All pull requests

Pull requests

• build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3

  cidependencies
  #1451·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• feat(api): server.pools_read_only locks tenant pool writes and confines undefined pools

  #1440·neochaotic opened Oct 5, 2026Collaborator·9 tasks done·

  ·

  · v0.5.1
  

• [release-0.5] fix(executor): keep task-pod and staging label values within the 63-character limit (#1320)

  #1438·neochaotic opened Oct 5, 2026Collaborator·

  ·
  

• chore(deps): bump the minor-and-patch group across 1 directory with 16 updates

  dependenciesgo
  #1430·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• fix(executor): stop a started task pod in place on reap so its outcome record survives (ADR 0052 B2)

  #1408·neochaotic opened Oct 4, 2026Collaborator·8 of 9 tasks·

  ·

  · v0.5.2
  1

  

• fix(storage): keep every tenant's built-in role ladder in step with default (#1305)

  #1384·neochaotic opened Oct 4, 2026Collaborator·9 tasks done·

  ·
  1

  

• fix(api): send refused trusted-issuer handoffs back to the external sign-in

  #1378·neochaotic opened Oct 4, 2026Collaborator·9 tasks done·

  ·
  

• fix(executor): drop and refuse DAG pod metadata under the reserved leoflow.io/ prefix

  #1376·neochaotic opened Oct 4, 2026Collaborator·9 tasks done·

  ·
  

• feat(executor): optional operator executor policy enforced at dispatch (ADR 0063, slice 1)

  #1372·neochaotic opened Oct 4, 2026Collaborator·9 tasks done·

  ·
  

• fix(alerts): keep the webhook URL out of alert send errors

  #1370·neochaotic opened Oct 4, 2026Collaborator·9 tasks done·

  ·
  

• docs(adr): 0064 Airflow 3 branching and skip (accepted)

  skip-changelog
  #1368·neochaotic opened Oct 4, 2026Collaborator·5 of 9 tasks·

  ·

  · v0.5.2
  1

  

• DO NOT MERGE: CI run of all performance PRs combined

  #1366·neochaotic opened Oct 4, 2026Collaborator·8 of 9 tasks·

  ·

• docs(adr): 0063 operator executor policy for task pods (proposed)

  skip-changelog
  #1365·neochaotic opened Oct 4, 2026Collaborator·3 of 6 tasks·

  ·

  · v0.5.2
  

• feat(retention): opt-in, leader-only, batched retention janitor

  #1351·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• perf(scheduler): promote in the same tick and wake on task completion

  #1341·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• feat(observability): configurable trace sampling and probe span skip

  #1337·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• feat(server): configurable read and idle timeouts for the HTTP listeners

  #1333·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• feat(api): gzip large JSON and NDJSON responses behind a gate

  #1331·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• perf(executor): event-driven warm pool refill from a warm pod informer with bounded parallel creates

  enhancement
  #1329·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• perf(api): cap list page sizes behind a gate and skip unused run counts

  #1328·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• fix(executor): size warm pods like dedicated pods and route placed or larger tasks to a dedicated pod

  bug
  #1325·neochaotic opened Oct 2, 2026Collaborator·9 tasks done·

  ·

  · v0.5.2

• chore(deps): bump aquasecurity/trivy-action from d2a0b60797ff03db6132bd4e2b293f9b37081297 to c03d123cb480c08c69b054af418ea5e69fe6e57e

  cidependencies
  #1276·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.4.1

  cidependencies
  #1275·dependabot[bot] opened Oct 1, 2026Bot·

  ·