Commit Graph
745 Commits
Author SHA1 Message Date
dependabot[bot] 5f18eb94c5 chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#13040)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 22:49:59 +00:00
dependabot[bot] d1298f16ef chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#13039)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 22:49:43 +00:00
dependabot[bot] 0f8ac75770 chore(deps): bump helm/chart-testing-action from 2e2940618cb426dce2999631d543b53cdcfc8527 to d6db0ca01d3598ea552ccf97edb5de6fe6b54ce0 (#13038)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 22:16:55 +00:00
Jamison LahmanandClaude Sonnet 5 effc67f77a fix(desktop): reliable Linux Alt-menu toggle + main.rs hardening (#13219)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-21 22:04:45 +00:00
DanelegendandClaude Fable 5 8777823689 test(search): connector-filter scope-decision eval suite (#12331)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-17 17:32:42 +00:00
Nikolas Garza f6776f9b91 fix(ci): stamp the opal release version without touching the install tree (#13102) 2026-07-16 23:19:34 +00:00
Jamison LahmanandClaude Opus 4.8 ece7ac8f7a ci(deployment): drop -cloud image repos, standardize to single repos (#13097)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-16 21:52:04 +00:00
Wenxi bd5f5acd22 ci: skip Linear check for Dependabot PRs (#13049) 2026-07-15 17:52:08 +00:00
Jamison LahmanandClaude Fable 5 18202ce5a2 feat(desktop): add Windows ARM64 desktop builds (#13032)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-15 17:24:55 +00:00
Jamison LahmanandClaude Fable 5 baeff0a226 feat(llms): automate recommended-models.json updates from OpenRouter catalog (#12864)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-14 01:00:08 +00:00
Justin Tahara fd7fc86e24 ci(craft-k8s): scope the helm trigger to sandbox/craft chart paths (#12957) 2026-07-13 20:19:38 +00:00
dependabot[bot] 6e474c52ba chore(deps): bump runs-on/action from 2.1.2 to 2.2.0 (#12947)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 19:38:56 +00:00
dependabot[bot] 1a64001ada chore(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2 (#12948)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 19:38:28 +00:00
dependabot[bot] b3df465a03 chore(deps): bump docker/bake-action from 7.2.0 to 7.3.0 (#12939)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 19:01:29 +00:00
Jamison LahmanandClaude Fable 5 7b6508e10b ci(dependabot): add Docker update entries for web and backend images (#12932)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-13 18:31:09 +00:00
Jamison Lahman 002eb4e363 ci(helm): require Chart.yaml version bump when chart files change (#12771) 2026-07-13 17:42:17 +00:00
Jamison LahmanandClaude Fable 5 a5316429e4 ci(llm): run provider chat tests on recommended-models.json changes (#12858)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-10 18:41:20 +00:00
Jamison LahmanandClaude Opus 4.8 6eb52135bd fix(ci): add dhi.io login to shared model-server build action + consolidate PR builds (#12852)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-10 17:38:57 +00:00
Nikolas Garza 8a202650cf test(auth): live multi-provider OIDC login against mock-oauth2-server (#12824) 2026-07-10 00:53:45 +00:00
dependabot[bot] f142d12f5c chore(deps): bump docker/login-action from 4.1.0 to 4.3.0 (#12773)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 19:38:48 +00:00
dependabot[bot] 8c944c4f02 chore(deps): bump aws-actions/aws-secretsmanager-get-secrets from 2.0.10 to 3.0.1 (#12772)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 19:18:43 +00:00
dependabot[bot] c00de7120e chore(deps): bump actions/cache from 5.0.5 to 6.1.0 (#12774)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 17:12:58 +00:00
b21ea7f2f1 chore(model-server): build on a Docker Hardened Image (full distroless) (#12636)
Co-authored-by: t <t@t.co>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-09 16:42:19 +00:00
Wenxi 2849c51d0f fix(cli): preserve symbols for govulncheck (#12787) 2026-07-08 19:16:24 +00:00
Jamison LahmanandClaude Opus 4.8 7021473865 feat(ods): dual-format audit output + runbook + non-interactive ignore add (#12747)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-07 20:51:18 +00:00
Jamison LahmanandClaude Opus 4.8 d4280fc91b feat(ods): add ods audit --actions to scan pinned GitHub Actions (#12618)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-06 20:19:25 +00:00
Jamison LahmanandClaude Opus 4.8 007900c62e chore(dev): automate onyx-devtools version upgrade PRs (#12705)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-06 19:23:58 +00:00
Jamison LahmanandClaude Opus 4.8 712ea15b9c chore(dev): upgrade devcontainer image and automate future upgrade PRs (#12704)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-06 19:00:49 +00:00
Wenxi 820ceb7809 ci(skills): trigger craft k8s tests for skill api changes (#12642) 2026-07-01 23:41:49 +00:00
Jamison LahmanandClaude Opus 4.8 83e4a3e597 chore(web): build frontend on a Docker Hardened Image (#12592)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 19:27:08 +00:00
roshanandClaude Opus 4.8 5895337a05 feat(craft): give the agent headless browser use via a built-in browser skill (#12564)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 18:46:01 +00:00
dependabot[bot] 74cfa63dd8 chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#12609)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 18:33:08 +00:00
dependabot[bot] 1fc30ea17f chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 (#12604)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 18:20:37 +00:00
dependabot[bot] 9abcb97278 chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#12599)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 17:59:38 +00:00
Nikolas Garza 98513f3947 fix(ci): gate dispatch-cloud-deployment with always() so it doesn't skip (#12590) 2026-07-01 16:21:50 +00:00
Nikolas Garza 1e8216b4db fix(ci): gate cloud merge jobs on image-audit so they don't skip (#12581) 2026-07-01 15:35:27 +00:00
Jamison LahmanandClaude Opus 4.8 05bc31ba0e chore(deps): upgrade ods: 0.9.2->0.9.4 (#12573)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 21:21:55 +00:00
Jamison LahmanandClaude Opus 4.8 008978ba77 fix(ci): run image-audit on amd64 to match scanned images (#12563)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 19:57:09 +00:00
Jamison LahmanandClaude Opus 4.8 ffec079a6f feat(ods): add ods audit image and replace Trivy image scanning (#12547)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 02:09:52 +00:00
Jamison LahmanandClaude Opus 4.8 bb3b227a3f chore(deps): upgrade uv 0.9.9 -> 0.11.25 and digest-pin the image (#12520)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 18:55:13 +00:00
Jamison Lahman 62fd63e7ae chore(deploy): re-enable model-server sbom and provenance (#12521) 2026-06-29 18:47:47 +00:00
Jamison LahmanandClaude Opus 4.8 703b9bcec1 feat(ods): add dependency vulnerability audit command (#12476)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-26 21:05:07 +00:00
WenxiandClaude Opus 4.8 87f2e9670e chore(craft): real k8s integration tests (#12221)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-26 20:22:43 +00:00
Wenxi 1223ca3a00 ci(craft): run k8s integration tests against helm-installed onyx (#12470) 2026-06-26 19:37:21 +00:00
Jamison LahmanandClaude Opus 4.8 e8534c1503 fix(deployment): read release id from create response to avoid list race (#12471)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-26 19:25:26 +00:00
Wenxi 7059bb5f1f ci(craft): shard compose integration tests (#12465) 2026-06-26 17:33:08 +00:00
Wenxi a112b48f08 feat(craft): make sandbox timing knobs configurable (#12432) 2026-06-25 18:24:32 +00:00
Wenxi d81d23f724 test(craft): run compose API contract tests (#12392) 2026-06-24 21:17:20 +00:00
dependabot[bot] 6bda1ace83 chore(deps): bump actions/cache from 5.0.4 to 5.0.5 (#11907)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 20:10:39 +00:00
dependabot[bot] 17b31fd15f chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#12380)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 19:36:04 +00:00