3 Commits

Include renames

Author	SHA1	Message	Date
archipelagoandClaude Opus 5	c788dff42d	style: apply cargo fmt so the release gate can run ... The release gate's first real stage is `cargo fmt --check`, and it had 44 diffs across 15 files — enough to abort `create-release.sh` at step 0 before it touched a version number. Some of that drift is mine from the last two days, some predates it in files I never opened (bootstrap.rs, ghost_reaper.rs, openwrt/router.rs), and one is the regenerated fips/app_ports.rs. No behaviour change — rustfmt only. Gate now: 8 of 9 green. The remaining red is cargo-test-weekly exiting 124, which is the 25-minute `timeout` expiring during a cold CARGO_INCREMENTAL=0 rebuild on a loaded node — the tests never started. Not a test failure. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-19 12:38:41 -04:00
archipelagoandClaude Opus 5	bd299318c0	chore(catalog): re-sign the catalog with the new pins, and fix a stale firewall list ... Regenerates both catalogs from the manifests so the 15 pin bumps become real. The catalog overrides on-disk manifests on every node, so until now those bumps were edited but inert. There are two catalogs and regenerating one is not enough: generate-app-catalog.sh writes releases/app-catalog.json (the signed one nodes fetch), while generate-app-catalog.py writes app-catalog/catalog.json and neode-ui/public/catalog.json (the source pair, the second baked into the frontend app store). check-app-catalog-drift.py --release --strict reads the *source* catalog, so regenerating only the release one left it failing and would have aborted the ISO gate at stage 1 — after the signing and tagging were already done. Drift is now 0. The regeneration also rewrote fips/app_ports.rs, which had not been regenerated since the initial open-source import. Diffing the port values rather than the reformat: 36 -> 37, a single addition, **8187 — Alby Hub**. Its port has never been in the FIPS firewall allow-list, and by the same token neither has any app onboarded since that import. Nothing else changed. Catalog signed by the pinned release root and verified with `ceremony verify`; registry trust floor checked before signing, both hosts trusted by the deployed fleet. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-19 12:02:40 -04:00
Archipelago	b67e1527a2	Archipelago — open-source initial import	2026-08-12 10:55:50 +00:00