chore(sync): replay clean upstream OpenShell updates#3

Open

linuxdevel wants to merge 38 commits into

mainfrom

Commits on Mar 23, 2026

fix(ci): check author_association before API calls in vouch gate (#442)

johntmyers
authored and
linuxdevel
committed
fix(ci): fetch author_association via REST API instead of webhook payload (#444)

johntmyers
authored and
linuxdevel
committed
fix(ci): pass wheel filenames as job output instead of re-downloading (#418)

pimlock
authored and
linuxdevel
committed
fix(ci): use ORG_READ_TOKEN for org membership check in vouch gate (#445)

johntmyers
authored and
linuxdevel
committed
fix(ci): split vouch gate into two steps with separate tokens (#446)

johntmyers
authored and
linuxdevel
committed
fix(cli): suppress browser popup during auth via OPENSHELL_NO_BROWSER env var (#419)

drew
authored and
linuxdevel
committed
fix(ci): use env context instead of secrets in step-level if condition (#452)

johntmyers
authored and
linuxdevel
committed
chore(repo): migrate github label taxonomy (#454)

drew
authored and
linuxdevel
committed
fix(bootstrap): auto-cleanup Docker resources on failed gateway deploy (#464)

drew
authored and
linuxdevel
committed
fix(bootstrap): surface diagnostics for K8s namespace not ready failures (#466)

drew
authored and
linuxdevel
committed
docs: add guidance for OpenAI-compatible cloud providers (#458)

miyoungc
authored and
linuxdevel
committed
fix(sandbox): rotate openshell.log daily, keep 3 files (#431)

Kh4L
authored and
linuxdevel
committed
fix(e2e): update log-reading helpers for rolling file appender (#480) (#481)

drew
authored and
linuxdevel
committed
fix(router): increase inference validation token budget (#432)

geelen
authored and
linuxdevel
committed
fix(gateway): allow first live network policy update (#493)

pimlock
authored and
linuxdevel
committed
feat(providers): add GitHub Copilot CLI agent provider (#476)

htekdev
authored and
linuxdevel
committed
feat(gpu): disable NFD/GFD and remove nodeAffinity from device plugin chart (#497)

elezar
authored and
linuxdevel
committed
fix(ci): simplify dev release install instructions to use install.sh (#453)

drew
authored and
linuxdevel
committed
feat(ocsf): create openshell-ocsf crate — standalone OCSF event types, formatters, and tracing layers (#489)

johntmyers
authored and
linuxdevel
committed
feat(settings): gateway-to-sandbox runtime settings channel (#474)

johntmyers
authored and
linuxdevel
committed
refactor(proto): rename UpdateSettings to UpdateConfig for consistency with read path (#515)

johntmyers
authored and
linuxdevel
committed
refactor(sandbox): remove unused pod_template field from CreateSandbox RPC (#522)

drew
authored and
linuxdevel
committed
docs(ollama): update ollama tutorial and references to match latest (#511)

ParthSareen
authored and
linuxdevel
committed
docs(ollama): fix references to renamed tutorial file (#513)

ParthSareen
authored and
linuxdevel
committed
ci(release): restrict auto-tag to weekdays only (#507)

drew
authored and
linuxdevel
committed
docs(providers): add Groq to the supported providers table (#518)

khaile
authored and
linuxdevel
committed
fix(docs): remove trailing whitespace from upstream sync
linuxdevel
committed
fix(docker): port build compatibility fixes
linuxdevel
committed
chore(lockfile): sync openshell-ocsf version
linuxdevel
committed
refactor(docker): add shared image build graph
linuxdevel
committed
refactor(tasks): unify docker image build entrypoint
linuxdevel
committed
refactor(tasks): add shared docker task surface
linuxdevel
committed
refactor(tasks): normalize python and publish task names
linuxdevel
committed
refactor(build): rewire deploy and publish flows
linuxdevel
committed
docs(build): document shared image targets
linuxdevel
committed
refactor(build): migrate to shared image dockerfile
linuxdevel
committed
refactor(rust): reduce workspace clippy warning noise
linuxdevel
committed
fix(cli): preserve explicit sandbox upload file paths
linuxdevel
committed