hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions
247 commits 41 branches 10 tags 34 MiB
Commit graph

247 commits

This branch
This branch
All branches
Author SHA1 Message Date
Conrad Kramer
640d4693ac Sign Sparkle appcasts in Python
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Successful in 3m4s
Details
Build Rust / Cargo Test (push) Successful in 4m5s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 16:56:18 -07:00
Conrad Kramer
1ef6fedeaf Seal Burrow Sparkle release key
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m2s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 16:35:07 -07:00
Conrad Kramer
1d45016a63 Use Sparkle signer for full appcasts
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 16:13:53 -07:00
Conrad Kramer
a84922f4f3 Fix rcodesign notary key output
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m2s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 15:53:15 -07:00
Conrad Kramer
4f765df2a9 Handle raw Google KMS signatures
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m2s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 15:34:24 -07:00
Conrad Kramer
6867f26f19 Accept Developer ID G2 certificates
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 15:16:01 -07:00
Conrad Kramer
e5da3016ea Avoid project config during WIF auth
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m3s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 14:47:31 -07:00
Conrad Kramer
65809da33a Map WIF runner client from audience
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 14:15:59 -07:00
Conrad Kramer
5276b57c4d Fix WIF provider groups mapping
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 13:54:02 -07:00
Conrad Kramer
51f34c9a64 Use client-only WIF runner grants
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m0s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 6s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 13:34:53 -07:00
Conrad Kramer
e7c0442a12 Fix Authentik WIF client credentials
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Successful in 2m46s
Details
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 13:07:34 -07:00
Conrad Kramer
8180c3c35a Fix Authentik WIF token endpoint
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m8s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 12:33:39 -07:00
Conrad Kramer
5ef4fdef64 Remove Python dependency from secret decrypt
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m59s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 12:13:20 -07:00
Conrad Kramer
ef7023f9be Prefer age for release secret decrypt
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Has been cancelled
Details
Build Rust / Cargo Test (push) Successful in 4m0s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 11:56:04 -07:00
Conrad Kramer
83da429854 Make release secret decrypt find Nix tools
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Successful in 3m6s
Details
Build Rust / Cargo Test (push) Successful in 4m2s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 11:35:37 -07:00
Conrad Kramer
ec407be894 Use Forgejo-compatible artifact actions
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 10:57:05 -07:00
Conrad Kramer
ddbfa47587 Pass Apple Rust build tools into Bazel actions
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m5s
Details
Build Site / Next.js Build (push) Failing after 6s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 10:45:30 -07:00
Conrad Kramer
5150faad99 Move macOS Bazel cache outside checkout
Some checks failed
Build: Android / Android Rust Core Stub (push) Failing after 22s
Details
Build Site / Next.js Build (push) Waiting to run
Details
Lint Governance / BEP Metadata (push) Waiting to run
Details
Build Rust / Cargo Test (push) Has been cancelled
Details
2026-06-07 10:34:44 -07:00
Conrad Kramer
8e95014840 Fix CI toolchain selection
Some checks failed
Build Site / Next.js Build (push) Waiting to run
Details
Lint Governance / BEP Metadata (push) Waiting to run
Details
Cache: Publish Nix / Publish Nix Cache (push) Failing after 20s
Details
Build Rust / Cargo Test (push) Has been cancelled
Details
2026-06-07 10:26:14 -07:00
Conrad Kramer
06375ba328 Skip Namespace remote cache probe on macOS
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
Build: Android / Android Rust Core Stub (push) Failing after 23s
Details
2026-06-07 10:03:09 -07:00
Conrad Kramer
4a1ea9b471 Run Apple cache setup outside Nix shell
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m0s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 09:57:54 -07:00
Conrad Kramer
2da04bc317 Make Namespace cache setup fail open
Some checks failed
Build: Android / Android Rust Core Stub (push) Failing after 22s
Details
Build Rust / Cargo Test (push) Successful in 4m3s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 09:51:35 -07:00
Conrad Kramer
dba641035b Guard macOS Namespace fallback retries
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Failing after 21s
Details
Build Rust / Cargo Test (push) Successful in 5m44s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 09:27:23 -07:00
Conrad Kramer
e882a16dad Move Apple tester workflow to fresh runner labels
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Details
Build Rust / Cargo Test (push) Successful in 5m51s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 09:12:37 -07:00
Conrad Kramer
4f8d58965b Extend Namespace dispatcher timeout
Some checks failed
Build Rust / Cargo Test (push) Successful in 5m47s
Details
Cache: Publish Nix / Publish Nix Cache (push) Failing after 20s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 09:05:05 -07:00
Conrad Kramer
4d7c19e593 Wait for Namespace runner terminal state
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Details
Build Rust / Cargo Test (push) Successful in 5m47s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 08:57:28 -07:00
Conrad Kramer
de32d8390e Use repo-built Forgejo Namespace services
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Failing after 26s
Details
Build Rust / Cargo Test (push) Successful in 5m50s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 08:48:05 -07:00
Conrad Kramer
6b9065008d Use writable macOS runner workdir
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Details
Build Rust / Cargo Test (push) Successful in 4m42s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 08:42:45 -07:00
Conrad Kramer
4e31d54a45 Make version helper CI-safe
Some checks failed
Build Site / Next.js Build (push) Waiting to run
Details
Lint Governance / BEP Metadata (push) Waiting to run
Details
Build Rust / Cargo Test (push) Has been cancelled
Details
2026-06-07 08:39:00 -07:00
Conrad Kramer
0a35d62e14 Fix Namespace macOS runner shape
Some checks failed
Build Site / Next.js Build (push) Waiting to run
Details
Lint Governance / BEP Metadata (push) Waiting to run
Details
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Details
Build Rust / Cargo Test (push) Has been cancelled
Details
2026-06-07 08:35:26 -07:00
Conrad Kramer
a4db952d3f Fix Namespace Apple runner dispatch
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m15s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
Cache: Publish Nix / Publish Nix Cache (push) Failing after 20s
Details
2026-06-07 08:26:23 -07:00
Conrad Kramer
212b129c31 Add focused Apple tester distribution workflow
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m0s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 07:52:30 -07:00
Conrad Kramer
126af6b5cf Wire Apple KMS release signing
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Details
Build Rust / Cargo Test (push) Successful in 11m0s
Details
Build Site / Next.js Build (push) Failing after 5s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 07:28:48 -07:00
Conrad Kramer
ed73d7d16a Fix Nix cache bootstrap command
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Details
Build Rust / Cargo Test (push) Successful in 4m40s
Details
Build Site / Next.js Build (push) Failing after 6s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 06:03:14 -07:00
Conrad Kramer
0faaa806b6 Fix Forge Namespace runner scope
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Details
Build Rust / Cargo Test (push) Has started running
Details
Build Site / Next.js Build (push) Failing after 6s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
2026-06-07 05:58:28 -07:00
Conrad Kramer
002bd382e9 Wire Forge-native release infrastructure
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Details
Build Rust / Cargo Test (push) Successful in 4m14s
Details
Build Site / Next.js Build (push) Failing after 6s
Details
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 5s
Details
Lint Governance / BEP Metadata (push) Successful in 0s
Details
Build: Android / Android Rust Core Stub (push) Failing after 23s
Details
2026-06-07 05:51:12 -07:00
Conrad Kramer
97c569fb35 Align GTK app with Apple home surface
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m50s
Details
Build Site / Next.js Build (push) Failing after 2s
Details
Lint Governance / BEP Metadata (push) Successful in 0s
Details 
Add the GTK home screen, local account store, daemon gRPC wrapper, and embedded Linux daemon startup path so the Linux app follows the Apple client UX and daemon boundary.

Document the GTK parity expectations and update the daemon IPC and Tailnet BEPs with the cross-platform client model.
 2026-05-03 17:36:55 -07:00
Conrad Kramer
9244a0476a Fix Zulip SAML provisioning 2026-04-19 14:48:16 -07:00
Conrad Kramer
7540110713 Wait for Zulip supervisor before nginx patching 2026-04-19 14:09:26 -07:00
Conrad Kramer
836ccc93cd Patch Zulip uwsgi scheme at runtime 2026-04-19 14:04:42 -07:00
Conrad Kramer
6cd0f3b1ae Fix Zulip SAML callback scheme handling 2026-04-19 13:59:01 -07:00
Conrad Kramer
eb9327a99f Map Burrow admins to Zulip owners
Some checks failed
Build Site / Next.js Build (push) Failing after 2s
Details
Lint Governance / BEP Metadata (push) Successful in 0s
Details
Build Rust / Cargo Test (push) Successful in 4m2s
Details
2026-04-19 03:43:57 -07:00
Conrad Kramer
5598fc18fc Enable Zulip SAML auto signup 2026-04-19 03:37:42 -07:00
Conrad Kramer
78d83c5079 Pin Zulip SAML ACS to https
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m55s
Details
Build Site / Next.js Build (push) Failing after 2s
Details
Lint Governance / BEP Metadata (push) Successful in 0s
Details
2026-04-19 01:49:25 -07:00
Conrad Kramer
4c3dcdd17b Force https-only Zulip SAML login 2026-04-19 01:43:43 -07:00
Conrad Kramer
2af7618f52 Fix tailscale landing and zulip bootstrap
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m55s
Details
Build Site / Next.js Build (push) Failing after 2s
Details
Lint Governance / BEP Metadata (push) Successful in 0s
Details
2026-04-19 01:31:45 -07:00
Conrad Kramer
142c2ef778 Allow postgres bootstrap to read generated SQL 2026-04-19 01:22:32 -07:00
Conrad Kramer
2ef804fa10 Use runuser for Zulip Postgres bootstrap 2026-04-19 01:20:55 -07:00
Conrad Kramer
601bedcc59 Fix Zulip Postgres bootstrap runtime 2026-04-19 01:19:01 -07:00
Conrad Kramer
42df7b5618 Run Zulip on host-managed services 2026-04-19 01:11:37 -07:00