2026-10-14

d930202Merge origin/main into feat/ci2-actions merge GPG Verifiedbrice
9783786docs(executor): say that archive links are validated at install time GPG Verifiedbrice
e509beafix(host,executor): compare origins in one canonical form with IPv6 hosts bracketed and accept a literal U+FFFD in action paths GPG Verifiedbrice
86ddb5fMerge pull request 'feat(executor): workflow commands, annotations, matchers, summaries, step timeout (CI-2 G)' (#11) from feat/ci2-commands into main merge SSH Unverifiedbnema
41a0ba6feat(host): tell the user when annotations were dropped for lack of room GPG Verifiedbrice
6cc6c69fix(executor): reuse resolutions across local composites and guard local composite recursion GPG Verifiedbrice
acae6dafix(host): cache resolutions per job, batch big requests and validate the action path apart from owner and repository GPG Verifiedbrice
79b18d6fix(execstream): do not let a resolution answer nobody reads block the end of the session GPG Verifiedbrice
be35c9ffix(executor): never give the archive token back after a redirect left its origin GPG Verifiedbrice
349efbdfix(host): count annotations in the outbox budget for their whole lifetime, release producers on the hard stop GPG Verifiedbrice
547d930fix(executor): resolve every archive symlink through the other links before accepting the tree GPG Verifiedbrice
c19a481test(executor): restore the catastrophic matchers vs step timeout test GPG Verifiedbrice
0a7462cfix(host): bound action resolution and send archive tokens only to the origin the host names GPG Verifiedbrice
dd71becfix(executor): stop the image setup of a local composite action with the step GPG Verifiedbrice
1955003refactor(executor): additive mask API, scope and timeout hook points; save-state keeps spelling GPG Verifiedbrice
8a89149fix(host): bound result frames of the guest and copy what is cut GPG Verifiedbrice
9f6323cfix(executor): check archive links against the stripped root and cap the decompressed stream GPG Verifiedbrice
3d4e205fix(executor): stop problem matchers when the step is cancelled GPG Verifiedbrice
9911debfix(executor): read the step summary from the checked descriptor, bounded GPG Verifiedbrice
f0e28f8fix(executor): track original masks apart from their encodings GPG Verifiedbrice

2026-10-13

8111cdbtest(executor): pre and post of repository and docker actions, token not in the environment GPG Verifiedbrice
0ee31e3test(guest): resolver round trip with the host handler GPG Verifiedbrice
92205fffeat(executor): warn about actions upgraded to Node.js 24 in Complete job GPG Verifiedbrice
76038adstyle(executor): error strings and unused code for the linter GPG Verifiedbrice
622eabbtest(executor): cover local, repository, composite, node and docker actions GPG Verifiedbrice
aea5d73feat(executor): run node, docker, composite and local actions with pre and post stages GPG Verifiedbrice
a6671fafeat(host): resolve actions for the executor and give the job token to github.token GPG Verifiedbrice
1396410feat(executor): extract action archives with traversal and link checks GPG Verifiedbrice
e59b2f0test(guest): results frames over the stream; docs: attribution for the ported code GPG Verifiedbrice
9116f1efeat(host): forward annotations, summaries and step outcomes to ermite GPG Verifiedbrice
77f2262feat(executor): annotations, problem matchers, summaries, step outcome and timeout-minutes GPG Verifiedbrice
b90459efeat(executor): mask like the official runner and add masks at run time GPG Verifiedbrice
d727ef4feat(execstream): carry annotations, summaries and step outcomes GPG Verifiedbrice
c4ec791chore(deps): bump ermite-api to 49ac5fd and ermite-actions to 3425eb2 GPG Verifiedbrice
de0182dchore(deps): bump ermite-api to 49ac5fd GPG Verifiedbrice
6da746aMerge pull request 'feat(externals): provide Node.js to jobs outside the image' (#10) from feat/node-externals into main merge SSH Unverifiedbnema
ea3c7aafix(externals): build stubs once via rename, record alpine checksums, retry on a timer GPG Verifiedbrice
ad47140feat(externals): provide pinned Node.js to sandboxes outside the image GPG Verifiedbrice
93b85feMerge pull request 'feat(netpolicy): opt-in guest access to the forge for staging hosts' (#9) from feat/guest-forge-access into main merge SSH Unverifiedbnema
a236b1ddocs(readme): warn that guest forge traffic comes from a private address GPG Verifiedbrice
6699244feat(runner): opt-in guest access to the forge host:port of ERMITE_RUNNER_URL GPG Verifiedbrice
853c006feat(netpolicy): optional TCP accept to the gateway on one port GPG Verifiedbrice
c747a0bfeat(dnsfwd): answer one overridden name with the listener address GPG Verifiedbrice
cbb8ad6Merge pull request 'fix(executor): mask base64 of a secret followed by other bytes' (#8) from fix/mask-base64-tail into main merge SSH Unverifiedtag v0.1.0bnema
e66e40edocs(executor): say the truncated base64 masks go beyond actions/runner GPG Verifiedbrice
cc22a18fix(executor): mask base64 of a secret followed by other bytes GPG Verifiedbrice
fc8849eMerge pull request 'fix(executor): GitHub parity gaps found by conformance compare' (#7) from feat/ci-parity-2 into main merge SSH Unverifiedbnema
cec204fbuild: use the merged ermite-actions (5c0e25d) GPG Verifiedbrice
a0aa417docs(executor): say where secrets.GITHUB_TOKEN comes from GPG Verifiedbrice
e1ff0f2fix(executor): mask the encodings of the token as the official runner does GPG Verifiedbrice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 4

Tags 11

↑↓ moveenter openesc close