promote: main → lts - #7
Draft
github-actions[bot] wants to merge 92 commits into
Draft
Conversation
…est to c2dba5f (ublue-os#1182) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `226b06f` → `c2dba5f` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…e-os#1183) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) ([changelog](https://redirect.github.com/actions/download-artifact/compare/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3..3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)) | action | digest | `70fc10c` → `3e5f45b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42NC4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 08420c1 (ublue-os#1181) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | cgr.dev/chainguard/wolfi-base | container | digest | `00f9662` → `08420c1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled because a matching PR was automerged previously. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42MC42IiwidXBkYXRlZEluVmVyIjoiNDMuNjAuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 69e0d5c (ublue-os#1174) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/projectbluefin/common | digest | `b9a75b6` → `69e0d5c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42MC4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjAuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to a9a3a0c (ublue-os#1184) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | cgr.dev/chainguard/wolfi-base | container | digest | `08420c1` → `a9a3a0c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42NS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 9409d0c (ublue-os#1186) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/projectbluefin/common | digest | `69e0d5c` → `9409d0c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 2a43204 (ublue-os#1188) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | cgr.dev/chainguard/wolfi-base | container | digest | `a9a3a0c` → `2a43204` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…8b47 (ublue-os#1189) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/ublue-os/brew | digest | `2eca44f` → `fef8b47` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43NC4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…rch-light@icedman.github.com digest to e4ad180 (ublue-os#1190) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/search-light@icedman.github.com](https://redirect.github.com/icedman/search-light.git) ([changelog](https://redirect.github.com/icedman/search-light.git/compare/2070cd42271eae5aebe64045ec9cbbe8a10b74e6..e4ad180171c146f851da72ae13b7e5d1f1d056b1)) | digest | `2070cd4` → `e4ad180` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43NS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…est to ff6f31c (ublue-os#1185) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `c2dba5f` → `ff6f31c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni41IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…est to b10c380 (ublue-os#1191) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `ff6f31c` → `b10c380` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNzYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…rch-light@icedman.github.com digest to 4e93e0e (ublue-os#1193) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/search-light@icedman.github.com](https://redirect.github.com/icedman/search-light.git) ([changelog](https://redirect.github.com/icedman/search-light.git/compare/e4ad180171c146f851da72ae13b7e5d1f1d056b1..4e93e0e3e2fba8512dfd588177b7a6a2a71c9f1e)) | digest | `e4ad180` → `4e93e0e` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…est to 7b1e3d1 (ublue-os#1194) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `b10c380` → `7b1e3d1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny4xIiwidXBkYXRlZEluVmVyIjoiNDMuNzcuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Ok I think I got it this time, I can confirm this works via testing in my personal repo. I am likely going to force this because we need the action in the LTS branch anyway. ## Agent Notes follow: ## Solution Replace with `create-lts-pr.yml`, a PR-gate workflow: - Fires on every push to `main` (and `workflow_dispatch`) - Uses `git diff --quiet` (content diff, not commit graph) to detect new content — survives squash-merges without false positives - Passes the commit list as a `COMMIT_LIST` env var and uses `printf` to build the PR body, safely handling commit messages containing double quotes (e.g. `Revert "..."`) - Auto-creates a draft PR from `main` → `lts`, or updates the existing one - Maintainer squash-merges the PR as the human approval gate - No pre-flight check: branch protection is the guard against direct `lts` commits Also fixes `AGENTS.md`: corrects the release schedule (cron `0 6 * * 2` = Tuesday 6am UTC, not Sunday 2am UTC) and updates all references to the old workflow. ## Testing Tested on the `castrojo/bluefin-lts` fork: - ✅ Workflow fires on push and creates draft PR correctly - ✅ PR body auto-updates on subsequent pushes without creating duplicate PRs - ✅ Commit messages with double quotes handled safely (the `Revert "..."` case) - ✅ Force-push after squash: workflow correctly updates existing PR Assisted-by: Claude Sonnet 4.6 via GitHub Copilot Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…ue-os#1197) ... and of course I messed it up, one more. :) ## Solution Find the most-recent commit on `main` whose tree hash matches the current `lts` tree. Since squash-merges preserve content exactly, this is always the `main` commit that was squash-merged into `lts`. `git log` is anchored from that point, showing only genuinely new commits regardless of squash-merge history. If no match is found within 500 commits (first-ever promotion), falls back to `git diff --name-status`. ## Also fixed - Removed `|| true` from `gh pr edit` — failures now surface visibly instead of silently leaving the PR body stale - Added guard: if `git diff` detects a difference but `origin/lts..origin/main` is empty (lts is ahead/diverged), skip rather than open a misleading empty PR Addresses Copilot review comments from ublue-os#1195. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Assisted-by: Claude Sonnet 4.6 via GitHub Copilot Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
## Commits pending promotion to `lts` a764cfc fix(ci): use tree-hash anchor for accurate promotion commit list (ublue-os#1197) 6462f99 ci(promote): replace push-based promotion with PR gate (ublue-os#1195) dd4152f chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to 7b1e3d1 (ublue-os#1194) 1658526 chore(deps): update system_files/usr/share/gnome-shell/extensions/search-light@icedman.github.com digest to 4e93e0e (ublue-os#1193) aa14da4 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to b10c380 (ublue-os#1191) 1ff0c7e Revert "feat(GNOME) : gnome 49 backport" (ublue-os#1192) 18bb989 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to ff6f31c (ublue-os#1185) 24765e4 feat(GNOME) : gnome 49 backport (ublue-os#1187) bc65f2a chore(deps): update system_files/usr/share/gnome-shell/extensions/search-light@icedman.github.com digest to e4ad180 (ublue-os#1190) 914432d chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to fef8b47 (ublue-os#1189) 1339bc4 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 2a43204 (ublue-os#1188) 4e13431 chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 9409d0c (ublue-os#1186) 6a0ad87 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to a9a3a0c (ublue-os#1184) 8e1c75f chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 69e0d5c (ublue-os#1174) 90132e8 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 08420c1 (ublue-os#1181) b23f809 chore(deps): update actions/download-artifact digest to 3e5f45b (ublue-os#1183) 13f9b46 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to c2dba5f (ublue-os#1182) 7316e19 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 00f9662 (ublue-os#1156) --- _Squash-merge this PR to promote. The PR body updates automatically as `main` advances._ --------- Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com> Co-authored-by: James Reilly <jreilly1821@gmail.com> Co-authored-by: Jorge O. Castro <jorge.castro@gmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…est to 54b49be (ublue-os#1198) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `7b1e3d1` → `54b49be` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny44IiwidXBkYXRlZEluVmVyIjoiNDMuNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…-os#1201) ## Problem PR ublue-os#1199 showed **19 commits and 6 changed files** when only **1 commit** (d151470) was genuinely new. The PR was unmergeable (`mergeable_state: dirty`). **Root cause:** Squash-merge of PR ublue-os#1196 created an orphan commit on `lts` that Git cannot trace back to any `main` commit. This permanently froze the merge base at `ff85922`, causing GitHub to compute the PR diff from that ancient point — including all historical commits in every future promotion PR. This problem **compounds over time** — each squash-merge adds another orphan, and the commit/diff bloat grows without bound. ## Solution Switch promotion PRs from squash-merge to **regular merge** (Create a merge commit). Regular merge creates a commit with two parents, advancing the merge base so future PRs only contain genuinely new commits. **Verified locally:** | Strategy | After 1 cycle | After 2 cycles | After N cycles | |---|---|---|---| | Squash merge | 1 commit ✅ | 2 commits ❌ | N commits (grows forever) ❌ | | Regular merge | 1 commit ✅ | 1 commit ✅ | 1 commit ✅ | ## Changes - **`create-lts-pr.yml`**: Simplified commit list logic — use `git log lts..main` directly (the tree-hash anchor workaround is no longer needed). Updated PR body to instruct maintainers to merge, not squash. - **`AGENTS.md`**: Documented that promotion PRs must use regular merge, with explicit warning against squash-merge. ## Pre-requisite (already done) The merge base was repaired by merging `main` into `lts` with a regular merge commit (`d5a0149`). Current state: merge base = `d151470`, zero content diff, identical trees. PR ublue-os#1199 should be closed. Assisted-by: Claude Opus 4.6 via GitHub Copilot Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…/caffeine digest to 2fafa49 (ublue-os#1200) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/tmp/caffeine](https://redirect.github.com/eonpatapon/gnome-shell-extension-caffeine.git) ([changelog](https://redirect.github.com/eonpatapon/gnome-shell-extension-caffeine.git/compare/873a1b03cd4e0eeda2932e02d9b9d72a4d47f6a7..2fafa49faa13e3507409b862a5c75c9d4c86de03)) | digest | `873a1b0` → `2fafa49` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny44IiwidXBkYXRlZEluVmVyIjoiNDMuNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 550e0d6 (ublue-os#1203) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | cgr.dev/chainguard/wolfi-base | container | digest | `2a43204` → `550e0d6` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny44IiwidXBkYXRlZEluVmVyIjoiNDMuNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…est to 56d49d1 (ublue-os#1204) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `54b49be` → `56d49d1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43OC4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzguMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…indicatorsupport@rgcjonas.gmail.com digest to 5f21a79 (ublue-os#1205) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/appindicatorsupport@rgcjonas.gmail.com](https://redirect.github.com/ubuntu/gnome-shell-extension-appindicator.git) ([changelog](https://redirect.github.com/ubuntu/gnome-shell-extension-appindicator.git/compare/be68add0382b1ee19eb8e851464e3a3ac6900c6a..5f21a790e20537681c51670cbfe2a5f2688cca2e)) | digest | `be68add` → `5f21a79` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44Mi4wIiwidXBkYXRlZEluVmVyIjoiNDMuODIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 73de6aa (ublue-os#1206) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | cgr.dev/chainguard/wolfi-base | container | digest | `550e0d6` → `73de6aa` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44My4wIiwidXBkYXRlZEluVmVyIjoiNDMuODMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Switch the GNOME COPR from jreilly1821/c10s-gnome (48.x backport) to
jreilly1821/c10s-gnome-49 which tracks Fedora F43 dist-git.
EL10-specific workarounds required (all confirmed working in live VM
testing against a centos-bootc:stream10 base):
1. Pre-upgrade fontconfig before the GNOME group install — COPR pango
1.57 links FcConfigSetDefaultSubstitute which was added in fontconfig
2.17.0; EL10 base ships 2.15.0 causing a symbol lookup error that
prevents gnome-shell from starting.
2. Pre-upgrade gobject-introspection and gjs — glib2 2.84+ ships both
libgirepository-1.0 and libgirepository-2.0. If only one is upgraded,
both get loaded and the double-registration of GIRepository crashes
gnome-shell at startup.
3. Add dbus-daemon to the GNOME package install — GDM's
gdm-wayland-session requires dbus-daemon to start the session message
bus. It is only a Recommends: of gdm (not Requires:) so bootc image
builds prune it; must be installed explicitly.
4. Add gnome49-el10-compat — provides two things:
- PAM fix for systemd-user: GDM 49 allocates dynamic gdm-greeter-N
users via systemd's Varlink userdb API; pam_unix returns
PAM_AUTHINFO_UNAVAIL for these transient users, blocking login.
Override replaces the account phase with pam_permit.so.
- SELinux policy module (priority 300): selinux-policy 43.1 lacks
rules for GDM 49's userdb Varlink socket. Module grants xdm_t the
ability to create the socket in /run/systemd/userdb/ and allows the
required domains (systemd_userdbd_t, policykit_t, init_t, etc.) to
connect to it. Required for enforcing mode.
5. Remove the gnome-shell-48.3 swap and python3-dnf-plugin-versionlock
install (already handled by dnf-command(versionlock) earlier).
Extend versionlock to cover gobject-introspection, gjs, and pango —
all of which must stay at COPR versions to avoid library mismatches.
Tested on: quay.io/centos-bootc/centos-bootc:stream10
Result: GDM greeter reached, gnome-shell session started, enforcing
SELinux clean (AVC-free for GDM/GNOME paths).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…h-to-dock@micxgx.gmail.com digest to 57ac68f (ublue-os#1208) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com](https://redirect.github.com/micheleg/dash-to-dock.git) ([changelog](https://redirect.github.com/micheleg/dash-to-dock.git/compare/0f21b6b9baf504d6e6972e9ea8041240ceadfdc9..57ac68fdaabdac7a9cd4bd5fa2bf59dc07db5c32)) | digest | `0f21b6b` → `57ac68f` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4wIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
The hardcoded kernel-pin (6.17.12-200.fc42) locked GDX to an akmods container from Feb 2026 containing kmod-nvidia-590.48.01. negativo17's Fedora 43 repo no longer carries that exact driver version, causing: No match for argument: nvidia-driver-3:590.48.01 Without a kernel-pin, AKMODS_VERSION resolves to coreos-stable-42 (the floating latest tag), which tracks CoreOS Stable → Bluefin Stable → HWE kernel versions and ships NVIDIA kmod versions that match what negativo17 currently serves. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
fix(gdx): remove stale kernel-pin, follow coreos-stable akmods
On aarch64 (SBSA), the NVIDIA open driver packages do not create /etc/modprobe.d/nvidia-modeset.conf, causing the build to fail with: cp: cannot stat '/etc/modprobe.d/nvidia-modeset.conf': No such file or directory Guard the copy with a file existence check so arm64 builds continue without the conf (it is not needed for SBSA) while x86_64 still gets it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…odprobe fix(gdx): guard nvidia-modeset.conf copy for arm64
…-os#1233) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [hanthor/changelog-action](https://redirect.github.com/hanthor/changelog-action) | action | digest | `2d212cd` → `0f9fc8c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuODkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 48a1786 (ublue-os#1235) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/projectbluefin/common | digest | `9409d0c` → `48a1786` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45Ni4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…#1238) This makes it so we can run 50 but not block the testing workflow. Agent results below: The **Build Bluefin GNOME 50 (testing)** workflow runs on every PR via \`pull_request\` and \`merge_group\` triggers. It currently fails with: \`\`\` error: rpm-ostree kernel-install: Adding kernel: Running dracut: Invalid cross-device link (os error 18) \`\`\` This is a dracut/kernel-install failure (POSIX \`EXDEV\`) in the GitHub Actions runner environment, affecting both amd64 and arm64. It has been failing consistently since at least 2026-03-21. ## Impact All 6 open Renovate PRs are blocked from auto-merging: - ublue-os#1237, ublue-os#1236, ublue-os#1234, ublue-os#1228, ublue-os#1223, ublue-os#1216, ublue-os#1210 The GNOME 50 workflow produces check names that collide with required checks (\`build / Create bluefin:stream10 Manifest\`), and the merge queue's \`ALLGREEN\` grouping strategy blocks on ANY failed check. ## Fix Remove \`pull_request\` and \`merge_group\` triggers from \`build-gnome50.yml\`. The workflow now only runs **post-merge** on \`push\` to \`main\` and on \`workflow_dispatch\`. This is safe because: - The GNOME 50 build is a testing/experimental path, not a required gate - It already uses \`publish: false\` for PR events (no images were being published on PRs anyway) - Post-merge runs will still validate and publish the GNOME 50 testing images to GHCR ## Follow-up Once the dracut EXDEV issue is resolved upstream (likely a runner environment or Containerfile fix), the \`pull_request\` trigger can be restored.
…ds (ublue-os#1240) ## Summary - **dracut `EXDEV` (os error 18)**: `/tmp` and `/boot` are separate tmpfs mounts in the container build. dracut defaults to `/tmp` as its working dir then tries to `rename()` the initramfs into `/boot`, which fails across filesystem boundaries. Fix: `export DRACUT_TMPDIR=/boot` in `kernel-swap.sh` so both the temp dir and output are on the same mount. - **`libjxl` version conflict**: The GNOME 50 COPR (`jreilly1821/c10s-gnome-50-fresh`) ships `libjxl 0.11.1`, which is ABI-incompatible with EPEL's `0.10.4`. `epel-multimedia`'s `libavcodec` requires `libjxl.so.0.10` and cannot install alongside `0.11`. Fix: exclude `libjxl*` from the COPR repo after enabling it so EPEL's `0.10.4` is used. Both fixes were validated with a successful local build (`localhost/bluefin:lts`). Upstream libjxl issue filed at tuna-os/tunaos-packages#14. ## Test plan - [x] Local build `just build bluefin lts 0 0 0` passes end-to-end - [ ] CI amd64 build passes - [ ] CI arm64 build passes 🤖 Generated with [Claude Code](https://claude.com/claude-code)
…7251 (ublue-os#1239) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/ublue-os/brew | digest | `d10f9b3` → `b727251` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to 702a73b (ublue-os#1237) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/projectbluefin/common | digest | `48a1786` → `702a73b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45OC4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action) ([changelog](https://redirect.github.com/anchore/sbom-action/compare/57aae528053a48a3f6235f2d9461b05fbcb7366d..e22c389904149dbc22b58101806040fa8d37a610)) | action | digest | `57aae52` → `e22c389` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…t to a5a619c (ublue-os#1234) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | cgr.dev/chainguard/wolfi-base | container | digest | `237a457` → `a5a619c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44OS40IiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…onnect@andyholmes.github.io digest to 35bc599 (ublue-os#1236) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io](https://redirect.github.com/GSConnect/gnome-shell-extension-gsconnect.git) ([changelog](https://redirect.github.com/GSConnect/gnome-shell-extension-gsconnect.git/compare/ed2f3a101d73582b3f81f6d171a637e7369f4597..35bc59911f81e1ce6dd30a9dbf255e2c013f5bb5)) | digest | `ed2f3a1` → `35bc599` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45Ni4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…est to e699fae (ublue-os#1223) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `56d49d1` → `e699fae` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44Ni4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…indicatorsupport@rgcjonas.gmail.com digest to 5d276f3 (ublue-os#1216) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/appindicatorsupport@rgcjonas.gmail.com](https://redirect.github.com/ubuntu/gnome-shell-extension-appindicator.git) ([changelog](https://redirect.github.com/ubuntu/gnome-shell-extension-appindicator.git/compare/5f21a790e20537681c51670cbfe2a5f2688cca2e..5d276f3f90122bfa7385616dd4b747287d0602c7)) | digest | `5f21a79` → `5d276f3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
GNOME 49 (like GNOME 50) has a hard dependency on systemd-userdb infrastructure. The base CentOS Stream 10 selinux-policy (42.x) lacks the necessary rules for the userdb Varlink socket, causing GDM to fail with 'Permission denied' when attempting to listen on it. Upgrading to selinux-policy 43.x from COPR resolves this and allows GDM to start. Also adds selinux-policy and fontconfig to versionlocks to prevent downgrades.
Adds the Bazaar Companion GNOME Shell extension (bazaar-integration@kolunmi.github.io) which provides an 'App Details' context menu entry for Flatpak applications, letting users view details and uninstall apps directly from the right-click menu. Port of ublue-os/bluefin#4089. Assisted-by: Claude Sonnet 4.6 via GitHub Copilot --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: James Reilly <jreilly1821@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…t to a04a1e6 (ublue-os#1244) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/projectbluefin/common | digest | `702a73b` → `a04a1e6` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…f256 (ublue-os#1246) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/ublue-os/brew | digest | `b727251` → `230f256` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMiIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
fix: upgrade selinux-policy to 43.x for GNOME 49 to resolve GDM failure
…est to 2c33da4 (ublue-os#1241) This PR contains the following updates: | Package | Update | Change | |---|---|---| | quay.io/centos-bootc/centos-bootc | digest | `e699fae` → `2c33da4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45OS4xIiwidXBkYXRlZEluVmVyIjoiNDMuMTAxLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…h-to-dock@micxgx.gmail.com digest to 69c6ee5 (ublue-os#1228) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com](https://redirect.github.com/micheleg/dash-to-dock.git) ([changelog](https://redirect.github.com/micheleg/dash-to-dock.git/compare/4a55b9150dfc3b5d254b3c66c017a5fdcaa60880..69c6ee5c7669b0a3b0077467cdbbcf3b39ddc44a)) | digest | `4a55b91` → `69c6ee5` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44Ni4yIiwidXBkYXRlZEluVmVyIjoiNDMuMTAxLjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Remove workaround for dracut temporary directory issue.
fix:DRACUT_TMPDIR export for kernel swap
…r-my-shell@aunetx digest to 3db2166 (ublue-os#1252) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/blur-my-shell@aunetx](https://redirect.github.com/aunetx/blur-my-shell.git) ([changelog](https://redirect.github.com/aunetx/blur-my-shell.git/compare/2296e819c4238c4a8f061c4441292b56f00e4f00..3db2166edb85ffd666b52529c77637beb887d5c3)) | digest | `2296e81` → `3db2166` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuNiIsInVwZGF0ZWRJblZlciI6IjQzLjEwMi42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…r-my-shell@aunetx digest to 6641746 (ublue-os#1253) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/blur-my-shell@aunetx](https://redirect.github.com/aunetx/blur-my-shell.git) ([changelog](https://redirect.github.com/aunetx/blur-my-shell.git/compare/3db2166edb85ffd666b52529c77637beb887d5c3..66417469acb72eb753e341d7882dfdfbfb8bda0e)) | digest | `3db2166` → `6641746` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuNyIsInVwZGF0ZWRJblZlciI6IjQzLjEwMi43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
…r-my-shell@aunetx digest to 4f4279c (ublue-os#1254) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [system_files/usr/share/gnome-shell/extensions/blur-my-shell@aunetx](https://redirect.github.com/aunetx/blur-my-shell.git) ([changelog](https://redirect.github.com/aunetx/blur-my-shell.git/compare/66417469acb72eb753e341d7882dfdfbfb8bda0e..4f4279c731e57447aa101ffa0785f0f320916548)) | digest | `6641746` → `4f4279c` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..ublue-os/issues/549) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuNyIsInVwZGF0ZWRJblZlciI6IjQzLjEwMi43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Replace the bespoke cosign attest + zstd-compressed predicate SBOM technique with the ORAS-based approach already used by castrojo/bluefin and ublue-os/aurora. Changes to reusable-build-image.yml: - Add sign: bool input (default: true) to gate all cosign steps independently - Add attestations: write + artifact-metadata: write to build_push permissions - Pin Syft to v1.39.0 via anchore/sbom-action - Broaden SBOM branch condition to include refs/heads/main (enables fork testing) - Rename SBOM output var OUTPUT_PATH -> SBOM for consistency - Replace Add SBOM Attestation (zstd+cosign attest) with 5-step ORAS chain: - oras-project/setup-oras@22ce207 (v1.2.4) - ORAS login to GHCR - oras attach with application/vnd.spdx+json + hardened oras discover guard - cosign sign SBOM artifact digest (gated on inputs.sign) - actions/attest@59d89421 (v4.1.0) for GitHub provenance attestation - Gate Sign Image step on inputs.sign - Gate entire sign job on inputs.publish && inputs.sign Changes to 6 caller workflows (fork test config — sign: false): - Add sign: false to each caller's with: block - Add attestations: write + artifact-metadata: write to permissions - build-dx-hwe.yml + build-regular-hwe.yml: updated both top-level and job-level permissions blocks (GHA permission ceiling enforcement) - build-gnome50.yml: sign: false added to all 4 jobs This fork configuration tests ORAS attach + actions/attest without requiring SIGNING_SECRET. Once CI confirms the SBOM chain works, upstream the change to ublue-os/bluefin-lts with sign: false removed from callers. Assisted-by: Claude Sonnet 4.6 via GitHub Copilot Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
feat: replace cosign-attest SBOM with ORAS attach + actions/attest
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Commits pending promotion to
lts8e38284 feat: replace cosign-attest SBOM with ORAS attach + actions/attest
65c07a5 feat: replace cosign-attest SBOM with ORAS attach + actions/attest
eb9a740 chore(deps): update system_files/usr/share/gnome-shell/extensions/blur-my-shell@aunetx digest to 4f4279c (ublue-os#1254)
5b3024a chore(deps): update system_files/usr/share/gnome-shell/extensions/blur-my-shell@aunetx digest to 6641746 (ublue-os#1253)
fa6123b chore(deps): update system_files/usr/share/gnome-shell/extensions/blur-my-shell@aunetx digest to 3db2166 (ublue-os#1252)
189a216 Merge pull request ublue-os#1251 from ublue-os/hanthor-patch-2
791b962 Fix: DRACUT_TMPDIR export for kernel swap
aedb2c7 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to 69c6ee5 (ublue-os#1228)
1c64881 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to 2c33da4 (ublue-os#1241)
c8fab59 Merge pull request ublue-os#1242 from ublue-os/hanthor-patch-1
5cf1525 chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 230f256 (ublue-os#1246)
8a286c0 chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to a04a1e6 (ublue-os#1244)
d797d5a feat: add Bazaar Companion extension (ublue-os#1243)
4dcefc4 fix: upgrade selinux-policy to 43.x for GNOME 49
114847b Merge branch 'lts' into main
e9138a9 chore(deps): update system_files/usr/share/gnome-shell/extensions/appindicatorsupport@rgcjonas.gmail.com digest to 5d276f3 (ublue-os#1216)
7f31d9d chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to e699fae (ublue-os#1223)
4f6e8a8 chore(deps): update system_files/usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io digest to 35bc599 (ublue-os#1236)
831b7fc chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to a5a619c (ublue-os#1234)
d93e5fa chore(deps): update anchore/sbom-action digest to e22c389 (ublue-os#1210)
7cb17d5 chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 702a73b (ublue-os#1237)
fc4bee0 chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to b727251 (ublue-os#1239)
c1faed7 fix(build): resolve dracut EXDEV and libjxl conflict in gnome-50 builds (ublue-os#1240)
0f97642 fix(ci): remove pull_request trigger from GNOME 50 workflow (ublue-os#1238)
d94171e chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 48a1786 (ublue-os#1235)
9f2535e chore(deps): update hanthor/changelog-action digest to 0f9fc8c (ublue-os#1233)
7bc0c90 Merge pull request ublue-os#1232 from ublue-os/fix/gdx-arm64-nvidia-modprobe
90a0d59 fix(gdx): guard nvidia-modeset.conf copy for arm64
3d45dd2 Merge pull request ublue-os#1231 from ublue-os/fix/gdx-kernel-pin
e527125 fix(gdx): remove stale kernel-pin, follow coreos-stable akmods
4121cd5 Merge pull request ublue-os#1230 from ublue-os/fix/jxl-pixbuf-loader
3035ee3 fix: install jxl-pixbuf-loader for JPEG-XL desktop backgrounds
35fe96b chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 237a457 (ublue-os#1229)
3bd3935 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to 4a55b91 (ublue-os#1227)
e6780e5 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to 716b285 (ublue-os#1226)
b0040f2 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to 8a7e21a (ublue-os#1225)
6ff8568 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to ca92703 (ublue-os#1224)
a299651 chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to d10f9b3 (ublue-os#1222)
76f888a ci: add workflow_dispatch trigger to GNOME 50 build
35788a5 Merge pull request ublue-os#1219 from ublue-os/renovate/system_files-usr-share-gnome-shell-extensions-dash-to-dockmicxgx.gmail.com-digest
1271870 Merge pull request ublue-os#1221 from hanthor/main
f6e1e4b feat: add bluefin-dx GNOME 50 build variants (lts-testing-50, lts-hwe-testing-50)
916af63 Merge pull request ublue-os#1220 from hanthor/main
761f3fb fix: disambiguate artifact names to avoid conflict when hwe and non-hwe build in same run
ff52856 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to 57ac68f
d705ec0 Merge pull request ublue-os#1218 from hanthor/main
8791cad refactor: replace layered gnome50 with full build pipeline (GNOME_VERSION arg)
ad5efb0 fix: use rechunk on main branch pushes (mirrors main build pattern)
98817fd fix: copy image to rootless storage when rechunk is disabled
c5ca712 fix: use c10s-gnome-50-fresh COPR (fully populated with all packages)
1b6aeed feat: add GNOME_VERSION build arg to select GNOME 49 or 50
8d58621 Merge pull request ublue-os#1213 from hanthor/feat/gnome-50-layered
3a4943c fix: drop tmpfs mounts in Containerfile.gnome50
157138a fix: copy upgrade script to /usr/local/bin, not /tmp (tmpfs mount wipes it)
6d70966 Merge pull request ublue-os#1212 from hanthor/feat/gnome-50-layered
3b665f1 fix(ci): add bluefin-dx GNOME 50 variants to build matrix
8087aea feat: rebase GNOME 49 as default, layer GNOME 50 on top
45ee934 Merge pull request ublue-os#1209 from hanthor/feat/gnome-50
e05a4fb fix(ci): restrict GNOME 50 builds to main branch only
a4e75cf fix(ci): wire up tag-suffix input in reusable-build-image.yml
cb21bb1 feat: add GNOME 50 testing builds (lts-testing-50, lts-hwe-testing-50)
ac893be Merge pull request ublue-os#1207 from hanthor/feat/gnome-49
a2d8b5c Merge branch 'main' into feat/gnome-49
ca0fd05 Merge pull request ublue-os#1202 from ublue-os/main
96d99f5 chore(deps): update system_files/usr/share/gnome-shell/extensions/dash-to-dock@micxgx.gmail.com digest to 57ac68f (ublue-os#1208)
3e3235e feat: switch from GNOME 48 to GNOME 49
28a7701 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 73de6aa (ublue-os#1206)
789460b chore(deps): update system_files/usr/share/gnome-shell/extensions/appindicatorsupport@rgcjonas.gmail.com digest to 5f21a79 (ublue-os#1205)
f662cb5 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to 56d49d1 (ublue-os#1204)
f93db5a chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 550e0d6 (ublue-os#1203)
3f031ba chore(deps): update system_files/usr/share/gnome-shell/extensions/tmp/caffeine digest to 2fafa49 (ublue-os#1200)
120a359 fix(ci): use regular merge for promotion PRs instead of squash (ublue-os#1201)
d5a0149 Merge remote-tracking branch 'upstream/main' into lts
d151470 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to 54b49be (ublue-os#1198)
ee185e0 promote: main → lts (ublue-os#1196)
a764cfc fix(ci): use tree-hash anchor for accurate promotion commit list (ublue-os#1197)
6462f99 ci(promote): replace push-based promotion with PR gate (ublue-os#1195)
dd4152f chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to 7b1e3d1 (ublue-os#1194)
1658526 chore(deps): update system_files/usr/share/gnome-shell/extensions/search-light@icedman.github.com digest to 4e93e0e (ublue-os#1193)
aa14da4 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to b10c380 (ublue-os#1191)
1ff0c7e Revert "feat(GNOME) : gnome 49 backport" (ublue-os#1192)
18bb989 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to ff6f31c (ublue-os#1185)
24765e4 feat(GNOME) : gnome 49 backport (ublue-os#1187)
bc65f2a chore(deps): update system_files/usr/share/gnome-shell/extensions/search-light@icedman.github.com digest to e4ad180 (ublue-os#1190)
914432d chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to fef8b47 (ublue-os#1189)
1339bc4 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 2a43204 (ublue-os#1188)
4e13431 chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 9409d0c (ublue-os#1186)
6a0ad87 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to a9a3a0c (ublue-os#1184)
8e1c75f chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 69e0d5c (ublue-os#1174)
90132e8 chore(deps): update cgr.dev/chainguard/wolfi-base:latest docker digest to 08420c1 (ublue-os#1181)
b23f809 chore(deps): update actions/download-artifact digest to 3e5f45b (ublue-os#1183)
13f9b46 chore(deps): update quay.io/centos-bootc/centos-bootc:c10s docker digest to c2dba5f (ublue-os#1182)
Merge this PR (Create a merge commit) to promote. Do NOT squash — squash-merge breaks the merge base and causes PR bloat. The PR body updates automatically as
mainadvances.