479
• docs: update all docs/skills to reflect two-stream model (testing + stable) by @​castrojo in #464
• docs(ci): document cosign installer rule and SBOM promotion gap by @​castrojo in #426
• docs(ci): document SBOM dual-scan runner timeout pattern by @​castrojo in #397
• docs(ci): document stable branch's local reusable-build.yml exception by @​castrojo in #392
• docs(agents): add analysis-vs-implementation, cross-repo, and issue comment rules by @​castrojo in #384
• docs(ci): update promotion pipeline docs for org-wide consistency by @​castrojo in #382
• docs: update AGENTS.md and workflow.md with current patterns by @​castrojo in #366
• docs: extend comment policy to cover issues, add close+comment anti-pattern by @​castrojo in #363
• docs: remove stale ublue-os/bluefin origin remote references by @​castrojo in #352
• docs(skills): update ci.md and AGENTS.md for main merge queue and branch sync by @​castrojo in #331
• docs(skills): update ci and build skills for current state by @​castrojo in #320
• docs(ci): clarify shared workflow boundaries by @​castrojo in #303
• docs(agents): document floating-tag pre-commit guard by @​castrojo in #302
• docs: update workflow and renovate skill with current process by @​castrojo in #288
• docs: update CI/PR workflow docs for validate-only PRs and automerge by @​castrojo in #287
• docs(workflow): document agent label checklist when opening a PR by @​castrojo in #245
• docs(skills): integrate session learnings into ci and release skills by @​castrojo in #268
• docs: restructure README with consistent structure and release cards by @​castrojo in #269
• docs(workflow): document stuck-PR patterns and bulk-merge flow by @​castrojo in #261
• docs(ci): document shared CI architecture; add CI-fix-first workflow for agents by @​castrojo in #256
• docs(workflow): add hive/p0 and hive/p1 to label reference by @​castrojo in #242
• docs(THEPATTERN): add user/developer impact section, fix stale facts by @​castrojo in #238
• docs: add SECURITY.md and fix stale ublue-os references by @​castrojo in #171
• docs: require Context7 tool lookup before any tool or library use by @​castrojo in #370
• docs(agents): add CI verification command and done-means-verified rule by @​castrojo in #362
• docs(factory): onboard to factory self-improvement model by @​castrojo in #297
• docs: add ublue-os/bluefin-lts migration plan and skill by @​castrojo in #321
• docs(skills): fix stale testsuite SHA-pin policy and README image name by @​castrojo in #294
• fix(ci): pin testsuite SHA, fix stale docs, narrow hook exemptions by @​castrojo in #245
• docs: update AGENTS.md — branch model alignment, remove outdated references by @​castrojo in #228
• docs(skills): update factory state after 2026-06-14 session by @​castrojo in #217
• docs(skills): add image verification and bootc /boot notes to release.md by @​castrojo in #195
• fix(docs): fix stale ublue-os image refs, NVIDIA :latest→:lts, add SECURITY.md and expanded CONTRIBUTING by @​castrojo in #152
• docs(skills): update ci-cd runbooks from 2026-06-10 session by @​castrojo in #149
• docs(skills): rewrite skills as runbooks, remove session-log artifacts by @​castrojo in #145
• docs(skills): document execute-release startup_failure root cause and fix by @​castrojo in #142
• fix(ci): resolve post-merge E2E #135 — mask systemd-udev-settle + skill doc by @​castrojo in #136
• docs(skills): document rechunker-group-fix pattern and emergency promotion runbook by @​castrojo in #134
• docs(skills): remove testlab skill by @​castrojo in #113
• docs(agents,skills): align with org-wide pattern; audit and fix skill files by @​castrojo in #112
• docs(skills): update release pipeline and pitfalls by @​castrojo in #110
• docs(skills): clarify COPR chroot naming and add bonedigger to workflow map by @​castrojo in #56
• docs(agents): document floating-tag pre-commit guard by @​castrojo in #52
• docs: consolidate doc updates from PRs 29, 49, 50 by @​castrojo in #54
• docs: fix stale image refs and flesh out CONTRIBUTING.md by @​castrojo in #45
• docs(ci): clarify lts workflow overrides by @​castrojo in #53
• docs: update skills for shared-actions migration (PR #46) by @​castrojo in #47
• docs(skills): document projectbluefin/actions adoption by @​castrojo in #38
• docs: restructure README with consistent structure and release cards by @​castrojo in #36
• docs(music): move Children of Jensen to Origins, Requiem to Kettle by @​castrojo in #994
• docs(music): update top section title and playlist order by @​castrojo in #993
• feat(music): add 'The War of Generations' soundtracks by @​castrojo in #992
• fix: correct YAML syntax in refresh-sbom-seed.yml by @​castrojo in #990
• chore: add workflow to refresh SBOM seed files via PR by @​castrojo in #989
• revert: remove SBOM seed commit step (branch protection blocks push) by @​castrojo in #988
• chore: auto-commit SBOM seed files from nightly workflow by @​castrojo in #987
• fix: add search-insights as explicit dep to sync package-lock by @​castrojo in #986
• chore: migrate ublue-os image repos to projectbluefin org by @​castrojo in #985
• chore: remove gaming stub page by @​castrojo in #982
• fix(sparklines): fix trend guard and Sparkline default fill by @​castrojo in #974
• fix(hive): switch snapshot from broken HTML URL to /api/status by @​castrojo in #952
• fix(hive): move Guardians/Ghosts to main fetch batch to avoid search rate limit by @​castrojo in #957
• feat(nav): restructure sidebar — promote Platform section to top by @​castrojo in #976
• feat(hive): wire public registry API for live governor and frame data by @​castrojo in #955
• feat(nav+analytics): add Hive to navbar, replace analytics page with LFX widgets by @​castrojo in #977
• feat(hive): ops center layout — factory floor hero, 3-col intelligence zone, fixed stats grid by @​castrojo in #954
• feat(hive): governor meter to top, accurate marker, new stats strip cards by @​castrojo in #951
• feat(hive): remove commit-centric panels, rank contributors by project breadth by @​castrojo in #953
• feat(docs): show last-update timestamps, hide edit on data pages, fix stale content by @​castrojo in #978
• feat(projects): add CNCF and OpenSSF section to projects page by @​castrojo in #968
• docs(agents): add Sparkline component docs, CNCF section policy, update worktrees by @​castrojo in #975
• chore: remove GTS announcement banner by @​castrojo in #967
• chore(docs): brutal audit — fix ublue-os refs, update outdated commands by @​castrojo in #980
• chore(docs): factory audit — delete stale docs, fix supply chain, update agentic guide by @​castrojo in #981
• docs: add supply-chain security page by @​castrojo in #979
• fix(hive): 2-column Guardians/Ghosts, full-width Recently Merged by @​castrojo in #959
• fix(deps): add glob as direct dependency, fix fetch-github-profiles token guard by @​castrojo in #949
• feat(hive): source from hosted instance + community showcase overhaul by @​castrojo in #930
• docs(agentic-contributing): update for current projectbluefin state (June 2026) by @​castrojo in #929
• Replaced Dev Containers guide with last archive version by @​liachra in #928
• docs: document Hive Factory Dashboard in AGENTS.md by @​castrojo in #925
• feat(hive): contributor leaderboard with weekly/monthly milestones by @​castrojo in #924
• feat(hive): expand dashboard with timeline, budget, nous, full merged grid by @​castrojo in #922
• fix: add missing search-insights@2.17.3 to package-lock.json by @​castrojo in #921
• fix(hive): drop "The" from title, add factory tagline by @​castrojo in #920
• feat(hive): The Bluefin Operating System Factory by @​castrojo in #917
• docs(agentic): add queue dashboard and review-guide pointers by @​castrojo in #912
• docs: add agentic contributor guide for projectbluefin org by @​castrojo in #910
• refactor: overhaul agent UX — skill-based docs, slim AGENTS.md by @​Siddhj2206 in #100

Dakota (GNOME OS Prototype)​

• docs: clean house — align with OCI-native daily factory, delete stale content by @​castrojo in #1090
• docs(skills): record statuses:write startup_failure pattern by @​castrojo in #1071
• docs(skills): update ci.md — merge_group excluded from build, new lessons learned by @​castrojo in #1105
• docs: sweep and remove all stale references to push-driven CI and old PR flow by @​castrojo in #1100
• docs(skills): move CI failure patterns to correct skill files by @​castrojo in #1095
• docs(ci): document execute-release startup_failure and CAS mid-build drop patterns by @​castrojo in #1094
• docs: update CI/promotion docs for OCI-native daily promotion by @​castrojo in #1081
• docs: require Context7 tool lookup before any tool or library use by @​castrojo in #1050
• docs(agents): add CI verification command and done-means-verified rule by @​castrojo in #1031
• docs(skills): fix workflow-map — testing-first is the model by @​castrojo in #1029
• docs(agents): align trailer rule with org standard, add staging audit by @​castrojo in #1013
• docs: factory compliance audit and cleanup by @​castrojo in #1012
• docs(skills): fix code fence label in ci.md by @​castrojo in #1005
• docs(skills): document next-branch-specific patches by @​castrojo in #988
• docs(skills): onboard factory self-improvement infrastructure by @​castrojo in #982
• docs(skills): split CI knowledge into focused skills by @​castrojo in #900
• docs(ci): document run_e2e=false design, narrow hook exemptions to actions only by @​castrojo in #876
• docs: update AGENTS.md — fix repo map, remove deleted workflow reference by @​castrojo in #869
• docs(skills): ci — lessons from 2026-06-12 session by @​castrojo in #816
• docs(skills): ci — release pipeline lessons from 2026-06-11 session by @​castrojo in #802
• docs(skills): ci + pr-review — lessons from 2026-06-10 session by @​castrojo in #774
• docs: expand CONTRIBUTING.md with BST build context and AGENTS.md reference by @​castrojo in #776
• docs(skills): add live build diagnosis and gnome-build-meta nightly delta patterns by @​castrojo in #742
• docs: document :next/:btw stream, export CAS fix, and next branch ops by @​castrojo in #758
• docs(skills): add ci.md lessons from PR 751 by @​castrojo in #752
• docs: add image streams section to README by @​castrojo in #736
• docs(skills): fix stale CI references and add rubber duck review pattern by @​castrojo in #733
• docs(skills): 2026-06-07 lessons — CAS outage, ghost LTO, meson systemd dep by @​castrojo in #727
• docs: complete skill audit — frontmatter, correctness fixes, real lessons by @​castrojo in #724
• docs(agents): document floating-tag pre-commit guard by @​castrojo in #703
• docs: reinforce dakota build boundaries by @​castrojo in #704
• fix(docs): update overview.md gap table — fwupd and uupd are present by @​castrojo in #679
• docs(skills): add merge-queue skill — retarget, rebase, and fleet patterns by @​castrojo in #668
• docs(skills): add lab:fail PR reset policy — update in place, no comment spam by @​castrojo in #601
• docs: clarify push-to-upstream rule — dep-update PRs are same-repo by @​castrojo in #619
• docs: document publish pipeline, stream model, and factory restart by @​castrojo in #701
• docs(skills): document publish.yml startup_failure root causes by @​castrojo in #700
• docs(skills): add merge-queue skill — dep-update PR retarget/cherry-pick/merge flow by @​castrojo in #692
• docs: restructure README with consistent structure and release cards by @​castrojo in #671

Tech Debt​

Maintenance work and feature parity between variants

Planned Work​

• chore(ci): remove fragile cross-repo workflows by @​castrojo in #786
• ci(renovate): use platformAutomerge, remove redundant automerge workflow by @​castrojo in #783
• refactor(system): move ujust helpers into libexec by @​castrojo in #720
• ci: exempt internal projectbluefin/ refs from floating-tag hook by @​castrojo in #716
• fix(ci): drop dead downstream dispatch and sync-labels by @​castrojo in #701
• revert(ai): remove nvidia/amd AI stacks erroneously merged in #684 by @​castrojo in #687
• chore(assets): remove unreferenced fedora SVG icons (−2.4MB) by @​castrojo in #650
• fix(ci): update lifecycle-caller SHA — fixes all PR branch failures by @​castrojo in #638
• chore(ci): validate release-state.yaml against JSON schema by @​castrojo in #634

Opportunistic Work​

• chore(ci): remove hive-progress-sync workflow by @​castrojo in #435
• chore(ci): remove hive-progress-sync workflow by @​castrojo in #116

Automation​

CI/CD pipelines, GitHub Actions, and automated dependency updates

Planned Work​

• fix(ci): bump lifecycle-caller SHA to actions v1 HEAD by @​castrojo in #712
• ci(security): add OpenSSF Scorecard workflow by @​castrojo in #631

Opportunistic Work​

Status: ChillOps

Localization​

Translation and internationalization work

Status: ChillOps

Bot Activity​

Automation Percentage: 39.4% (551 bot PRs out of 1400 total PRs)

Contributors​

Wayfinders​

"Define yourself by your actions."

—Lord Saladin

Want to see the latest OS releases? Check out the Changelogs. For announcements and deep dives, read our Blog.

This report was automatically generated from todo.projectbluefin.io.

Generated on 2026-07-02
View Project Board | Report an Issue

Desktop​

GNOME desktop environment, Aurora variant (KDE), and terminal enhancements

Planned Work​

• fix: removing search-light from the enabled extensions until there's a fix by @​pfanzola in #324
• feat: Add gradia flatpak and remove shortcut by @​coxde in #335
• Revert "feat(bluefin, gschemas): specify mutter experimental features… by @​coxde in #321
• fix: update bazaar refs to new bazaar-org location by @​castrojo in #337
• fix: removing tailscale from the enabled extensions list by @​pfanzola in #323
• fix: adjust font size to match upstream by @​ehsanullahjan in #309
• feat(just): move powerwash to shared again by @​renner0e in #328
• fix: don't show failure message on bluefin-cli by @​renner0e in #303

Opportunistic Work​

• fix: ensure xdg-desktop-portal starts after gnome-keyring-daemon by @​leafyoung in #4539
• feat(extension): Add gradia capture extension by @​coxde in #4651
• feat(ci): auto-bump GNOME extension submodule tags by @​ahmedadan in #4577
• feat(extension): add Custom Command Menu by @​castrojo in #1367
• feat(extension): Add gradia capture extension by @​coxde in #1364
• Correct errors in lazy-days wallpaper by @​delphicmelody in #88
• fix: correct errors in eyes wallpaper and optimize file size by @​delphicmelody in #87
• ci: verify wallpaper cask checksums on pull requests by @​ahmedadan in #393
• fix: correct kde and gnome sha256 for bluefin-wallpapers-extra 2026-05-09 by @​ahmedadan in #392
• 🔍 fix(css): remove Arial font overrides — use system font stack (fixes #817) by @​kubestellar-hive in #859
• fix(tips): wire fetch-gnome-extensions into build pipeline and add tests by @​castrojo in #846
• blog: Bluefin Spring 2026 Part 1 — Fedora 44, GNOME 50, ASUS, new com… by @​castrojo in #818
• fix(tips): restore gnome-extensions fetch script and wire into build pipeline by @​castrojo in #809
• feat(artwork): sync lazy-days and other new upstream wallpapers by @​castrojo in #781

Dakota (GNOME OS Prototype)​

• Remove command-order from 05-dakota-custom-command-menu by @​StorageB in #584
• fix: move Dakota wallpaper month selection to runtime by @​castrojo in #526
• patches: bump libgvc to fix gnome-shell audio port SIGABRT by @​hanthor in #569
• fix: remove search-light shell extension by @​joshyorko in #515
• fix(oci): correct ldconfig invocation — pass explicit conf path by @​castrojo in #518
• fix(oci): run ldconfig after package install in image assembly by @​castrojo in #517
• feat(menu): add Containers entry to custom command menu by @​castrojo in #472
• feat(extension): Add and enable gradia capture extension by @​coxde in #483
• bluefin: disable shell motd by default by @​hanthor in #446
• Drop gnome singed modules by @​alatiera in #429
• revert: "chore(deps): update gnome-build-meta junction: 50.1-9 -> 50.1-11" by @​castrojo in #422
• Remove command-order from 05-dakota-custom-command-menu by @​StorageB in #416
• fix(dconf): set ublue logo and leftmost position for custom-command-menu by @​castrojo in #396
• Update gnome and freedesktop-sdk junctions by @​alatiera in #372

Development​

Development tools and IDE integrations

Planned Work​

• feat(ide): add VSCode Insiders to ide Brewfile by @​castrojo in #338

Opportunistic Work​

• fix: remove swtpm workaround, add ramalama alias, clean orphan modules by @​castrojo in #4677
• Adds ROCm Info utility by @​DarkGhostHunter in #4661
• docs(agents): slim AGENTS.md, add docs/skills/, integrate testsuite CI by @​castrojo in #1373
• fix(vscode): fix brew bump by using explicit linux string in URLs by @​nklowns in #411
• fix vscode cask by @​inffy in #413
• fix(vscode): disable built-in update checks for brew installs by @​ahmedadan in #407
• fix: icon for jetbrains toolbox and vscode by @​dreamyukii in #396
• Add Antigravity IDE cask by @​hanthor in #400

Dakota (GNOME OS Prototype)​

• fix(ujust): dx-group — guard PKEXEC_UID, offer reboot by @​castrojo in #597

Homebrew​

New Applications​

The following applications were added to our Homebrew taps this month:

Application	Description	Status
antigravity-cli-linux	Terminal interface for Antigravity agents
antigravity-ide-linux	AI Coding Agent IDE
antigravity-ide-linux	No description available
antigravity-linux	No description available
antigravity-sdk	Python SDK for building with Google Antigravity
vmbuddy	QEMU wrapper with sensible defaults

Use ujust bbrew to browse and install these packages. Follow the tap instructions if you want to do it by hand.

Package Updates​

90 automated updates this month via GitHub Actions. Homebrew tap version bumps ensure Bluefin users always have access to the latest stable releases.

Quick Summary​

Ecosystem​

Homebrew packages, AI/ML tools (Bluespeed), and Flatpak applications

Planned Work​

• fix(ujust): only run brew bundle when enabling bluefin-cli by @​hanthor in #358
• Hooks for bazaar by @​jumpyvi in #254
• spec: Add Bluespeed architecture spec (v0.1) for local-first AI on Bluefin by @​lazypower in #236
• Removal of Sound Recorder in favor of Decibels by @​pfanzola in #325
• feat(bazaar): add Rclone Manager and Tube Converter to curated apps by @​repires in #332
• chore(apps): add gitte (git gui) flatpak to curated apps in Bazaar by @​Ilan-Sperber in #319
• chore(bazaar): update curated jellyfin to org.jellyfin.JellyfinDesktop by @​coxde in #322

Opportunistic Work​

• chore: update bazaar-companion ref by @​coxde in #4650
• chore: remove own flatpak version by @​renner0e in #4608
• feat(packages): Add gcc-c++ to packages so Homebrew has a c++ by @​colindean in #4586
• chore: update bazaar-companion ref by @​coxde in #1349
• Add new antigravity stuff, disable updates by @​daegalus in #412
• fix(casks): wrap arch-conditional sha256 in on_linux block by @​ahmedadan in #394
• chore: don't mention experimental tap in rog gui by @​Lumaeris in #385
• chore: remove antigravity by @​inffy in #433
• Add plain Antigravity cask and SDK formula by @​hanthor in #402
• chore: update org name for craft-agents-linux by @​KiKaraage in #374
• Add vmbuddy by @​jumpyvi in #371
• Remove libvirt by @​jumpyvi in #351

Dakota (GNOME OS Prototype)​

• fix(systemd): guard flatpak-preinstall.service against missing subcommand by @​castrojo in #588

System Services & Policies​

Systemd services and system-level policies

Planned Work​

• Enable Bazaar Integration by @​pfanzola in #341
• fix: prefer Ptyxis in xdg-terminal-exec by @​salim-b in #326
• fix: set over amplification to false by @​pfanzola in #307
• feat: add a simple uupd config by @​Lumaeris in #308

Opportunistic Work​

• Revert "fix: ensure xdg-desktop-portal starts after gnome-keyring-dae… by @​coxde in #4685

Dakota (GNOME OS Prototype)​

• fix(fdsdk): squash pipewire ref bump and separate policy flags by @​castrojo in #587
• fix: Remove passwordless sudo policy by @​coxde in #374

Hardware​

Hardware support, drivers, NVIDIA GPU, and ARM64 architecture

Planned Work​

Status: ChillOps

Opportunistic Work​

• chore(hwe): bump kernel to 6.19.12-200.fc43 and coreos stable to 43 by @​castrojo in #1334
• chore(hwe): bump kernel pin to 6.19.12-100.fc42 by @​castrojo in #1333
• fix(sbom): store cacheKey as tag so nvidia overlay matches correctly by @​castrojo in #840
• fix(changelogs): fall back to most-recent nvidia SBOM entry for Dakota by @​castrojo in #815
• fix(changelogs): populate LTS HWE Kernel from lts-hwe SBOM stream by @​castrojo in #779
• fix(driver-versions): detect kernel and mesa patch-level version bumps by @​castrojo in #776
• fix(driver-versions): populate LTS HWE kernel from lts-hwe SBOM stream by @​castrojo in #778
• fix: add dakota-nvidia SBOM stream and BST nvidia-driver extraction by @​castrojo in #808
• fix: install oras in pages.yml so Dakotaraptor driver versions populate by @​castrojo in #807
• fix: add bluefin-nvidia-open-stable SBOM stream for stable nvidia driver versions by @​castrojo in #806
• data(sbom): update sbom-attestations.json seed with GDX nvidia versions by @​castrojo in #805
• fix: extract nvidia-driver from GDX SBOM, remove release-notes fallback by @​castrojo in #804

Dakota (GNOME OS Prototype)​

• fix(kernel): upstream bootc kernel regression by @​castrojo in #435
• feat(kernel): build with x86-64-v3 when project option enabled by @​ahmedadan in #412
• fix(ci): add nvidia to publish matrix by @​ahmedadan in #394
• hotfix: install nvidia driver libs into multiarch libdir by @​ahmedadan in #392
• Drop kernel 7.0 update by @​alatiera in #375
• hotfix: install nvidia userspace binaries and bootc kargs.d drop-in by @​ahmedadan in #366
• chore: enable nvidia ghcr push by @​ahmedadan in #365

Infrastructure​

ISO images, upstream integration, build systems, and testing frameworks

Planned Work​

• chore: update codeowners and add pull request template by @​inffy in #354
• fix(just): make validation recipe properly fail on errors and fix syntax errors by @​hanthor in #384
• ci: add e2e PR gate for Bluefin LTS, Stable, and Dakota by @​castrojo in #366
• fix(just): add volume preview before pruning in clean-system by @​hanthor in #363
• fix: ignore commented LockLayering setting by @​joshyorko in #300
• feat(just): add overlay command for sysext testing by @​tulilirockz in #158
• fix(opentabletdriver): fix opentabletdriver recipe by @​inffy in #343
• fix(ujust): typo in toggle-user-motd disable message by @​sebjag in #329
• fix(apps): remove duplicate VideoTrimmer from productivity section by @​EsmeAioli in #320
• chore: Bump game-devices-udev. Restore the priority prefixes. by @​fardragon in #331
• chore: bump game-devices-udev by @​renner0e in #330
• docs: mention LUKS in toggle-tpm2 comment for better ujust --choose discoverability by @​L0g0ff in #299

Opportunistic Work​

• feat(just): add just validate-scripts shellcheck for build scripts by @​LijuanTang94 in #4722
• fix(ci): use --digestfile to avoid signing race condition by @​castrojo in #4691
• chore(just): remove SUDO_DISPLAY from Justfile by @​castrojo in #4377
• chore: remove framework-laptop kmod install by @​castrojo in #4378
• chore: remove ARG fallbacks by @​dylanmtaylor in #4393
• feat(changelogs): Use SBOMs for standardized package data extraction by @​dylanmtaylor in #4635
• fix(packages): add appindicator libs for tray icons by @​ahmedadan in #4580
• feat(ci): auto-merge Renovate PRs after pr-testsuite passes by @​castrojo in #1376
• feat(ci): gate GitHub Release on e2e smoke passing by @​castrojo in #1375
• fix(ci): replace broken reusable workflow call with inline just check + lint by @​castrojo in #1374
• fix(casks): restore CI/CD health and unblock automated updates by @​nklowns in #419
• Remove buildstream by @​jumpyvi in #393
• Add Justfile for local CI testing by @​hanthor in #373
• fix(ci): run Playwright E2E tests on push to main and PRs by @​hanthor in #894
• ci: add copilot-setup-steps with Wrangler (Cloudflare CLI) by @​castrojo in #901
• feat(ci): auto-open GitHub Discussion when blog post merges to main by @​castrojo in #892
• ci: disable E2E tests until build time is stable by @​castrojo in #891
• 🔍 ci(pdf): pin Node.js 20 for docusaurus-prince-pdf compatibility by @​kubestellar-hive in #881
• fix(ci): restore E2E coverage — use waitForLoadState("load") for blog page by @​kubestellar-hive in #870
• ci: always cancel in-progress Pages deployments on new pushes by @​kubestellar-hive in #864
• fix(ci): bust Prince XML tar cache key after permissions refactor by @​kubestellar-hive in #856
• 🔧 fix(ci): pre-create prince dirs to allow cache restore without sudo by @​kubestellar-hive in #853
• 🔒 fix(ci): add persist-credentials:false and scope token to push step by @​kubestellar-hive in #852
• 🔒 ci: add persist-credentials: false to read-only checkout steps by @​kubestellar-hive in #850
• 🔧 fix(ci): remove auto-merge step from monthly-reports workflow by @​kubestellar-hive in #849
• fix(build): add missing BrewOsChart component by @​castrojo in #825
• fix(lint): remove unused imports and vars blocking build by @​castrojo in #824
• fix(css): restore cardPlayIcon properties — unclosed block broke build by @​castrojo in #819
• ci: fix SBOM cache miss condition to use cache-matched-key by @​castrojo in #802
• ci: add Playwright e2e test workflow by @​castrojo in #793
• docs: clarify LTS breakage affects all flavors including GDX (#51) by @​hanthor in #57
• docs: add Intel Optane/RST troubleshooting to README by @​hanthor in #56
• docs: add Intel RST/Optane pre-installation warning by @​hanthor in #55
• chore: remove logo hacks by @​renner0e in #54
• fix(iso): remove ublue-flatpak-manager.service disable by @​castrojo in #53
• fix(iso): use slitherer browser for Anaconda WebUI installer by @​castrojo in #52
• fix: update bib_image to working sha256 (fixes ISO build) by @​hanthor in #78
• fix(ci): use podman save + syft docker-archive for SBOM (#77) by @​hanthor in #81

Dakota (GNOME OS Prototype)​

• feat(ci): add testing/latest/stable stream layout by @​castrojo in #636
• fix(ci): grant packages:write so testsuite can push desktop screenshot by @​castrojo in #617
• feat(report): add boot error log and per-unit journal to ujust report by @​castrojo in #589
• fix(renovate): use stable PyPI URL format for plugins junctions by @​castrojo in #482
• feat(ujust): add flutter devcontainer scaffold recipe by @​castrojo in #594
• fix(ujust): show issue URL with template in not-signed-in path of ujust report by @​castrojo in #586
• feat(actionadon): 5-stage pipeline with you-are-here widget by @​castrojo in #590
• fix(publish): call just chunkify after export to restore 120-layer output by @​castrojo in #585
• ci: fix 10 audit issues — SHA resolution, cosign bump, retry, pins, e… by @​castrojo in #390
• feat(ujust): add probe recipe for AI-assisted diagnostics by @​castrojo in #559
• ci(hive-status-sync): update project title with live queue stats by @​castrojo in #567
• ci(hive-status-sync): also trigger on push to main by @​castrojo in #566
• fix(hive-status-sync): use correct GraphQL field for project status by @​castrojo in #565
• fix(hive-status-sync): skip posting when PROJECT_TOKEN is not set by @​castrojo in #564
• ci: hourly Hive status sync to project board by @​castrojo in #563
• feat(agents): add in-repo skills knowledge base at .github/skills/ by @​castrojo in #543
• Add contributor discovery table to AGENTS.md by @​castrojo in #545
• Human-first issue templates — specificity drives velocity by @​castrojo in #550
• fix: remove emojis from issue templates by @​castrojo in #542
• fix: ghost copy wording + streamlined issue templates by @​castrojo in #541
• feat: opt-in AI report stash + Dakota-specific MOTD with gum polish by @​castrojo in #540
• fix: batch papercut fixes (#304, #352, #456, #465) by @​castrojo in #486
• feat(just): add ujust report — system information donation by @​castrojo in #494
• fix(firstboot-date): mkdir -p wants/ before symlink by @​castrojo in #500
• ci: disable aarch64 build temporarily by @​castrojo in #499
• ci: re-enable aarch64 build on cron/dispatch only by @​castrojo in #495
• fix(ci): use app token for checkout in track jobs by @​castrojo in #481
• fix(release): add full SBOM diff tables to release notes by @​castrojo in #455
• ci: automated GitHub releases with SBOM-diffed release card by @​castrojo in #443
• ci: filter publish workflow_run trigger to main and merge queue branches by @​castrojo in #442
• ci: use mergeraptor app token for PR creation in tracking workflows by @​castrojo in #440
• ci: fix timeout ceiling, cancel-on-push, redundant step guard by @​castrojo in #438
• ci: add validate job, move full build off PRs, drop Blacksmith by @​castrojo in #437
• fix(ci): atomic junction tracking + block Renovate from pinning dakot… by @​castrojo in #425
• fix(ujust): generate ujust completions by @​coxde in #364
• refactor(tealdeer): use inline arch dispatcher pattern by @​ahmedadan in #413
• feat: add document thumbnailers by @​coxde in #409
• fix(chunkah): bump to v0.5.0 and fix Renovate tracking by @​castrojo in #408
• fix(renovate): rename managerFilePatterns to fileMatch by @​castrojo in #405
• feat(deps): add tealdeer (tldr) v1.8.1 by @​axel-kaliff in #116
• chore: remove Saturn and its exclusive dependencies by @​castrojo in #395
• ci: serialize PR builds to avoid buildbox contention by @​castrojo in #397
• fix(ci): update scorecard-action to verified commit SHA by @​castrojo in #393
• feat(security): OpenSSF Scorecard, CodeQL SAST, SECURITY.md, hardened token permissions by @​castrojo in #391
• ci: fix oras attach digest capture for SBOM signing by @​castrojo in #389
• ci: inline export in publish with correct BST_FLAGS by @​castrojo in #388
• ci: fix BST_FLAGS key mismatch in export and add explicit artifact push by @​castrojo in #387
• ci: move export to separate job to fix BST artifact checkout by @​castrojo in #386
• ci: pull BST artifact to local cache before export by @​castrojo in #385
• ci: move export/chunkify/sbom to build, publish loads artifact by @​castrojo in #384
• ci: add docker login so cosign can authenticate to GHCR by @​castrojo in #383
• project.conf: Add x86_64_v3 option and enable it by default by @​alatiera in #91
• fix(ci): per-SHA concurrency for merge_queue publishes by @​castrojo in #380
• fix(ci): use --merge instead of --squash for merge queue compatibility by @​castrojo in #379
• fix(ci): move Blacksmith to publish only, schedule on standard runners by @​castrojo in #378
• feat(ci): split build/publish workflows, add SBOM+signing by @​castrojo in #377

Documentation​

Documentation improvements and additions

Planned Work​

Status: ChillOps

Opportunistic Work​

• 📖 docs(contributing): add CONTRIBUTING.md with fork/clone/branch workflow and style guide by @​clubanderson in #887
• perf(e2e): reduce E2E wall-clock time from ~2h to ~15min by @​castrojo in #902
• 📖 docs(contributing): add Contribution Workflow section with fork/clone/branch steps by @​kubestellar-hive in #886
• fix(hive): add raw.githubusercontent.com to CSP; fix 202 sparkline by @​castrojo in #900
• fix(hive): remove hardcoded Level 6 claim from About section by @​castrojo in #899
• fix(hive): string-aware HTML snapshot fallback parser by @​castrojo in #898
• fix(hive): fall back to HTML snapshot while snapshot.json is not yet published by @​castrojo in #897
• feat(hive): read snapshot.json instead of HTML-parsing by @​castrojo in #896
• blog(knuckle): wrap intent statement in tip admonition by @​castrojo in #890
• blog: Introducing Knuckle — Flatcar Container Linux for the Home by @​castrojo in #889
• 📖 docs(knuckle): add cosign ISO verification step and update_strategy to headless example by @​kubestellar-hive in #880
• 📖 docs: surface Node.js prereq in README and add TRANSLATING.md link to CONTRIBUTING by @​kubestellar-hive in #882
• 🔍 test(scripts): add unit tests for previously untested fetch scripts by @​kubestellar-hive in #879
• 🔍 docs/test: add README overview and unit tests for fetch scripts by @​kubestellar-hive in #878
• 🔍 docs(readme): add contributing overview for new documentation contributors by @​kubestellar-hive in #877
• docs(readme): add just install hint and GITHUB_TOKEN requirement for local dev by @​kubestellar-hive in #872
• 🔍 docs: remove rl ramalama alias references by @​kubestellar-hive in #876
• 🔍 fix(renovate): remove deprecated :maintainLockFilesWeekly preset by @​kubestellar-hive in #874
• docs: add good-first-issue label and newcomer section to CONTRIBUTING.md by @​MD-Mushfiqur123 in #868
• docs: add knuckle landing page and quick-start guide by @​kubestellar-hive in #866
• 🔍 fix(renovate): remove automergeType and fix invalid regex patterns by @​kubestellar-hive in #863
• 🔍 docs: replace deprecated rl alias with ramalama command by @​kubestellar-hive in #862
• 🔍 docs: add CONTRIBUTING.md (fixes #851) by @​kubestellar-hive in #855
• docs(ai): document Docker Model Runner (fixes #436) by @​kubestellar-hive in #858
• docs(contributing): link empty Architecture section to diagram below by @​kubestellar-hive in #854
• feat(blog): add Giscus comments to blog posts by @​castrojo in #848
• docs(blog): add post Gradia Capture Comes to Bluefin by @​coxde in #847
• Add ublue-os to the rebase command by @​jumpyvi in #845
• docs(contributing): removed GTS release channel from release channels section by @​davicbtoliveira in #844
• fix(sbom): patch tag:cacheKey on cache hits by @​castrojo in #842
• fix(sbom): restore usesLatestTag:true for Dakota specs by @​castrojo in #839
• fix(sbom): fetch last 10 releases for Dakota history by @​castrojo in #838
• fix(downloads-testing): add #dakotaraptor anchor for blog deep link by @​castrojo in #837
• feat(blog): publish Making Our Own Fate — Dakota Alpha 2 by @​castrojo in #835
• feat(downloads-testing): add Dakota Alpha 2 ISOs to download page by @​castrojo in #834
• fix(blog): spring 2026 part 2 formatting fixes by @​castrojo in #833
• fix(blog): render HTML links in DocsFeatureGrid body prop by @​castrojo in #832
• fix(blog): add discussion thread link to hummingbird post by @​castrojo in #831
• fix(series): update hummingbird slug and title, mark parts 2+3 published by @​castrojo in #830
• docs(agents): update worktrees table and blog publishing troubleshooting by @​castrojo in #829
• blog: spring 2026 — remaining components and styles by @​castrojo in #826
• blog: publish hummingbird (spring 2026 part 3) by @​castrojo in #827
• blog: publish spring 2026 part 2 and hummingbird by @​castrojo in #823
• fix(blog): fix alateira typo → alatiera, add discussion link #4607 by @​castrojo in #821
• fix(changelogs): remove text OS app cards, keep graphical OsReleaseCa… by @​castrojo in #814
• fix(changelogs): remove OS release cards from Updates Stream; fix Dak… by @​castrojo in #813
• feat(changelogs,images): wire Dakota into changelogs stream and fix i… by @​castrojo in #812
• fix(reports): correctly identify 11 new April contributors by @​castrojo in #774
• fix(cards): wire dakota SBOM enrichment and invalidate card cache on SBOM change by @​castrojo in #810
• fix(images): remove ARM from Bluefin supported architectures by @​castrojo in #803
• Audit: security hardening, perf fix, strict TS, testing, dead code removal by @​castrojo in #784
• feat(pin-indicators): show 📌 Pinned badge for intentionally-held component versions by @​castrojo in #780
• fix(images): polish card UI and fix Last Published date by @​castrojo in #775
• Feature/blog bluefin announcement by @​castrojo in #782
• Feature/downloads design by @​castrojo in #801
• docs(nav): reorganize sidebar into logical sections by @​castrojo in #800
• fix(test): use relative URLs in artwork HTTP tests for baseURL portability by @​castrojo in #799
• fix: regenerate bluefin-lazy-days thumbnail to 16:9 (480×270) by @​castrojo in #798
• fix(test): wait for hero image decode before reading naturalWidth by @​castrojo in #797
• fix(artwork): regenerate bluefin-xe thumbnails at 16:9 aspect ratio by @​castrojo in #796
• fix(sbom): remove dakota cosign-sign workaround — SLSA attestation live by @​castrojo in #795
• fix(images): source last-published date from SBOM checkedAt by @​castrojo in #794
• arch: add SBOM adapter layer and release-list emitter by @​castrojo in #789
• refactor: extract helpers and lazy-load feeds in FirehoseFeed by @​castrojo in #792
• refactor: rewrite FeedItems.tsx to consume SBOM data directly by @​castrojo in #791
• perf: cache card images based on SBOM content hash by @​castrojo in #790
• refactor: decompose fetch-github-sbom.js into focused modules by @​castrojo in #788
• refactor: extract shared request-queue module from fetch scripts by @​castrojo in #787
• refactor: decompose ArtworkGallery.tsx into focused subcomponents by @​castrojo in #786
• chore: upgrade Docusaurus 3.9.2 → 3.10.1 by @​castrojo in #785
• docs(blog): update f44/dakota-alpha-2 announcement draft by @​castrojo in #783
• docs: rename Bluefin LTS section to LTS and GDX by @​castrojo in #777
• reports: improve categorization and add ublue-os/artwork to monitoring by @​castrojo in #773
• Fix/report merged at graphql by @​castrojo in #772
• docs: fix README base image reference by @​hanthor in #80
• docs: fix README base image reference and line number by @​hanthor in #79
• docs: add flatpak/brew troubleshooting section (fixes #30, #44, #49) by @​hanthor in #82

Dakota (GNOME OS Prototype)​

• docs: add actionable fix notes (fixes #180 #501 #503 #524 #527 #536 #603 #606) by @​hanthor in #607
• docs(agents): define /lab slash commands, restrict to maintainers/wranglers by @​castrojo in #604
• docs: add 20 community skills to .github/skills/, slim AGENTS.md to pointer file by @​castrojo in #572
• docs: trim AGENTS.md by 51%, tighten skills for token efficiency by @​castrojo in #570
• docs(readme,motd): rewrite readme around feedback loop, overhaul motd by @​castrojo in #560
• feat: built-in feedback loop — boot-test, actionadon commands, architecture doc by @​castrojo in #534
• docs(AGENTS.md): fix content gaps from gap analysis by @​castrojo in #508
• docs: add AGENTS.md for contributor and agent guidance by @​castrojo in #507

Tech Debt​

Maintenance work and feature parity between variants

Planned Work​

• chore: remove unused dracut config by @​renner0e in #381

Opportunistic Work​

• chore: remove uupd override by @​Lumaeris in #4579

Automation​

CI/CD pipelines, GitHub Actions, and automated dependency updates

Planned Work​

Status: ChillOps

Opportunistic Work​

• ci: fix permissions for Build All Images workflow by @​dylanmtaylor in #4557
• ci: replace deprecated Node.js 20 actions by @​dylanmtaylor in #4558
• ci: fix release race condition + add squash-merge guard by @​castrojo in #1331
• ci: fix race condition — wait for build before generating release by @​castrojo in #1316

Localization​

Translation and internationalization work

Planned Work​

Status: ChillOps

Opportunistic Work​

• 🔍 feat(i18n): enable Docusaurus i18n with en/de/fr locales by @​kubestellar-hive in #869

Bot Activity​

Automation Percentage: 53.4% (332 bot PRs out of 622 total PRs)

Build Health​

Raptor Race​

Keep Bluefin healthy with green builds. Wranglers apply within!

Image	Success Rate	Successes	Failures	Monthly Change
bluefin:stable	76%	190	60
bluefin:latest	84.3%	204	38
bluefin:lts	46.3%	119	138
bluefin:lts-hwe	45.4%	118	142
bluefin-dx:lts	45.9%	118	139
bluefin-gdx:lts	46.1%	119	139
bluefin-dx:lts-hwe	46.3%	120	139

This Month's Highlights​

Contributors​

New Lights​

We welcome our newest Guardians to the project.

"I do not know what the future holds. But I know this: with you at our side, there is nothing we cannot face."

—Commander Zavala

Wayfinders​

"Define yourself by your actions."

—Lord Saladin

Want to see the latest OS releases? Check out the Changelogs. For announcements and deep dives, read our Blog.

This report was automatically generated from todo.projectbluefin.io.

Generated on 2026-06-01
View Project Board | Report an Issue

Desktop​

GNOME desktop environment, Aurora variant (KDE), and terminal enhancements

Planned Work​

• revert: switch back to LogoMenu from Custom Command Menu by @​dylanmtaylor in #294
• feat: enable GNOME Calculator search provider by default by @​dylanmtaylor in #263
• fix(gschema): xdg-terminal-exec for terminal keyboard shortcuts by @​hanthor in #265
• feat(ublue-bling): clean up fish script by @​AlexNPavel in #291
• feat: use dynamic hostname in menu label by @​dylanmtaylor in #272
• feat: replace LogoMenu with Custom Command Menu extension by @​dylanmtaylor in #264

Opportunistic Work​

• fix: exclude gnome-software on all Fedora versions by @​dylanmtaylor in #4504
• chore: bump gsconnect from v67 to v71 by @​dylanmtaylor in #4414
• chore: bump gsconnect from v67 to v71 by @​dylanmtaylor in #4413
• fix: Change GNOME 50 COPR repository to jreilly1821/c10s-gnome-50 by @​hanthor in #1287
• fix(gnome49): exclude gdk-pixbuf2 from COPR and rebuild cache by @​ahmedadan in #1285
• feat: install lgda from GNOME 49/50 COPRs by @​hanthor in #1276
• feat(lazy-days): add lazy.jxl to bluefin-wallpapers-extra by @​castrojo in #86
• Add lazy days wallpaper by @​delphicmelody in #84
• feat: add Aurora Skywrecker wallpaper by @​inffy in #83
• feat(bluefin-extra): add leaf-collector, duality, and eyes wallpapers… by @​castrojo in #82
• Add duality super-ultrawide files by @​delphicmelody in #80
• Refine and correct Eyes wallpaper by @​delphicmelody in #79
• Rename Eyes wallpaper for consistency by @​delphicmelody in #78
• Add Eyes wallpaper by @​delphicmelody in #77
• fix: convert wallpapers to jxl to fix issues in wallpaper settings by @​NiHaiden in #76
• fix(wallpapers): add os stanza so brew bundle installs casks on linux by @​ahmedadan in #371
• fix(bluefin-wallpapers): fix disappearing wallpapers by @​castrojo in #351
• feat(bluefin-wallpapers-extra): update to 2026-04-13 by @​castrojo in #347
• feat(artwork): sync new Bluefin extra wallpapers + fix update-artwork… by @​castrojo in #753
• fix(artwork): add Delphic Melody co-author credit to Dr. Natalia wallpapers by @​castrojo in #734

Dakota (GNOME OS Prototype)​

• feat: add Bazaar Companion extension by @​coxde in #348
• Add nautilus python by @​jumpyvi in #336
• fix(keybindings): use xdg-terminal-exec instead of ptyxis by @​castrojo in #280
• fix(bashrc): add login_shell guard to profile.d sourcing by @​castrojo in #278
• fix(os-release): add VERSION_ID to fix ldconfig stamp mechanism by @​castrojo in #269
• fix: custom-command-menu shows Hello World on fresh install by @​castrojo in #268
• fix: remove gnome-system-monitor from image by @​dylanmtaylor in #222
• fix: remove yelp from image by @​dylanmtaylor in #223
• fix(common): map Bluefin icons to GNOME OS expected names by @​dylanmtaylor in #219
• fix(custom-command-menu): install gschema to system dir for override support by @​dylanmtaylor in #220
• chore: Update custom command menu references by @​dylanmtaylor in #218
• feat(packages): add xdg-terminal-exec by @​castrojo in #213
• feat(extensions): replace LogoMenu with Custom Command Menu by @​castrojo in #210
• feat(gnome): rebase gnome-build-meta junction to gnome-50 by @​castrojo in #199
• fix(ci): disable broken GNOME lorry-mirrors by @​dylanmtaylor in #190
• feat(ghostty): upgrade Ghostty to 1.3.1 and Zig to 0.15.2 by @​ahmedadan in #169

Development​

Development tools and IDE integrations

Planned Work​

Status: ChillOps

Opportunistic Work​

• Fix dockerd deps by @​jumpyvi in #305
• feat(lts-card): enrich DX/GDX packages from SBOM allPackages by @​castrojo in #760

Dakota (GNOME OS Prototype)​

• Update to the latest bst2 docker image by @​alatiera in #350

Homebrew​

New Applications​

The following applications were added to our Homebrew taps this month:

Application	Description	Status
asusctl-linux	ASUS laptop control CLI and immutable-friendly system daemon payload
fw-fanctrl-linux	Framework laptop fan controller daemon and CLI
rocm-smi-lib	AMD ROCm System Management Interface library (provides librocm_smi64.so)
rog-control-center-linux	ASUS ROG Control Center GUI and user daemon with XDG-first installation
visual-studio-code-linux@insiders	Open-source code editor (Insiders build)
zed-linux	High-performance, multiplayer code editor
zed-linux@preview	High-performance, multiplayer code editor (preview build)

Use ujust bbrew to browse and install these packages. Follow the tap instructions if you want to do it by hand.

Package Updates​

103 automated updates this month via GitHub Actions. Homebrew tap version bumps ensure Bluefin users always have access to the latest stable releases.

Quick Summary​

Ecosystem​

Homebrew packages, AI/ML tools (Bluespeed), and Flatpak applications

Planned Work​

• feat(bazaar): add SpeedOfSound to AI and Machine Learning section by @​repires in #286

Opportunistic Work​

• feat: move rog-gui to production by @​inffy in #378
• chore: move asusctl cask to production tap by @​inffy in #369
• set_permissions to make zpass.sh executable by @​hulet in #342
• feat: add visual-studio-code-linux@insiders cask by @​nklowns in #337
• Fix 1password browser integration https://github.com/ublue-os/homebrew-tap/issues/94 by @​RichardMartija in #296
• chore: move rog-gui to production by @​inffy in #348
• Add incompatibility with moby by @​jumpyvi in #319
• feat(zed): add zed-linux and zed-linux@preview casks by @​castrojo in #296
• Add rocm-smi-lib formula by @​hanthor in #326
• chore: remove asusctl cask by @​inffy in #333
• feat: add fw-fanctrl-linux cask by @​ahmedadan in #314
• fix: unblock craft-agents-linux upgrade process by @​KiKaraage in #259

Dakota (GNOME OS Prototype)​

• feat(distrobox): switch to next branch Go rewrite by @​castrojo in #234

System Services & Policies​

Systemd services and system-level policies

Planned Work​

• fix(custom-command-menu): add menu icon settings to dconf distro database by @​dylanmtaylor in #274
• feat(nvidia): add service to sync Flatpak driver version by @​ledif in #257

Opportunistic Work​

Dakota (GNOME OS Prototype)​

• Increace keepalive timeout by @​alatiera in #356
• fix(tailscale): provide defaults for tailscaled service by @​goozkan in #327
• fix(bluefin/network): disable binary stripping for text-only element by @​castrojo in #329
• fix(network): remove %{install-extra} from text-only element by @​castrojo in #328
• fix: ship resolv.conf symlink and /etc/hosts via network element by @​hanthor in #296
• feat(bluefin): add uupd auto-updater element by @​castrojo in #209
• tailscale: bump to 1.96.4 by @​hanthor in #175

Hardware​

Hardware support, drivers, NVIDIA GPU, and ARM64 architecture

Planned Work​

• Remove carriage returns in ublue-nvidia-flatpak-runtime-sync script that cause it to fail by @​akeeton in #279

Opportunistic Work​

• fix(cards): restore foil prevVersion and LTS HWE kernel carry-forward by @​castrojo in #761
• fix(ci): always re-fetch driver versions data on every build by @​castrojo in #701
• fix(driver-versions): make shimmer visible in light mode by @​castrojo in #700

Dakota (GNOME OS Prototype)​

• feat(nvidia): add bluefin-nvidia OCI variant by @​ahmedadan in #363
• fix(deps): restore fwupd dropped by Saturn merge by @​castrojo in #324
• fix(deps): add fwupd by @​castrojo in #279
• patches: remove OnePlus 6 panel backports by @​castrojo in #260
• feat(deps): add efibootmgr 18 by @​dylanmtaylor in #163

Infrastructure​

ISO images, upstream integration, build systems, and testing frameworks

Planned Work​

• chore: put the nvidia files to the image by @​inffy in #259

Opportunistic Work​

• fix(ci): make caching actually work by @​renner0e in #4440
• ci: replace extractions/setup-just with brew install by @​dylanmtaylor in #4418
• feat: replace cosign-attest SBOM with ORAS attach + actions/attest by @​castrojo in #1258
• cursor-linux: update sha256 for re-uploaded 3.2.11 build by @​ahmedadan in #336
• ci: add fw-fanctrl build workflow by @​ahmedadan in #311
• ci: rebuild site daily instead of weekly by @​castrojo in #770
• fix(ci): align SBOM cache save/restore paths by @​castrojo in #758
• fix(ci): restore artwork.json from checkout after data cache restore by @​castrojo in #751
• feat(sbom): add stable-daily GHCR stream to SBOM pipeline and changelogs by @​castrojo in #744
• fix(images): force per-product refresh on every build by @​castrojo in #726
• fix(reports): contributor pipeline correctness and workflow idempotency by @​castrojo in #722
• Upstream pr/batch remaining fixes by @​castrojo in #714
• fix(components,scripts,ci): p2 component and script fixes by @​castrojo in #713
• fix(ci,images,changelogs): least-privilege tokens, correct stream att… by @​castrojo in #710
• fix(firehose): always fetch fresh app data in CI by @​castrojo in #703
• ci(prerelease): publish release even when arm64 builds fail by @​castrojo in #47

Dakota (GNOME OS Prototype)​

• fix(deps): use codeberg closer-mop repo by @​AlexNPavel in #357
• workflows/track-bst-sources: Also update bst2 image by @​alatiera in #351
• Revert "chore(deps): update freedesktop-sdk junction" by @​alatiera in #349
• fix(custom-menu): set icon display mode and repin to post-v14 cleanup commit by @​castrojo in #345
• fix(ci): unblock bst2 CI and add pin consistency gate by @​castrojo in #337
• fix(ci): replace broken setup-just with taiki-e/install-action by @​castrojo in #335
• fix(storage): hide composefs loop from UDisks by @​goozkan in #330
• Update command-order to be 1-99 by @​StorageB in #332
• linux: enable IPV6_MULTIPLE_TABLES for tailscaled IPv6 routing by @​hanthor in #315
• fix(renovate): include sha256: prefix in chunkah currentDigest capture by @​castrojo in #323
• chore(renovate): add customManager for chunkah container image by @​castrojo in #322
• chore(coreutils): revert mv, cp, rm to gnu coreutils by @​ahmedadan in #316
• fix(ci): suppress phantom PRs when bst source track only normalizes r… by @​castrojo in #317
• fix(chunkify): remove --tag flag not supported by pinned chunkah by @​castrojo in #309
• fix(fakecap-restore): treat EPERM/ENOTSUP as skips, not errors by @​castrojo in #308
• fix(chunkify): add --tag so podman load outputs tagged ref by @​castrojo in #307
• feat(chunkify): rechunk OCI image into plain-zstd layers with automat… by @​castrojo in #305
• chore: bump uutils-coreutils to 0.8.0 and sudo-rs to v0.2.13 by @​castrojo in #282
• fix(ci): disable arm build until webkit is cached by @​castrojo in #297
• feat(saturn): add Saturn launcher with ECL, CL deps, ripgrep by @​castrojo in #295
• feat(ci): track package updates individually by @​castrojo in #283
• fix: inject IMAGE_VERSION into os-release at export time by @​castrojo in #273
• fix(os-release): inject VERSION_ID at export time, remove invalid BST… by @​castrojo in #271
• fix(os-release): add IMAGE_REF and image metadata to /usr/lib/os-release by @​castrojo in #266
• fix: remove ibus-libpinyin from build (broken at runtime, SIGILL in CI) by @​castrojo in #265
• oci: normalize /var layout with relative symlinks by @​castrojo in #263
• ci: increase build step timeouts from 300 to 420 minutes by @​castrojo in #262
• ci: disable remote-execution for aarch64 build by @​castrojo in #258
• feat: add aarch64 native build by @​hanthor in #248
• revert: "chunkify: enable in export and reduce max-layers to 120" by @​castrojo in #252
• chunkify: enable in export and reduce max-layers to 120 by @​hanthor in #246
• fix(bootc): revert composefs-rs cargo2 query.rev to abbreviated hash by @​castrojo in #236
• feat(deps): add bootc v1.15.1 local override with CI tracking by @​castrojo in #235
• chunkah: rechunk with user.component xattrs via extended fakecap by @​hanthor in #232
• ci: add nightly schedule at 13:00 UTC; drop redundant push trigger by @​castrojo in #227
• chore: bump common refs by @​dylanmtaylor in #221
• revert: "fix(chunkify): enable chunkify with updated settings" by @​castrojo in #217
• fix(chunkify): enable chunkify with updated settings by @​castrojo in #212
• Remove 1Password by @​dylanmtaylor in #206
• bluefin: Consolidate per-arch elements by @​alatiera in #101
• Revert "chore(deps): track core and junction sources" by @​alatiera in #147

Documentation​

Documentation improvements and additions

Planned Work​

Status: ChillOps

Opportunistic Work​

• docs: remove GTS badges from README by @​repires in #4474
• fix(readme): use picture element for dark/light mode card embed by @​castrojo in #4466
• chore: delete docs directory by @​hanthor in #1250
• blog: add video embed to Dakota Alpha 1 post by @​castrojo in #766
• Update 2026-04-19-dakota-alpha-1.md by @​castrojo in #764
• fix: use object-fit cover on playlist thumbnails to eliminate letterboxing by @​castrojo in #763
• feat(music): add Syrens of Metal playlist as first in Legendary Adventures by @​castrojo in #762
• fix(lts): parse new lts.YYYYMMDD release format by @​castrojo in #759
• fix(sbom): fix GHCR tag pagination regex — \b fails after closing quote by @​castrojo in #757
• fix(sbom): parse SPDX JSON format for LTS changelog card version chips by @​castrojo in #756
• fix(artwork): remove duplicate Duality (Ultrawide) entry by @​castrojo in #754
• feat(changelogs): rolling 12-month window for updates stream by @​castrojo in #750
• feat(changelogs): show all apps by default; click header to expand card by @​castrojo in #749
• feat(changelogs): collapse app cards by default in updates stream by @​castrojo in #748
• fix(embed): use picture element for dark/light mode card snippet by @​castrojo in #747
• fix(lint): remove unused chipName destructuring in loadStableDailyEve… by @​castrojo in #746
• fix(changelogs): SBOM null-fallback, GHCR tag enumeration, cache key … by @​castrojo in #743
• fix(sbom): SBOM-primary chips + resolve amd64 digest for oras discover by @​castrojo in #742
• feat(changelogs): add embeddable PNG cards with dark/light themes and… by @​castrojo in #741
• fix(images): make downloads optional to prevent crash when field abse… by @​castrojo in #740
• feat(changelogs,ui): SBOM-driven chips, Dakota placeholder, pipewire/… by @​castrojo in #739
• feat(changelogs,ui): SBOM-driven chips, Dakota placeholder, pipewire/… by @​castrojo in #738
• feat(changelogs): SBOM-driven OS card chips — Dakota placeholder + pi… by @​castrojo in #737
• feat(changelogs): unified OS releases stream with stable-daily, LTS, … by @​castrojo in #736
• bugfix(docs): preserve homepage hero aspect ratio by @​castrojo in #735
• fix(docs): replace hero PNGs with WebP, add trailingSlash, add perf t… by @​castrojo in #733
• Feature/artwork gallery page by @​castrojo in #732
• Feature/artwork gallery page by @​castrojo in #731
• feat(docs): add Artwork gallery page with wallpapers, lightbox, and a… by @​castrojo in #728
• fix(images): remove Metadata cache chip from images page by @​castrojo in #724
• feat: add link to upstream docs about MOK enrollment by @​sebjag in #720
• fix(reports): replace history query with GHA cache for new contributo… by @​castrojo in #723
• feat: quick update by @​castrojo in #719
• fix(eslint): remove unused FlatTimelineEvent import by @​castrojo in #717
• feat(changelogs): OS release card design polish by @​castrojo in #716
• feat(changelogs): add prominent OS release cards interleaved in timeline by @​castrojo in #715
• fix(sbom): enforce sbom-only version sources across docs site by @​castrojo in #712
• fix(sbom): enforce sbom-only version sources across docs surfaces by @​castrojo in #711
• fix(firehose): seed firehose-apps.json with empty data; atomic write … by @​castrojo in #709
• fix(audit): quick-win fixes from site-wide audit by @​castrojo in #708
• feat(changelogs): add Firehose page with per-release package diffs by @​castrojo in #707
• fix(changelogs): flatten firehose feed into per-release event stream … by @​castrojo in #706
• feat(changelogs): add hero section with dinosaur and Firehose title by @​castrojo in #704
• feat(changelogs): port Bluefin Firehose to /changelogs page by @​castrojo in #702
• fix: remove a bunch of dead code by @​castrojo in #699

Dakota (GNOME OS Prototype)​

• docs: add ISO archive table and automation workflow by @​castrojo in #253

Tech Debt​

Maintenance work and feature parity between variants

Status: ChillOps

Automation​

CI/CD pipelines, GitHub Actions, and automated dependency updates

Planned Work​

• chore(ci): enable renovate for git-submodules by @​renner0e in #295

Opportunistic Work​

• fix: disable automerge for projectbluefin/common container updates by @​castrojo in #4481
• ci: replace wretry.action with nick-fields/retry (Node 24) by @​dylanmtaylor in #4408
• feat(ci): make betas run daily by @​castrojo in #4388
• Feature/fix generate release trigger by @​castrojo in #1301

Localization​

Translation and internationalization work

Status: ChillOps

Bot Activity​

Automation Percentage: 62.3% (308 bot PRs out of 494 total PRs)