2026-08-05 - 2026-08-12
Overview
15 Pull requests merged by 1 user
Merged
#111 Gate prune's local-cleanup prose on --json, and give make build a rule
Merged
#109 Suppress the startup banner under --json (closes #106)
Merged
#107 Send diagnostics to stderr and stop dropping log attributes (closes #82, closes #97)
Merged
#104 Make the tagged-release path work on Gitea (closes #65)
Merged
#102 Isolate the lint cache per worktree and context-gate the native lint path
Merged
#98 Make the test gate unfakeable and stop test-integration lying (closes #93)
Merged
#95 Record the stale-branch triage and advance TODO.md (closes #71)
Merged
#92 Make a missing CHECK_EPOCH fail the build instead of faking it (closes #91)
Merged
#89 Make script/cibuild unable to report an unearned green (closes #85)
Merged
#86 Correct the Vaultik.UI doc comment about --cron (closes #84)
Merged
#83 List remote snapshots without requiring the private key (closes #64)
Merged
#79 Run the linter at the pinned version locally too (closes #78)
Merged
#77 Finish the lint remediation: script/cibuild exits 0 (closes #61)
Merged
#62 Update golangci-lint to v2.12.2 with canonical config
Merged
#60 Add .editorconfig (refs #59)
1 Pull request proposed by 1 user
Proposed
#114 next: accumulated work for the upcoming release
22 Issues closed from 1 user
Closed
#103 Two fail-closed defects in the new lint isolation
Closed
#88 golangci-lint cache is shared across worktrees, so lint results can come from another tree
Closed
#110 make build exits 0 without building anything
Closed
#108 pruneLocalSnapshots writes prose to stdout unconditionally, so prune --json | jq still fails after the banner fix
Closed
#106 Startup banner goes to stdout and --json does not suppress it, so every --json document is preceded by three lines of prose
Closed
#97 TTYHandler silently discards log.With attributes, so diagnostics differ between terminal and CI
Closed
#82 Logger writes to stdout, so any warning corrupts --json output
Closed
#65 Make the tagged-release path actually work on Gitea
Closed
#99 script/lint shares one golangci-lint cache across worktrees, so one tree's findings are served for another
Closed
#80 Harden the pinned-linter gate: context-gate the native path, and make bootstrap yield a working machine
Closed
#93 script/test omits -count=1, so Go's test cache can satisfy the gate without running tests
Closed
#69 make test-integration is a silent no-op — no file carries the integration build tag
Closed
#81 The unencrypted manifest publishes backup timestamps and a per-blob size profile
Closed
#100 golangci-lint warns on every run: gomodguard is deprecated, replaced by gomodguard_v2
Closed
#71 Triage the 15 stale remote branches; two may contain unlanded fixes
Closed
#91 Adopt the remaining upstream CHECK_EPOCH hardening (expanded form, unset guard, unique epoch, script/docker)
Closed
#85 script/cibuild reports a green it did not earn when the tree is unchanged
Closed
#84 Vaultik.UI doc comment misdescribes how --cron suppresses output
Closed
#64 snapshot list must list remote snapshots without requiring the private key
Closed
#78 make lint does not use the pinned linter version, so local green does not mean CI green
Closed
#59 Add .editorconfig and the standard .golangci.yml
Closed
#61 Remediate lint findings surfaced by the standard .golangci.yml
39 Issues created by 1 user
Opened
#61 Remediate lint findings surfaced by the standard .golangci.yml
Opened
#64 snapshot list must list remote snapshots without requiring the private key
Opened
#65 Make the tagged-release path actually work on Gitea
Opened
#66 Add tests for internal/storage — the backend abstraction has zero coverage
Opened
#67 Docs misstate the remote layout and understate the privacy guarantee
Opened
#68 Reconcile the schema/migration story across code and four documents
Opened
#69 make test-integration is a silent no-op — no file carries the integration build tag
Opened
#70 Delete dead code and stale fixtures before tagging
Opened
#71 Triage the 15 stale remote branches; two may contain unlanded fixes
Opened
#72 Fault-injection tests: prove backups survive interruption and corruption
Opened
#73 Security review of the crypto and blob-generation seams
Opened
#74 Documentation accuracy sweep: undocumented behavior and stale claims
Opened
#75 Docker builds report unknown version, and profiling output is truncated on error
Opened
#76 Decide on renaming internal/log, internal/crypto and internal/types (revive var-naming)
Opened
#78 make lint does not use the pinned linter version, so local green does not mean CI green
Opened
#80 Harden the pinned-linter gate: context-gate the native path, and make bootstrap yield a working machine
Opened
#81 The unencrypted manifest publishes backup timestamps and a per-blob size profile
Opened
#82 Logger writes to stdout, so any warning corrupts --json output
Opened
#84 Vaultik.UI doc comment misdescribes how --cron suppresses output
Opened
#85 script/cibuild reports a green it did not earn when the tree is unchanged
Opened
#87 --cron flag help text misstates what it suppresses
Opened
#88 golangci-lint cache is shared across worktrees, so lint results can come from another tree
Opened
#90 golangci-lint deprecation: gomodguard replaced by gomodguard_v2
Opened
#91 Adopt the remaining upstream CHECK_EPOCH hardening (expanded form, unset guard, unique epoch, script/docker)
Opened
#93 script/test omits -count=1, so Go's test cache can satisfy the gate without running tests
Opened
#94 Decide whether feature/daemon-mode is 1.0 scope
Opened
#96 getTableCount errors are discarded, so a failed query reports as a count of zero
Opened
#97 TTYHandler silently discards log.With attributes, so diagnostics differ between terminal and CI
Opened
#99 script/lint shares one golangci-lint cache across worktrees, so one tree's findings are served for another
Opened
#100 golangci-lint warns on every run: gomodguard is deprecated, replaced by gomodguard_v2
Opened
#101 REPO_POLICIES.md mandates a 30s test timeout that is too tight to be safe
Opened
#103 Two fail-closed defects in the new lint isolation
Opened
#105 The Go toolchain in the release workflow is version-pinned but not hash-verified
Opened
#106 Startup banner goes to stdout and --json does not suppress it, so every --json document is preceded by three lines of prose
Opened
#108 pruneLocalSnapshots writes prose to stdout unconditionally, so prune --json | jq still fails after the banner fix
Opened
#110 make build exits 0 without building anything
Opened
#112 Under --json, prune deletes local index rows with no signal in either stream
Opened
#113 Run all linting in Docker via Dockerfile.lint + script/lint
Opened
#115 Host-lint guard scanner goes blind on a phantom heredoc and accepts a || host fallback