- blobdisk/ (directory) fix(blobs): reclaim crashed temp files, skip broken multipart entries, sync new directories
- blobs3/ (directory) test(blobs): run the blob contract on MinIO, which lists unfinished uploads by key
- blobtest/ (directory) test(blobs): run the blob contract on MinIO, which lists unfinished uploads by key
- ciartifacts/ (directory) feat(ci): store CI artifacts on the blob store, keep legacy disk artifacts readable
- cilogs/ (directory) chore(hexcheck): bump to v0.4.0 and drop unused ignore directives
- cisummaries/ (directory) chore(hexcheck): bump to v0.4.0 and drop unused ignore directives
- client/ (directory) feat(cli): ermite release commands and release:write in the cli preset
- ermitegit/ (directory) refactor: reuse the domain settings predicates and tighten the moved rules after review
- eventbus/ (directory) test: run unit tests in parallel and enable the tparallel linter
- gitcli/ (directory) feat(releases): git tag writer and release hooks on pushes and repository deletion
- githttp/ (directory) fix(mirror): sanitize push output, harden SSH options, add mirror events to watch and stable --json output
- githubapi/ (directory) fix(releases): hide draft events and cursors, honour update targets, share range handling
- githubraw/ (directory) feat(ci): reusable workflows (#33)
- gitpush/ (directory) fix(gitpush): log a failed removal of the temporary key directory and simplify the refspec check
- gitremote/ (directory) fix(gitremote): kill git's helpers on timeout and retry a ls-remote that timed out (#27)
- httpserver/ (directory) fix(web): harden CSP and headers, ignore htmx in untrusted HTML, cache health checks
- kvstore/ (directory) feat(ci): store CI artifacts on the blob store, keep legacy disk artifacts readable
- oidchttp/ (directory) feat(ci): OIDC ID tokens for CI jobs (#43)
- rpc/ (directory) fix(releases): hide draft events and cursors, honour update targets, share range handling
- secretbox/ (directory) fix(ci): trust pull_request runs only for heads pushed by a trusted principal (#38)
- sigverify/ (directory) chore(hexcheck): bump to v0.4.0 and drop unused ignore directives
- sshsig/ (directory) feat(sshsig): sign commits with the instance ed25519 key
- web/ (directory) fix(releases): hide draft events and cursors, honour update targets, share range handling
- webauthn/ (directory) chore(hexcheck): bump to v0.4.0 and drop unused ignore directives