vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-22 06:40:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 12
Pulse/scripts/installtests
History
Exact
rcourtman 02e53bc777 build: move to Go 1.26.10 and Vite 6.4.5 for October advisories 
Go 1.26.10 (20 October) distrusts the compromised eMudhra intermediate
CAs in crypto/x509 (CVE-2026-111943). Binaries built with 1.26.9 still
accept chains through them, so every verified outbound TLS connection
Pulse makes (licence, updates, webhooks, AI providers) stays open to
interception by a holder of those keys. govulncheck does not flag a
trust-store change as a called symbol, so the scheduled scan stayed
green while the gap existed.

Advance the governed toolchain floor and every pin together: go.mod,
the toolchain installer and release-script guards, the source-built
container stages (manifest-list digests for golang:1.26.10-alpine and
the Debian dev container image), the root-pair diagnostic, and their
tests.

Vite 6.4.3 bundles a launch-editor with three advisories
(GHSA-587h-7wmj-h5pm, GHSA-r825-w8mm-5pxw, GHSA-698v-4r3x-3vcv) that
failed the daily advisory watch. 6.4.4 bundles the fixed launch-editor
and 6.4.5 adds the dev-server server.fs query check. Both reach only
the local dev server, not the built product. The lockfile changes only
the vite entry, and dependencySecurity.test.ts now pins the floor.
2026-10-21 15:19:02 +01:00
..
nasfixturecollector Use a native-built inert collector in NAS watchdog controls 2026-10-13 15:20:17 +01:00
testdata Normalise the authored release-note fixture's final newline 2026-10-01 08:14:42 +01:00
windowslifecycleserver Extract the transport-independent action lifecycle service 2026-07-10 11:06:55 +01:00
agent_id_recovery_unix_test.go Reject corrupt legacy installer agent identities 2026-10-07 22:09:51 +01:00
agent_legacy_teardown.py Retain SCALE agent recovery until every boot task is retired 2026-10-12 18:02:24 +01:00
agent_nas_teardown.py Make native NAS cleanup proof portable and observable 2026-10-14 22:46:41 +01:00
agent_openrc_teardown.py Retain SCALE agent recovery until every boot task is retired 2026-10-12 18:02:24 +01:00
agent_removal_systemd.py Check agent removal against native hosted systemd 2026-10-12 06:08:07 +01:00
agent_state_dir_lifecycle_test.go Restore Windows installer test compilation 2026-09-02 02:28:14 +01:00
agent_systemd_teardown.py Keep integration safety fixtures aligned with reviewed source 2026-10-12 08:51:49 +01:00
agent_truenas_teardown.py Merge pending maintenance repairs with current main 2026-10-18 15:11:28 +01:00
agent_uninstall_state.py Retain SCALE agent recovery until every boot task is retired 2026-10-12 18:02:24 +01:00
agent_upstart_teardown.py Merge pending maintenance repairs with current main 2026-10-18 15:11:28 +01:00
api_guidance_test.go Bind copied API guidance tests to named request contracts 2026-10-10 06:56:16 +01:00
auto_update_intent_test.go Preserve auto-update consent during manual version changes 2026-10-01 11:50:33 +01:00
auto_update_systemd.py Preserve native updater failures across cleanup 2026-10-14 09:16:19 +01:00
backfill_release_assets_test.go Add historical release asset backfill workflow 2026-04-22 17:25:58 +01:00
build_release_assets_test.go build: move to Go 1.26.10 and Vite 6.4.5 for October advisories 2026-10-21 15:19:02 +01:00
container_cpu_guidance_test.go Explain container CPU scales and passive comparisons 2026-10-05 12:13:26 +01:00
container_dependency_contract_test.go Keep publication checks independent of selector and fixture formatting 2026-10-04 06:41:04 +01:00
demo_reachability_test.go Stop demo diagnostics at failed tailnet readiness 2026-10-01 17:36:26 +01:00
demo_transaction_test.go Keep demo installation proof aligned with signed runtime operation 2026-10-03 03:15:20 +01:00
dependency_update_test.go build: refresh Node 24 builder digest 2026-09-23 18:46:18 +01:00
docker_entrypoint_test.go Refresh Pulse 6.1 RC1 mobile evidence 2026-07-13 19:41:41 +01:00
guidance_recipe_runner_test.go Separate copied-guidance preparation, request and cleanup deadlines 2026-10-05 05:39:25 +01:00
helm_openshift_docs_contract_test.go Keep integration safety fixtures aligned with reviewed source 2026-10-12 08:51:49 +01:00
install_docker_sh_test.go fix(release): accept cumulative prerelease changelog bases 2026-10-13 23:32:10 +01:00
install_mcp_test.go Restore delivery qualification trust 2026-08-31 03:02:13 +01:00
install_ps1_test.go fix(ci): qualify the Actions patch and minor refresh 2026-10-14 17:38:18 +01:00
install_sh_qnap_data_volume_test.go Run the QNAP agent from the data volume instead of the RAM-backed root 2026-08-21 06:35:52 +01:00
install_sh_test.go Bound native fixture controls independently 2026-10-18 15:40:55 +01:00
integration_container_test.go build: move to Go 1.26.10 and Vite 6.4.5 for October advisories 2026-10-21 15:19:02 +01:00
manual_update_channel_test.go Bind parsed manual channels through installer execution 2026-10-07 19:23:46 +01:00
msp_diagnostic_guidance_test.go Make MSP isolation checks credential-safe and TLS-verified 2026-10-04 20:20:06 +01:00
native_agent_frontend_test.go fix(ci): qualify the Actions patch and minor refresh 2026-10-14 17:38:18 +01:00
native_agent_removal_test.go Check agent removal against native hosted systemd 2026-10-12 06:08:07 +01:00
native_guidance_tools_test.go Observe NAS removal controls before native frontend preparation 2026-10-13 11:14:52 +01:00
native_helper_workflow_test.go Keep integration safety fixtures aligned with reviewed source 2026-10-12 08:51:49 +01:00
native_installer_fixture_tools_test.go Merge pending maintenance repairs with current main 2026-10-18 15:11:28 +01:00
native_installer_triggers_test.go Admit server upgrade changes to the existing native checks 2026-10-11 19:28:37 +01:00
native_pve_action_qualification_test.go Add native PVE action qualification harness 2026-09-01 10:43:35 +01:00
native_unix_contract_runner_test.go Share native installer execution controls with script smoke tests 2026-10-18 17:55:06 +01:00
native_windows_exit_test.go Require truthful PowerShell 5.1 Windows lifecycle acceptance 2026-10-08 07:49:10 +01:00
pbs_api_guidance_test.go Separate copied-guidance preparation, request and cleanup deadlines 2026-10-05 05:39:25 +01:00
private_bootstrap_test.go Keep Proxmox bootstrap credentials out of copied commands 2026-10-01 05:23:08 +01:00
provider_msp_deploy_test.go build: move to Go 1.26.10 and Vite 6.4.5 for October advisories 2026-10-21 15:19:02 +01:00
provider_msp_startup_command_test.go Restore native installer compilation and frontend style gates 2026-10-11 20:51:38 +01:00
provider_msp_startup_test.go Integrate reviewed startup readback and native compilation controls 2026-10-11 21:58:36 +01:00
pulse_auto_update_consent_test.go Require executable version evidence after unattended updates 2026-10-07 20:04:44 +01:00
pulse_auto_update_download_test.go Bound unattended installer downloads before signed execution 2026-10-13 22:15:02 +01:00
pulse_auto_update_test.go Bound native fixture controls independently 2026-10-18 15:40:55 +01:00
python_fixture_controls_test.go Bound native fixture controls independently 2026-10-18 15:40:55 +01:00
release_ldflags_test.go Require signed unified agent release assets 2026-04-22 02:00:29 +01:00
release_notes_contract_test.go Keep authored release notes compatible with safety checks 2026-10-01 05:28:54 +01:00
root_install_sh_test.go Stage server update archives on the install filesystem, not /tmp 2026-10-16 23:49:36 +01:00
run_unix_contracts.py Give every native installer check its own process budget 2026-10-18 17:17:52 +01:00
safe_profile_migration_test.go Preserve partial PVE filesystem readings without widening helper access 2026-10-05 18:22:01 +01:00
secure_runtime_platform_matrix_test.go Reconcile validation with accepted helper guidance and Helm recovery 2026-10-14 18:22:04 +01:00
secure_runtime_rootful_qualification_test.go Tighten rootful runtime cleanup proof 2026-09-02 02:52:13 +01:00
secure_runtime_rootless_qualification_test.go Give rootless qualification hosts unique identities 2026-09-01 21:18:24 +01:00
secure_runtime_systemd_lab_test.go Use portable helper network canary 2026-09-01 18:48:52 +01:00
server_removal_safety_test.go Refuse server removal until affected units are quiescent 2026-10-07 23:15:53 +01:00
server_reset_safety_test.go fix(installer): contain destructive reset and bind lifecycle proofs 2026-10-08 02:49:30 +01:00
temperature_guidance_test.go Check local-only temperature cleanup instead of retired SSH guidance 2026-10-09 11:42:50 +01:00
truenas_api_guidance_test.go Keep optional TrueNAS parent controls independent of other proof inputs 2026-10-04 21:31:04 +01:00
umask_unix_test.go Pin umask 022 in installtests so trust fixtures are host-independent 2026-09-01 22:20:15 +01:00
uninstall_sensor_proxy_safety_test.go Stop legacy sensor cleanup on unconfirmed service or container state 2026-10-07 22:07:07 +01:00
uninstall_sensor_proxy_test.go Stop legacy sensor cleanup on unconfirmed service or container state 2026-10-07 22:07:07 +01:00
windows_agent_lifecycle.ps1 Require truthful PowerShell 5.1 Windows lifecycle acceptance 2026-10-08 07:49:10 +01:00
windows_lifecycle_observation_controls.ps1 Remove trailing whitespace from Windows lifecycle controls 2026-10-08 08:23:47 +01:00
windows_native_acceptance_test.go Repair native installer CI portability without weakening safety 2026-10-09 15:55:04 +01:00
windows_service_removal_controls.ps1 Repair native installer CI portability without weakening safety 2026-10-09 15:55:04 +01:00