Record accepted Ubuntu, runner tool direction and updated Roadmap #24

Merged

gitchegumi merged 4 commits from kiyi/owned-image-direction into main 2026-10-06 21:10:28 -05:00

Conversation 1 Commits 4 Files changed 6 +205 -133

kiyi commented 2026-10-05 21:54:20 -05:00

Member

Copy link

Record the owner’s direction to use Homelab-built, scanned and signed workflow job images and application bases. Reconcile architecture, delivery notes, decisions, component status and the Roadmap with verified 2026-10-06 evidence.

Ubuntu is accepted at base-ubuntu-v2026.10.06-r6354 with signed scan evidence. Issue #2 is closed/Done; Python #3 and Node #4 are Ready. The shared tools/main-runner definition in base-images PR30 replaces identical CI/deployment definitions and is planned for homelab/tool-images/main-runner, with code retained in base-images. Both existing labels will use one accepted digest while their worker pools and permissions remain separate. Shared scan support v1.29.0 is published; namespace support in workflows PR79 targets v1.30.0. Tool full-scan acceptance, signed publication and platform adoption remain pending.

Update the locked dependencies for the reported advisories: source-map-js 1.2.1→1.2.2 (CVE-2026-93749) and sharp 0.35.4→0.35.5 with matching native/libvips packages (GHSA-wq5f-xc86-pv6w). No mitigation is introduced.

Validation: npm ci, npm run check and npm run build passed; the public diff was reviewed for secrets and diff checks passed. Latest commit 5f7c501 records the single-image direction and sharp fix with verified kiyi author/committer and dedicated SSH publication. Current hosted checks must pass before merge. Live runner mappings remain unchanged.

Record the owner’s direction to use Homelab-built, scanned and signed workflow job images and application bases. Reconcile architecture, delivery notes, decisions, component status and the Roadmap with verified 2026-10-06 evidence. Ubuntu is accepted at `base-ubuntu-v2026.10.06-r6354` with signed scan evidence. Issue #2 is closed/Done; Python #3 and Node #4 are Ready. The shared `tools/main-runner` definition in base-images PR30 replaces identical CI/deployment definitions and is planned for `homelab/tool-images/main-runner`, with code retained in base-images. Both existing labels will use one accepted digest while their worker pools and permissions remain separate. Shared scan support v1.29.0 is published; namespace support in [workflows PR79](https://git.gitchegumi.com/Homelab/workflows/pulls/79) targets v1.30.0. Tool full-scan acceptance, signed publication and platform adoption remain pending. Update the locked dependencies for the reported advisories: source-map-js 1.2.1→1.2.2 (CVE-2026-93749) and sharp 0.35.4→0.35.5 with matching native/libvips packages (GHSA-wq5f-xc86-pv6w). No mitigation is introduced. Validation: npm ci, npm run check and npm run build passed; the public diff was reviewed for secrets and diff checks passed. Latest commit [5f7c501](https://git.gitchegumi.com/Homelab/Documentation/commit/5f7c50157c78077869b76638e78840a635c70355) records the single-image direction and sharp fix with verified kiyi author/committer and dedicated SSH publication. Current hosted checks must pass before merge. Live runner mappings remain unchanged.

kiyi added 1 commit 2026-10-05 21:54:20 -05:00

docs: record Homelab-owned workflow and build image direction 0393c234a1

kiyi added 1 commit 2026-10-06 15:15:27 -05:00

docs: accept Ubuntu publication and plan runner tool images c7aade26d2

kiyi added 1 commit 2026-10-06 15:25:24 -05:00

docs: reconcile Roadmap after Ubuntu acceptance 23f93f454b

kiyi changed title from Record Homelab-owned workflow and build image direction to Record accepted Ubuntu, runner tool direction and updated Roadmap 2026-10-06 15:29:28 -05:00

kiyi added 1 commit 2026-10-06 18:35:26 -05:00

docs: consolidate runner tool image and update sharp 5f7c50157c

gitchegumi approved these changes 2026-10-06 21:10:24 -05:00

gitchegumi merged commit 97f127fb80 into main 2026-10-06 21:10:28 -05:00

gitchegumi deleted branch kiyi/owned-image-direction 2026-10-06 21:10:28 -05:00

gitchegumi referenced this pull request from a commit 2026-10-06 21:10:30 -05:00

Merge pull request 'Record accepted Ubuntu, runner tool direction and updated Roadmap' (#24) from kiyi/owned-image-direction into main

Sign in to join this conversation.

Reviewers

No reviewers

gitchegumi

Labels

Clear labels

  

app-migration

  

bug

Something is not working

  

ci-cd

  

cluster

  

Documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

gpu

  

invalid

Something is wrong

  

networking

  

question

More information is needed

  

security

  

Storage

  

wontfix

This won't be fixed

No labels

app-migration

bug

ci-cd

cluster

Documentation

duplicate

enhancement

gpu

invalid

networking

question

security

Storage

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Homelab/Documentation!24

No description provided.