2026-08-05 - 2026-08-12
Overview
12 Pull requests merged by 1 user
Merged
#41 next: accumulated work for the current cycle
Merged
#39 next: accumulated work for the current cycle
Merged
#37 #14: add a Cloudflare Pages _headers file with baseline security headers (closes #14)
Merged
#35 #11: restructure README.md into the canonical section set
Merged
#32 Widen the prettier gate to markdown and CSS everywhere (closes #12)
Merged
#31 Add canonical policy dotfiles, harden both ignore files (closes #8)
Merged
#30 Cache-bust the make check layer via CHECK_EPOCH (closes #23)
Merged
#29 Disable unused taxonomy page kinds (closes #13)
Merged
#27 Pin Hugo to a deliberate, hash-verified v0.164.0 and switch hugo.toml to locale (closes #26, closes #18)
Merged
#24 Run script/lint from script/check (closes #9)
Merged
#22 Hash-pin every external reference in deploy.yml, verified on a real runner (closes #7)
Merged
#17 Hash-pin every external reference in deploy.yml (closes #7)
14 Issues closed from 1 user
Closed
#34 Makefile has no cibuild or precommit shims, so two documented entrypoints have no make target
Closed
#10 DECISION NEEDED: choose the license, then add LICENSE and fix the README License section
Closed
#38 Run all linting in Docker via Dockerfile.lint + script/lint
Closed
#14 Add a Cloudflare Pages _headers file with baseline security headers
Closed
#11 Restructure README.md into the canonical section set
Closed
#12 Widen the prettier gate to cover CSS and all Markdown, not just top-level docs
Closed
#8 Add the canonical policy dotfiles: REPO_POLICIES.md, .editorconfig, .prettierrc, .prettierignore, and extend .gitignore
Closed
#23 script/cibuild can report a green it did not earn: make check is served from Docker cache
Closed
#13 Eliminate the Hugo taxonomy layout warning by disabling unused page kinds
Closed
#18 Hugo deprecation warning: config key languageCode should become locale
Closed
#26 Install Hugo at a deliberate, hash-verified version instead of taking whatever alpine ships
Closed
#19 apk packages installed by script/bootstrap are not hash-pinned
Closed
#9 script/check does not run script/lint, so lint is ungated in CI
Closed
#7 Hash-pin every external reference in .gitea/workflows/deploy.yml
25 Issues created by 1 user
Opened
#7 Hash-pin every external reference in .gitea/workflows/deploy.yml
Opened
#8 Add the canonical policy dotfiles: REPO_POLICIES.md, .editorconfig, .prettierrc, .prettierignore, and extend .gitignore
Opened
#9 script/check does not run script/lint, so lint is ungated in CI
Opened
#10 DECISION NEEDED: choose the license, then add LICENSE and fix the README License section
Opened
#11 Restructure README.md into the canonical section set
Opened
#12 Widen the prettier gate to cover CSS and all Markdown, not just top-level docs
Opened
#13 Eliminate the Hugo taxonomy layout warning by disabling unused page kinds
Opened
#14 Add a Cloudflare Pages _headers file with baseline security headers
Opened
#15 Delete the stale remote branches feat/initial-site and security-audit
Opened
#16 Add a 30-second timeout guard to script/test and script/lint
Opened
#18 Hugo deprecation warning: config key languageCode should become locale
Opened
#19 apk packages installed by script/bootstrap are not hash-pinned
Opened
#20 Artifact actions are pinned on v3 because v4 fails on this Gitea Actions instance
Opened
#21 Deploy container is node 20, which caps wrangler at 4.86.0
Opened
#23 script/cibuild can report a green it did not earn: make check is served from Docker cache
Opened
#25 script/lint exits 0 on render-target collisions, so the signal is printed but not enforced
Opened
#26 Install Hugo at a deliberate, hash-verified version instead of taking whatever alpine ships
Opened
#28 Check image carries the Go toolchain and module cache; drop them from the final layer
Opened
#33 Prettier scope depends on .gitignore to stay out of dot-directories; make the exclusion explicit
Opened
#34 Makefile has no cibuild or precommit shims, so two documented entrypoints have no make target
Opened
#36 README: clone URL is SSH-only, and Entrypoints omits script/precommit and script/projectname
Opened
#38 Run all linting in Docker via Dockerfile.lint + script/lint
Opened
#40 script/lint requires buildx; document the prerequisite
Opened
#42 script/cibuild leaves a dangling image on every run
Opened
#43 TODO.md narrates an agent-tooling directory by vendor name; scrub the prose