projectbluefin
diff --git a/‎.github/ISSUE_TEMPLATE/config.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/ISSUE_TEMPLATE/config.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/changelogs.py‎
Lines changed: 4 additions & 4 deletions b/‎.github/changelogs.py‎
Lines changed: 4 additions & 4 deletions
diff --git a/‎.github/copilot-instructions.md‎
Lines changed: 1 addition & 1 deletion b/‎.github/copilot-instructions.md‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/copilot-setup-steps.yml‎
Lines changed: 2 additions & 2 deletions b/‎.github/copilot-setup-steps.yml‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/workflows/build-image-testing.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/build-image-testing.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/e2e-dispatch.yml‎
Lines changed: 4 additions & 1 deletion b/‎.github/workflows/e2e-dispatch.yml‎
Lines changed: 4 additions & 1 deletion
diff --git a/‎.github/workflows/post-testing-e2e.yml‎
Lines changed: 7 additions & 4 deletions b/‎.github/workflows/post-testing-e2e.yml‎
Lines changed: 7 additions & 4 deletions
diff --git a/‎.github/workflows/weekly-testing-promotion.yml‎
Lines changed: 26 additions & 23 deletions b/‎.github/workflows/weekly-testing-promotion.yml‎
Lines changed: 26 additions & 23 deletions
diff --git a/‎CONTRIBUTING.md‎
Lines changed: 15 additions & 11 deletions b/‎CONTRIBUTING.md‎
Lines changed: 15 additions & 11 deletions
diff --git a/‎Containerfile‎
Lines changed: 2 additions & 2 deletions b/‎Containerfile‎
Lines changed: 2 additions & 2 deletions
@@ -4,7 +4,7 @@ contact_links:
     url: https://docs.projectbluefin.io
     about: "User documentation, FAQ, and feature guides."
   - name: "Contribution guide"
-    url: https://github.com/projectbluefin/bluefin/blob/testing/CONTRIBUTING.md
+    url: https://github.com/projectbluefin/bluefin/blob/main/CONTRIBUTING.md
     about: "Build, validation, and workflow rules — read before opening a PR."
   - name: "Project Bluefin website"
     url: https://projectbluefin.io
 
@@ -8,7 +8,7 @@
 import re
 from collections import defaultdict
 
-REGISTRY = "ghcr.io/ublue-os/"
+REGISTRY = "ghcr.io/projectbluefin/"
 
 IMAGE_MATRIX_LATEST = {
     "experience": ["base", "dx"],
@@ -41,7 +41,7 @@
 }
 
 COMMITS_FORMAT = "### Commits\n| Hash | Subject | Author |\n| --- | --- | --- |{commits}\n\n"
-COMMIT_FORMAT = "\n| **[{short}](https://github.com/ublue-os/bluefin/commit/{githash})** | {subject} | {author} |"
+COMMIT_FORMAT = "\n| **[{short}](https://github.com/projectbluefin/bluefin/commit/{githash})** | {subject} | {author} |"
 
 CHANGELOG_TITLE = "{tag}: {pretty}"
 CHANGELOG_FORMAT = """\
@@ -73,10 +73,10 @@
 IMAGE_NAME=$(jq -r '.["image-name"]' < /usr/share/ublue-os/image-info.json)
 
 # For this Stream
-sudo bootc switch --enforce-container-sigpolicy ghcr.io/ublue-os/$IMAGE_NAME:{target}
+sudo bootc switch --enforce-container-sigpolicy ghcr.io/projectbluefin/$IMAGE_NAME:{target}
 
 # For this Specific Image:
-sudo bootc switch --enforce-container-sigpolicy ghcr.io/ublue-os/$IMAGE_NAME:{curr}
+sudo bootc switch --enforce-container-sigpolicy ghcr.io/projectbluefin/$IMAGE_NAME:{curr}
 ```
 
 ### Documentation
 
@@ -49,5 +49,5 @@ just/                  # Extra just recipes
 ## Related projects
 
 - Documentation: [projectbluefin/bluefin-docs](https://github.com/projectbluefin/bluefin-docs) / [docs.projectbluefin.io](https://docs.projectbluefin.io)
-- LTS variant: [ublue-os/bluefin-lts](https://github.com/ublue-os/bluefin-lts)
+- LTS variant: [projectbluefin/bluefin-lts](https://github.com/projectbluefin/bluefin-lts)
 - Common layer: [projectbluefin/common](https://github.com/projectbluefin/common)
@@ -6,10 +6,10 @@ on:
   workflow_dispatch:
   push:
     paths:
-      - .github/workflows/copilot-setup-steps.yml
+      - .github/copilot-setup-steps.yml
   pull_request:
     paths:
-      - .github/workflows/copilot-setup-steps.yml
+      - .github/copilot-setup-steps.yml
 
 jobs:
   # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
 
@@ -3,7 +3,7 @@ on:
   merge_group:
   push:
     branches:
-      - testing
+      - main
     paths-ignore:
       - ".github/workflows/*validate*.yml"
       - "**.md"
 
@@ -131,7 +131,10 @@ jobs:
   e2e:
     if: needs.dispatch.outputs.authorized == 'true'
     needs: [dispatch]
-    uses: projectbluefin/testsuite/.github/workflows/e2e.yml@3bc7b6ff0e4ceeea734e1e57c09caada469f9a66 # main
+    permissions:
+      packages: write
+      contents: read
+    uses: projectbluefin/testsuite/.github/workflows/e2e.yml@12bd892e476ef930ae3240eff71402390bba8da9 # main
     with:
       image: ${{ needs.dispatch.outputs.image }}
       suites: smoke,developer,vanilla-gnome
 
@@ -1,13 +1,13 @@
 name: Post-Testing E2E
 
-# Runs e2e smoke tests after every successful push build on the testing branch.
-# This gates the testing branch continuously so the weekly promotion
+# Runs e2e smoke tests after every successful push build on main.
+# This gates main continuously so the weekly promotion
 # (weekly-testing-promotion.yml) promotes only e2e-verified commits.
 on:
   workflow_run:
     workflows: ["Testing Images"]
     types: [completed]
-    branches: [testing]
+    branches: [main]
 
 permissions: read-all
 
@@ -43,7 +43,10 @@ jobs:
 
   run-e2e:
     needs: [e2e]
-    uses: projectbluefin/testsuite/.github/workflows/e2e.yml@3bc7b6ff0e4ceeea734e1e57c09caada469f9a66 # main
+    permissions:
+      packages: write
+      contents: read
+    uses: projectbluefin/testsuite/.github/workflows/e2e.yml@74c86f1a967f51cb0c7adf3732036ae2f7b89b4c # main
     with:
       image: ${{ needs.e2e.outputs.image }}
       suites: smoke
@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   # Verify that post-testing-e2e.yml already ran smoke tests on the current
-  # testing HEAD since every push to testing triggers it. If e2e hasn't passed
+  # main HEAD since every push to main triggers it. If e2e hasn't passed
   # on the current HEAD (e.g., a new push just landed), fail fast rather than
   # promoting untested code.
   verify-e2e:
@@ -26,15 +26,15 @@ jobs:
       build_run_id: ${{ steps.find-build.outputs.run_id }}
       image: ${{ steps.get-digest.outputs.image }}
     steps:
-      - name: Lock testing HEAD SHA
+      - name: Lock main HEAD SHA
         id: lock-sha
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
           set -euo pipefail
-          SHA=$(gh api repos/${{ github.repository }}/git/ref/heads/testing --jq '.object.sha')
+          SHA=$(gh api repos/${{ github.repository }}/git/ref/heads/main --jq '.object.sha')
           echo "sha=$SHA" >> "$GITHUB_OUTPUT"
-          echo "Locked testing SHA: $SHA"
+          echo "Locked main SHA: $SHA"
 
       - name: Find passing post-testing-e2e run for this SHA
         id: find-e2e
@@ -46,10 +46,10 @@ jobs:
 
           # Look for a successful post-testing-e2e run on the locked SHA.
           # post-testing-e2e.yml fires via workflow_run — its head_sha matches
-          # the testing push SHA that triggered it.
+          # the main push SHA that triggered it.
           E2E_STATUS=$(gh run list \
             --workflow post-testing-e2e.yml \
-            --branch testing \
+            --branch main \
             --repo "${{ github.repository }}" \
             --limit 20 \
             --json headSha,conclusion \
@@ -59,14 +59,14 @@ jobs:
           echo "E2E status for $LOCKED_SHA: ${E2E_STATUS:-not found}"
 
           if [ "$E2E_STATUS" != "success" ]; then
-            echo "ERROR: post-testing-e2e has not passed on testing HEAD ($LOCKED_SHA)."
+            echo "ERROR: post-testing-e2e has not passed on main HEAD ($LOCKED_SHA)."
             echo "  Status: ${E2E_STATUS:-no run found}"
-            echo "  Either e2e is still running, failed, or testing just advanced."
+            echo "  Either e2e is still running, failed, or main just advanced."
             echo "  Rerun this workflow once post-testing-e2e passes."
             exit 1
           fi
 
-          echo "✅ post-testing-e2e passed on testing HEAD"
+          echo "✅ post-testing-e2e passed on main HEAD"
 
       - name: Find the build run for this SHA
         id: find-build
@@ -78,7 +78,7 @@ jobs:
 
           RUN_ID=$(gh run list \
             --workflow build-image-testing.yml \
-            --branch testing \
+            --branch main \
             --repo "${{ github.repository }}" \
             --limit 20 \
             --json databaseId,headSha,conclusion \
@@ -109,7 +109,10 @@ jobs:
 
   e2e:
     needs: [verify-e2e]
-    uses: projectbluefin/testsuite/.github/workflows/e2e.yml@3bc7b6ff0e4ceeea734e1e57c09caada469f9a66 # main
+    permissions:
+      packages: write
+      contents: read
+    uses: projectbluefin/testsuite/.github/workflows/e2e.yml@12bd892e476ef930ae3240eff71402390bba8da9 # main
     with:
       image: ${{ needs.verify-e2e.outputs.image }}
       suites: developer,vanilla-gnome
@@ -121,51 +124,51 @@ jobs:
     outputs:
       has_diff: ${{ steps.check-diff.outputs.has_diff }}
     steps:
-      - name: Checkout testing
+      - name: Checkout main
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
-          ref: testing
+          ref: main
 
       - name: Configure git
         run: |
           set -euo pipefail
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-      - name: Verify testing SHA has not advanced
+      - name: Verify main SHA has not advanced
         env:
           LOCKED_SHA: ${{ needs.verify-e2e.outputs.testing_sha }}
         run: |
           set -euo pipefail
-          git fetch origin testing
-          CURRENT_SHA=$(git rev-parse origin/testing)
+          git fetch origin main
+          CURRENT_SHA=$(git rev-parse origin/main)
           if [ "$CURRENT_SHA" != "$LOCKED_SHA" ]; then
-            echo "ERROR: testing advanced during e2e ($LOCKED_SHA → $CURRENT_SHA)"
+            echo "ERROR: main advanced during e2e ($LOCKED_SHA → $CURRENT_SHA)"
             echo "Untested commits would reach latest/stable. Aborting — rerun next week."
             exit 1
           fi
-          echo "✅ testing SHA unchanged: $CURRENT_SHA"
+          echo "✅ main SHA unchanged: $CURRENT_SHA"
 
-      - name: Check diff between testing and latest
+      - name: Check diff between main and latest
         id: check-diff
         run: |
           set -euo pipefail
           git fetch origin latest stable 2>/dev/null || true
-          if git diff --quiet origin/latest origin/testing 2>/dev/null; then
-            echo "No diff between testing and latest — nothing to promote"
+          if git diff --quiet origin/latest origin/main 2>/dev/null; then
+            echo "No diff between main and latest — nothing to promote"
             echo "has_diff=false" >> "$GITHUB_OUTPUT"
           else
             echo "has_diff=true" >> "$GITHUB_OUTPUT"
           fi
 
-      - name: Fast-forward latest and stable to testing
+      - name: Fast-forward latest and stable to main
         if: steps.check-diff.outputs.has_diff == 'true'
         run: |
           set -euo pipefail
           git push origin HEAD:refs/heads/latest
           git push origin HEAD:refs/heads/stable
-          echo "✅ Promoted testing → latest + stable"
+          echo "✅ Promoted main → latest + stable"
 
   trigger-stable-build:
     needs: [promote-to-latest-and-stable]
 
@@ -4,32 +4,36 @@
 
 ### I want to submit a fix or feature — what do I do?
 
-PR against the `testing` branch. Do not PR directly against `stable`. If your change is important and needs to ship immediately, apply the `cherry-pick` label to your PR and explain why in the description.
+PR against the `main` branch. Do not PR directly against `stable` or `latest`. If your change is important and needs to ship immediately, apply the `cherry-pick` label to your PR and explain why in the description.
 
-The `bluefin-backport-bot` will open a backport PR to `stable` automatically after your PR merges into `testing`.
+The `bluefin-backport-bot` will open a backport PR to `stable` automatically after your PR merges into `main`.
 
 ### Manual cherry-pick (if the bot is broken)
 
 [The backport action](https://github.com/korthout/backport-action) powers the bot. If it fails, cherry-pick manually:
 
 ```bash
-# Find the merge commit on testing
-git log --oneline testing | head -20
+# Find the merge commit on main
+git log --oneline main | head -20
 
 git switch stable
 git switch -c backport-my-fix
 git cherry-pick -x <commit-sha>
 ```
 
-Use the merge commit from `testing`, not the PR branch commit, so the origin is traceable.
+Use the merge commit from `main`, not the PR branch commit, so the origin is traceable.
 
 ### Only `:stable` / `:latest` is broken but `:testing` is not
 
-The fix still goes into `testing` first. Rare exceptions exist when the feature was removed in `testing` and only exists in `stable`.
+The fix still goes into `main` first. Rare exceptions exist when the feature was removed in `main` and only exists in `stable`.
 
-## Merging `testing` changes into `stable`
+## Promoting `main` to `stable` and `latest`
 
-A pull bot opens PRs to merge `testing` → `stable` on each new commit. These can be merged any time there are no known regressions on `:testing`.
+Every Tuesday at 06:00 UTC the `weekly-testing-promotion` workflow:
+1. Verifies smoke e2e tests have passed on `main` HEAD
+2. Runs the full developer + vanilla-gnome e2e suite
+3. Fast-forwards `latest` and `stable` branches to `main`
+4. Triggers the `stable` and `latest` image builds
 
 ## Branching for a new Fedora version
 
@@ -42,14 +46,14 @@ A pull bot opens PRs to merge `testing` → `stable` on each new commit. These c
 
 - Wait for the official Fedora release (package freeze lifted)
 - Wait for coreos:stable (~2 weeks post-Fedora) → PR `ublue-os/akmods`
-- Bump workflow and Justfile version references in `testing`
+- Bump workflow and Justfile version references in `main`
 - Create a new `stable-f$N` branch and update branch protection rules
 
 ## Stream reference
 
 | | `:stable` | `:latest` | `:testing` |
 |---|---|---|---|
-| Built from | `stable` branch | `testing` branch | `testing` branch |
+| Built from | `stable` branch | `latest` branch | `main` branch |
 | Kernel | coreos-stable, pinned on regressions | Fedora default, pinned on bad regressions | Fedora default |
-| Published | Weekly cron + emergency manual trigger | On merges to `testing` | On merges to `testing` |
+| Published | Weekly promotion + emergency manual trigger | Weekly promotion | On merges to `main` |
 | Who should use it | Regular users | Enthusiasts | Testers, developers |
@@ -1,5 +1,5 @@
 ARG BASE_IMAGE_NAME="silverblue"
-ARG FEDORA_MAJOR_VERSION="43"
+ARG FEDORA_MAJOR_VERSION="43@sha256:d0ba53e62bf61ddee07cdf3c5ec95b85aaa6ad058dc622dadd0e6ddf4dc4bc61"
 ARG BASE_IMAGE="quay.io/fedora-ostree-desktops/silverblue"
 ARG COMMON_IMAGE="ghcr.io/projectbluefin/common:latest"
 ARG COMMON_IMAGE_SHA=""
@@ -23,7 +23,7 @@ ARG AKMODS_FLAVOR="coreos-stable"
 ARG BASE_IMAGE_NAME="silverblue"
 ARG FEDORA_MAJOR_VERSION="40"
 ARG IMAGE_NAME="bluefin"
-ARG IMAGE_VENDOR="ublue-os"
+ARG IMAGE_VENDOR="projectbluefin"
 ARG KERNEL="6.10.10-200.fc40.x86_64"
 ARG SHA_HEAD_SHORT="dedbeef"
 ARG UBLUE_IMAGE_TAG="stable"