2025-08-18 - 2026-08-18
Overview
27 Pull requests merged by 2 users
Merged
#88 Configure prettier and make fmt-check cover markdown (closes #69)
Merged
#59 Update golangci-lint to v2.12.2 with canonical config (closes #60)
Merged
#58 scripts-to-rule-them-all
Merged
#57 TODO
Merged
#56 move to standardized repo policies
Merged
#54 Add TODO section to README with 1.0 roadmap, remove TODO.md
Merged
#53 Add Gitea Actions CI workflow
Merged
#51 Add REPO_POLICIES.md, rename CLAUDE.md to AGENTS.md, deduplicate
Merged
#52 Remove committed .index.mf and add to .gitignore
Merged
#45 Split Dockerfile: pre-built golangci-lint stage for faster CI
Merged
#44 next
Merged
#36 Add make check target and CI workflow
Merged
#32 1.0 quality polish — code review, tests, bug fixes, documentation
Merged
#28 Add deterministic file ordering in Builder.Build() (closes #23)
Merged
#35 chore: remove committed vendor/modcache archives
Merged
#37 chore: remove stale .drone.yml
Merged
#21 Fix FindExtraFiles reporting manifest and dotfiles as extra (closes #16)
Merged
#19 Fix IsHiddenPath treating current directory as hidden (closes #14)
Merged
#34 fix: update go directive from 1.17 to 1.22 (fixes #33)
Merged
#7 add links to metalink format
Merged
#17 Fix errors.Is with errors.New() never matching in checker (closes #12)
Merged
#18 Fix URL encoding for file paths in fetch command (closes #13)
Merged
#20 Fix newTimestampFromTime panic on extreme dates (closes #15)
Merged
#27 Consolidate scanner/checker — delete internal/scanner/ and internal/checker/ (closes #22)
Merged
#29 Add decompression size limit in deserializeInner() (closes #24)
Merged
#31 Specify and enforce path invariants (closes #26)
Merged
#30 Fix AddFile to verify actual bytes read matches declared size (closes #25)
1 Pull request proposed by 1 user
Proposed
#92 1.0.0 milestone
29 Issues closed from 2 users
Closed
#69 Add .prettierrc/.prettierignore, stop reformatting REPO_POLICIES.md, and make fmt-check cover markdown
Closed
#60 Adopt golangci-lint v2.12.2 and the canonical .golangci.yml
Closed
#47 Design and status review: add TODO section to README for 1.0 release
Closed
#55 Move schema_migrations table creation into 000.sql with INTEGER version column
Closed
#3 Deliverable 3: Golang implementation to spec
Closed
#9 readme is missing build instructions, and build dep installation instructions
Closed
#46 readme out of date with code
Closed
#2 Deliverable 2: Spec document for golang implementation of format
Closed
#1 Deliverable 1: Spec document for file format
Closed
#48 Bring repo up to standards: add REPO_POLICIES, rename CLAUDE.md to AGENTS.md, deduplicate
Closed
#49 Remove committed .index.mf file and add to .gitignore
Closed
#50 Integrate TODO.md items into README TODO section and remove TODO.md
Closed
#10 please provide a detailed and critical design review of this format and implementation
Closed
#39 Split Dockerfile: pre-built golangci-lint stage for faster CI
Closed
#41 Split Dockerfile: pre-built golangci-lint stage for faster CI
Closed
#40 Split Dockerfile: pre-built golangci-lint stage for faster CI
Closed
#42 Split Dockerfile: pre-built golangci-lint stage for faster CI
Closed
#38 Add branch protection to main branch
Closed
#23 Add deterministic file ordering in Builder.Build()
Closed
#16 Bug: FindExtraFiles reports manifest file and dotfiles as extra
Closed
#14 Bug: IsHiddenPath(".") returns true, incorrectly treating current directory as hidden
Closed
#33 CRITICAL: main branch build failure
Closed
#12 Bug: errors.Is with errors.New() never matches in checker file-not-found detection
Closed
#13 Bug: fetch command does not URL-encode file paths, breaking files with special characters
Closed
#15 Bug: newTimestampFromTime panics on dates outside ~1678-2262 due to UnixNano overflow
Closed
#22 Consolidate scanner/checker: delete internal/ duplicates, use mfer/ package
Closed
#24 Add decompression size limit in deserializeInner()
Closed
#26 Specify and enforce path invariants (UTF-8, forward-slash, relative, no traversal)
Closed
#25 Fix AddFile to verify actual bytes read matches declared size
55 Issues created by 1 user
Opened
#10 please provide a detailed and critical design review of this format and implementation
Opened
#12 Bug: errors.Is with errors.New() never matches in checker file-not-found detection
Opened
#13 Bug: fetch command does not URL-encode file paths, breaking files with special characters
Opened
#14 Bug: IsHiddenPath(".") returns true, incorrectly treating current directory as hidden
Opened
#15 Bug: newTimestampFromTime panics on dates outside ~1678-2262 due to UnixNano overflow
Opened
#16 Bug: FindExtraFiles reports manifest file and dotfiles as extra
Opened
#22 Consolidate scanner/checker: delete internal/ duplicates, use mfer/ package
Opened
#23 Add deterministic file ordering in Builder.Build()
Opened
#24 Add decompression size limit in deserializeInner()
Opened
#25 Fix AddFile to verify actual bytes read matches declared size
Opened
#26 Specify and enforce path invariants (UTF-8, forward-slash, relative, no traversal)
Opened
#33 CRITICAL: main branch build failure
Opened
#38 Add branch protection to main branch
Opened
#39 Split Dockerfile: pre-built golangci-lint stage for faster CI
Opened
#40 Split Dockerfile: pre-built golangci-lint stage for faster CI
Opened
#41 Split Dockerfile: pre-built golangci-lint stage for faster CI
Opened
#42 Split Dockerfile: pre-built golangci-lint stage for faster CI
Opened
#46 readme out of date with code
Opened
#47 Design and status review: add TODO section to README for 1.0 release
Opened
#48 Bring repo up to standards: add REPO_POLICIES, rename CLAUDE.md to AGENTS.md, deduplicate
Opened
#49 Remove committed .index.mf file and add to .gitignore
Opened
#50 Integrate TODO.md items into README TODO section and remove TODO.md
Opened
#55 Move schema_migrations table creation into 000.sql with INTEGER version column
Opened
#60 Adopt golangci-lint v2.12.2 and the canonical .golangci.yml
Opened
#61 Validate manifest paths on read, not only on write (path traversal in Checker)
Opened
#62 Enforce real timeouts on gpg subprocess calls
Opened
#63 Harden fetch: client timeout, retry with backoff, url.JoinPath
Opened
#64 Fix -v flag collision between --verbose and --version
Opened
#65 Add fuzz coverage for NewManifestFromReader
Opened
#66 Add real end-to-end tests for the freshen and fetch commands
Opened
#67 Rewrite script/test to the canonical pattern (30s timeout, -race -cover, conditional verbose rerun)
Opened
#68 Pin every developer tool install by hash; make local lint match CI
Opened
#69 Add .prettierrc/.prettierignore, stop reformatting REPO_POLICIES.md, and make fmt-check cover markdown
Opened
#70 Verify Go formatting with gofumpt, not gofmt, so fmt and check agree
Opened
#71 make check must not modify tracked files (ensure_pb regenerates mf.pb.go on mtime)
Opened
#72 Add .editorconfig and make .gitignore comprehensive
Opened
#73 Clean up the Makefile: add make build, remove superseded targets
Opened
#74 Repo root hygiene: move FORMAT.md to docs/, contrib/ to bin/, fix bash script style
Opened
#75 Add the required README sections (Getting Started, Rationale, Design, Author)
Opened
#76 Rewrite the stale TODO tracking in README.md and TODO.md to match reality
Opened
#77 Migrate internal/log from apex/log to log/slog
Opened
#78 Change NewChecker to take a Params struct instead of positional arguments
Opened
#79 DECISION: canonical Go module path for 1.0
Opened
#80 Release mechanics for v1.0.0: version single-sourcing and tag
Opened
#81 DECISION: wire format questions blocking the 1.0 format freeze
Opened
#82 DECISION: signature scheme questions blocking 1.0
Opened
#83 DECISION: public API surface and determinism defaults for 1.0
Opened
#84 Make docs/FORMAT.md a complete, independently-implementable specification
Opened
#85 Stale branch cleanup: three unmerged branches, none worth keeping as-is
Opened
#86 fetch: sanitizePath is purely lexical and does not prevent symlink escape
Opened
#87 Pin CLI error messages through their real call sites, not reconstructed format strings
Opened
#89 script/cibuild reports a green it did not earn: make check is served from Docker cache
Opened
#90 Run all linting in Docker via Dockerfile.lint + script/lint
Opened
#91 TOP PRIORITY: consolidate all open PRs onto one next branch, one PR
Opened
#93 Gitea Actions runner is not picking up jobs: every run since 2026-08-09 is stuck "Waiting to run"