Gunnar

nordisk/gunnar

Newest commits

b68b11765ac0Merge slsa3/dwarves-server-builder into master (lane SLSA3): the release provenance's builder is dwarves, the build server. Docs only: no code, no lock change2026-10-29
576cb0141025SLSA: the builder is dwarves, the build server (lane SLSA3; owner 2026-10-29). docs/SLSA.md and the README name the dwarves server's builder id and the dwarves release-build commands. Docs only2026-10-29
e335a36a3746Merge badge1/version-1.5.1 into master (lane BADGE-1): workspace version 1.5.1, the newest tag v1.5.1; locks and README follow. Gate on the merged tree (ci4, dwarf): version_matches_tag 2/0, lock_current 4/0, readme_version 5/0, one_clone, publishable, publish_order, cargo_install_gunnar green; nornir docs check ok2026-10-29
53b77b518138release: workspace version 1.5.1, the newest tag (BADGE-1)2026-10-29
a8213b56be67Merge badge-docs/2026-10-29 into master (lane BADGE-DOCS): SECURITY.md, CONTRIBUTING.md, CLA.md (draft, pending the owners' legal review), CHANGELOG.md (1.5.1, 1.5.0, Unreleased; from .nornir/CHANGELOG.md), README with the anonymous clone URL and the three links2026-10-29
d6048697305adocs: README names the anonymous clone URL and links SECURITY, CONTRIBUTING and CHANGELOG2026-10-29
b5a6c5cf90a0docs: CHANGELOG.md, one section per crates.io version (1.5.1, 1.5.0) and Unreleased2026-10-29
f8177319bf5edocs: CONTRIBUTING.md and CLA.md (draft, pending the owners' legal review)2026-10-29
bd20e1ace9f8docs: SECURITY.md, how to report a vulnerability privately (gunnar@gunnar.rs)2026-10-29
72b99016b83dMerge slsa3/release-provenance-docs into master (lane SLSA3): docs/SLSA.md (Build L3, the dwarf builder, how to verify, the gaps), slsa/ for the owner's release key, attestations/. Docs only: no code, no lock change2026-10-29
83b812f22707docs/SLSA.md: Gunnar's releases at SLSA Build L3, the builder, how to verify, the gaps (lane SLSA3)2026-10-29
34493f5c35a7Merge ox-postpub/follow-2026-10-29 into master (lane OX-POSTPUB): root on monetize-proto 0.3.3 (crates.io); gunnar-front on estate-front 0.3.0; gunnar-front and gunnar-monetize-guest locks follow the siblings; xtask/guards on nornir-xtask-support 0.1.6 and the seven boot spawns it now sees say why they stay. Gate on the merged tree (ci4, dwarf): lockcheck green (10 locks), cargo xtask lone-clone green, xtask tests green (lock_current, lone_clone, one_clone, the_monetize_line, there_is_one_identity_implementation) but for master's own cycle_svg citation red (gunnar-store secret.rs:134), gunnar-server 802/0 (clans_r2 index-in-progress flake green alone 3/0), gunnar-repair 41/0, gunnar-front metered 139/0, gunnar-monetize-guest wasm build --locked, guards 1/02026-10-29
9beb3e99ab96gunnar-server serve.rs: the seven boot spawns after the test modules say why they stay (A32-14). nornir-xtask-support 0.1.6's spawn guard reads past the first #[cfg(test)] mod (edda RA5-35), so xtask/guards spawn_reasons was red on 426b9e22; comments only (lane OX-POSTPUB)2026-10-29
426b9e22431fxtask/guards lock: nornir-xtask-support 0.1.6 from crates.io (lane OX-POSTPUB)2026-10-29
350e733653c8gunnar-front: estate-front "0.3.0" (edda main 83f18e5, crates.io 0.3.0); the path locks follow the siblings: gunnar-front (estate-front 0.3.0, monetize-proto 0.3.3), gunnar-monetize-guest (monetize-proto 0.3.3) (lockfollow) (lane OX-POSTPUB)2026-10-29
49097ada8d3droot lock: monetize-proto 0.3.3 from crates.io (cargo update -p monetize-proto; owner publish 2026-10-29) (lane OX-POSTPUB)2026-10-29
776554a11d6dMerge ox-follow/zstd-0.14.3 into master (lane OX-FOLLOW): bench, installtest and gunnar-growbench locks clear the zstd advisories and the yanked chacha202026-10-28
b5ccf9222b93Lock follow: bench, installtest and gunnar-growbench take zstd 0.14.3 and chacha20 0.10.2 (lane OX-FOLLOW)2026-10-28
3d9aaf246f1cMerge ox-cve/advisories into master (lane OX-CVE): the cve step's 8 advisories cleared, the listener_bounds load flake fixed2026-10-28
04263b06a525Merge remote-tracking branch 'origin/master' into ox-cve/advisories2026-10-28