refactor: fix issues, and add new features#217

Merged

oleg-flamingocx merged 31 commits into

mainfrom

chore/cli-audit-remediation-2

Jul 11, 2026

Commits on Jul 10, 2026

fix(cluster,update): audit remediation — scope cleanup to its cluster, fix release-tag URLs
oleg-flamingocx
committed
ci(test): run root+testutil tests, add cross-compile/govulncheck/tidy gates, banner every step
oleg-flamingocx
committed
chore: bump versions
oleg-flamingocx
committed
ci(release): audit remediation — gate, guard, smoke and clean up the release pipeline
oleg-flamingocx
committed
fix(ux): audit remediation — enforce the non-interactive contract
oleg-flamingocx
committed
fix(app): audit remediation — config correctness for ref resolution, values file, and install target
oleg-flamingocx
committed
feat(app)!: remove --github-branch — --ref is the single way to pin a git ref
oleg-flamingocx
committed
fix(security): audit remediation — TLS scope, redaction, timeouts, strict env flags, verified WSL install
oleg-flamingocx
committed
test(ci): audit remediation — gate e2e tests, freeze the update contract, make dry-run visible
oleg-flamingocx
committed
refactor: audit remediation — dead-code purge and structural cleanup
oleg-flamingocx
committed
fix: go mod tidy: prune 131 stale go.sum entries orphaned by the deletions
oleg-flamingocx
committed
test(k3d): mock the Linux inotify pre-check (sysctl -n / sudo -n) in CreateCluster tests
oleg-flamingocx
committed
fix(ux): dry-run summary, machine-readable status fields, truly silent --silent, ref-pinning docs
oleg-flamingocx
committed
test(cli): exhaustive non-interactive invocation matrix at three levels
oleg-flamingocx
committed
fix(helm): skip release verification and deployment waits in dry-run installs
oleg-flamingocx
committed
test: append .exe to test binaries on Windows
oleg-flamingocx
committed
ci: repurpose cross-compile into a release build matrix (compile-only)
oleg-flamingocx
committed
chore: go mod tidy — pflag is now a direct dependency (help-matrix test imports it)
oleg-flamingocx
committed
fix(cluster): drop --wait from cleanup's helm uninstalls
oleg-flamingocx
committed
fix(security): redact child-process stderr at the source, register the stored password form
oleg-flamingocx
committed
fix(cluster)!: validate the cluster name before it reaches a shell
oleg-flamingocx
committed
test(update): cover self-update and rollback against the real latest release
oleg-flamingocx
committed
fix(helm): redact helm stdout everywhere it reaches the user, not just the verbose log
oleg-flamingocx
committed
fix(cluster): strip ArgoCD finalizers during cleanup so the namespace can be reaped
oleg-flamingocx
committed
refactor(windows): delete the dead native-Windows/WSL code paths
oleg-flamingocx
committed
feat(cli): make failures and diagnostics actually reachable
oleg-flamingocx
committed
fix(cli): stop reporting things the CLI never measured
oleg-flamingocx
committed
fix(argocd): run repo-server recovery regardless of --verbose; report progress
oleg-flamingocx
committed
fix(errors): classify transient failures by type, not by wording
oleg-flamingocx
committed
fix(cluster): prune node images with crictl, not a docker binary that isn't there
oleg-flamingocx
committed

Commits on Jul 11, 2026

fix(ci): repair the three CI failures on the audit branch
oleg-flamingocx
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

refactor: fix issues, and add new features#217

refactor: fix issues, and add new features#217
oleg-flamingocx merged 31 commits into
mainfrom
chore/cli-audit-remediation-2

Commits on Jul 10, 2026

fix(cluster,update): audit remediation — scope cleanup to its cluster, fix release-tag URLs

ci(test): run root+testutil tests, add cross-compile/govulncheck/tidy gates, banner every step

chore: bump versions

ci(release): audit remediation — gate, guard, smoke and clean up the release pipeline

fix(ux): audit remediation — enforce the non-interactive contract

fix(app): audit remediation — config correctness for ref resolution, values file, and install target

feat(app)!: remove --github-branch — --ref is the single way to pin a git ref

fix(security): audit remediation — TLS scope, redaction, timeouts, strict env flags, verified WSL install

test(ci): audit remediation — gate e2e tests, freeze the update contract, make dry-run visible

refactor: audit remediation — dead-code purge and structural cleanup

fix: go mod tidy: prune 131 stale go.sum entries orphaned by the deletions

test(k3d): mock the Linux inotify pre-check (sysctl -n / sudo -n) in CreateCluster tests

fix(ux): dry-run summary, machine-readable status fields, truly silent --silent, ref-pinning docs

test(cli): exhaustive non-interactive invocation matrix at three levels

fix(helm): skip release verification and deployment waits in dry-run installs

test: append .exe to test binaries on Windows

ci: repurpose cross-compile into a release build matrix (compile-only)

chore: go mod tidy — pflag is now a direct dependency (help-matrix test imports it)

fix(cluster): drop --wait from cleanup's helm uninstalls

fix(security): redact child-process stderr at the source, register the stored password form

fix(cluster)!: validate the cluster name before it reaches a shell

test(update): cover self-update and rollback against the real latest release

fix(helm): redact helm stdout everywhere it reaches the user, not just the verbose log

fix(cluster): strip ArgoCD finalizers during cleanup so the namespace can be reaped

refactor(windows): delete the dead native-Windows/WSL code paths

feat(cli): make failures and diagnostics actually reachable

fix(cli): stop reporting things the CLI never measured

fix(argocd): run repo-server recovery regardless of --verbose; report progress

fix(errors): classify transient failures by type, not by wording

fix(cluster): prune node images with crictl, not a docker binary that isn't there

Commits on Jul 11, 2026

fix(ci): repair the three CI failures on the audit branch