Commits

Breadcrumbs

History for

onmain

User selector

All users

Datepicker

All time

Commit history

Commits on Aug 21, 2026

• ci: install with `uv sync --locked`, finishing the CQ-09 lockfile gate (#191)

  ChelseaKR

  authored
  3d2d7e2View commit details

  Copy full SHA for 3d2d7e2

  View code at this pointBrowse repository at this point

• funding: this project takes no money, and now says so in one place (#189)

  ChelseaKR

  authored
  37245ebView commit details

  Copy full SHA for 37245eb

  View code at this pointBrowse repository at this point

• build(deps): bump the codeql-action group across 1 directory with 3 updates (#196)

  dependabot[bot]

  authored
  358e493View commit details

  Copy full SHA for 358e493

  View code at this pointBrowse repository at this point

• build(deps): bump trufflesecurity/trufflehog from 3.96.0 to 3.97.0 (#197)

  dependabot[bot]

  authored
  c247bc2View commit details

  Copy full SHA for c247bc2

  View code at this pointBrowse repository at this point

• build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 (#198)

  dependabot[bot]

  authored
  0bd643cView commit details

  Copy full SHA for 0bd643c

  View code at this pointBrowse repository at this point

• build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 (#199)

  dependabot[bot]

  authored
  524321aView commit details

  Copy full SHA for 524321a

  View code at this pointBrowse repository at this point

Commits on Aug 17, 2026

• fix(relay): patch the util-linux CVE without breaking the reproducible rebuild (#192)

  Show description for 5c26eda
  ChelseaKR

  authored
  5c26edaView commit details

  Copy full SHA for 5c26eda

  View code at this pointBrowse repository at this point

Commits on Aug 16, 2026

• release: 0.4.0 — cut the release 0.3.0 prepared but never tagged, and make the lockfile gate real (#188)

  Show description for 00a07e0
  

  ChelseaKR

  and

  claude

  authored
  00a07e0View commit details

  Copy full SHA for 00a07e0

  View code at this pointBrowse repository at this point

Commits on Aug 15, 2026

• build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 (#171)

  Show description for b908cbb
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  b908cbbView commit details

  Copy full SHA for b908cbb

  View code at this pointBrowse repository at this point

• build(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 (#170)

  Show description for bf55835
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  bf55835View commit details

  Copy full SHA for bf55835

  View code at this pointBrowse repository at this point

• build(deps): bump the codeql-action group across 1 directory with 3 updates (#169)

  Show description for bfdf0de
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  bfdf0deView commit details

  Copy full SHA for bfdf0de

  View code at this pointBrowse repository at this point

• test(golden): pin packet v4, and fuzz the format we actually emit (#160) (#179)

  Show description for 7ff6b60
  

  ChelseaKR

  and

  claude

  authored
  7ff6b60View commit details

  Copy full SHA for 7ff6b60

  View code at this pointBrowse repository at this point

Commits on Aug 13, 2026

• revert: restore the issue templates that were overwritten (#174)

  Show description for 27e40fa
  ChelseaKR

  authored
  27e40faView commit details

  Copy full SHA for 27e40fa

  View code at this pointBrowse repository at this point

• chore: add issue templates so reporters are not handed a blank box (#173)

  Show description for d8ab8b0
  ChelseaKR

  authored
  d8ab8b0View commit details

  Copy full SHA for d8ab8b0

  View code at this pointBrowse repository at this point

Commits on Aug 12, 2026

• fix(security): the weekly secret scan has been scanning zero commits (#172)

  Show description for bcbeb60
  ChelseaKR

  authored
  bcbeb60View commit details

  Copy full SHA for bcbeb60

  View code at this pointBrowse repository at this point

Commits on Aug 8, 2026

• fix(ci): give gh release create the repo via GH_REPO (#165)

  Show description for 7943b2b
  

  ChelseaKR

  and

  claude

  authored
  7943b2bView commit details

  Copy full SHA for 7943b2b

  View code at this pointBrowse repository at this point

• build(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#156)

  Show description for af6327e
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  af6327eView commit details

  Copy full SHA for af6327e

  View code at this pointBrowse repository at this point

Commits on Aug 1, 2026

• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#149)

  Show description for 12aa96d
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  12aa96dView commit details

  Copy full SHA for 12aa96d

  View code at this pointBrowse repository at this point

• build(deps): bump trufflesecurity/trufflehog from 3.95.9 to 3.96.0 (#148)

  Show description for f027486
  dependabot[bot]

  authored
  f027486View commit details

  Copy full SHA for f027486

  View code at this pointBrowse repository at this point

• build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#150)

  Show description for 7b253bd
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  7b253bdView commit details

  Copy full SHA for 7b253bd

  View code at this pointBrowse repository at this point

• build(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#151)

  Show description for 402201b
  dependabot[bot]

  authored
  402201bView commit details

  Copy full SHA for 402201b

  View code at this pointBrowse repository at this point

• ci: correct the CodeQL version comment and pin to v4.37.4 (#147)

  Show description for 50b299c
  

  ChelseaKR

  and

  claude

  authored
  50b299cView commit details

  Copy full SHA for 50b299c

  View code at this pointBrowse repository at this point

Commits on Jul 31, 2026

• build(deps): bump github/codeql-action/upload-sarif (#138)

  Show description for 09d1270
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  09d1270View commit details

  Copy full SHA for 09d1270

  View code at this pointBrowse repository at this point

• build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#137)

  Show description for e0ecf9d
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  e0ecf9dView commit details

  Copy full SHA for e0ecf9d

  View code at this pointBrowse repository at this point

• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#136)

  Show description for 80a7679
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  80a7679View commit details

  Copy full SHA for 80a7679

  View code at this pointBrowse repository at this point

• build(deps): bump github/codeql-action/init from 4.37.0 to 4.37.3 (#134)

  Show description for ff017f0
  

  3 peopleauthored
  ff017f0View commit details

  Copy full SHA for ff017f0

  View code at this pointBrowse repository at this point

• fix: harden release publication flow (#145)

  Show description for d00129d
  ChelseaKR

  authored
  d00129dView commit details

  Copy full SHA for d00129d

  View code at this pointBrowse repository at this point

Commits on Jul 23, 2026

• Prepare v0.3.0 release

  ChelseaKR

  committed
  8f00337View commit details

  Copy full SHA for 8f00337

  View code at this pointBrowse repository at this point

Commits on Jul 20, 2026

• docs(quality): check in the root Definition of Done and complete the PR template (P2-2) (#131)

  Show description for 7c61721
  

  ChelseaKR

  and

  claude

  authored
  7c61721View commit details

  Copy full SHA for 7c61721

  View code at this pointBrowse repository at this point

Commits on Jul 17, 2026

• ci: lean Actions per CI-CD-STANDARD §11 — trigger scope, concurrency-cancel, docs-skip (#129)

  Show description for 259b402
  

  ChelseaKR

  and

  claude

  authored
  259b402View commit details

  Copy full SHA for 259b402

  View code at this pointBrowse repository at this point

• build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#117)

  Show description for e82f0f9
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  e82f0f9View commit details

  Copy full SHA for e82f0f9

  View code at this pointBrowse repository at this point

• build(deps): bump trufflesecurity/trufflehog from 3.95.8 to 3.95.9 (#116)

  Show description for 3cec051
  

  dependabot[bot]

  and

  ChelseaKR

  authored
  3cec051View commit details

  Copy full SHA for 3cec051

  View code at this pointBrowse repository at this point

• feat: open bounded review cohort

  Show description for 6d2043d
  ChelseaKR

  committed
  6d2043dView commit details

  Copy full SHA for 6d2043d

  View code at this pointBrowse repository at this point

Commits on Jul 11, 2026

• fix(ci): provision archive-capable Buildx

  Show description for 8c55c6d
  ChelseaKR

  committed
  8c55c6dView commit details

  Copy full SHA for 8c55c6d

  View code at this pointBrowse repository at this point

• fix(ci): use supported Docker archive exporter

  Show description for 4391485
  ChelseaKR

  committed
  4391485View commit details

  Copy full SHA for 4391485

  View code at this pointBrowse repository at this point