All pull requests

Pull requests

• fix(tui): preserve quoted post-create command arguments

  #4137·thotashashank302 opened Oct 2, 2026·5 of 7 tasks·

  ·
  1

  1

• ci(release): notify duty engineers of prerelease failures

  #4134·purp opened Oct 2, 2026Collaborator·7 tasks done·

  ·
  1

  1

• fix(deps): upgrade ratatui to resolve lru vulnerability

  test:e2e
  #4131·alangou opened Oct 2, 2026Contributor·10 tasks done·

  ·
  1

• refactor(runtime): confine and reduce unsafe code

  test:e2e
  #4130·drew opened Oct 2, 2026Collaborator·9 of 12 tasks·

  ·
  2

• fix(deps): upgrade pageant to address Dependabot alert 38

  test:e2e
  #4127·alangou opened Oct 2, 2026Contributor·6 tasks done·

  ·
  1

• fix(tui): cycle workspace scope to a known workspace, not a hardcoded "default"

  #4126·udsy19 opened Oct 2, 2026·

  ·
  3

• fix(cli): render rule-history timestamps as dates, not a day count

  #4125·udsy19 opened Oct 2, 2026·

  ·
  3

• fix(docker): pull only :latest for a tagless --from, not every tag

  gator:blockedtest:e2e
  #4124·udsy19 opened Oct 2, 2026·

  ·
  1

  6

• refactor(conformance): consolidate the test suite workspace

  #4120·elezar opened Oct 2, 2026Member·11 tasks done·

  ·
  2

• chore(deps): bump pageant from 0.2.0 to 0.2.3

  dependenciesrust
  #4118·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  1

• fix(podman): serialize restart and workload containment

  #4117·elezar opened Oct 2, 2026Member·6 of 8 tasks·

  ·
  1

• fix(cli): disable tar sparse mode in uploads

  #4112·ericcurtin opened Oct 2, 2026Contributor·4 of 6 tasks·

  ·
  1

  2

• test(tmachine): support package-installed Podman driver suites

  #4107·elezar opened Oct 2, 2026Member·8 of 9 tasks·

  ·
  2

• refactor(runtime): decouple supervisor access and boundary audit validation

  #4106·drew opened Oct 2, 2026Collaborator·7 of 9 tasks·

  ·
  1

• fix(sandbox): replace lifetime exec cap with retry deadlines

  area:sandbox
  #4105·drew opened Oct 2, 2026Collaborator·6 tasks done·

  ·
  1

  1

• fix(sandbox): allow identity-preserving setresuid and setresgid calls

  #4104·drew opened Oct 2, 2026Collaborator·6 tasks done·

  ·
  1

  1

• feat(snap): run gateway as a user service by default

  #4099·olivercalder opened Oct 2, 2026Contributor·5 of 6 tasks·

  ·
  2

• fix(ssh): persist sandbox host identities

  gator:approval-neededtest:e2e
  #4094·quocanh261997 opened Oct 2, 2026·6 tasks done·

  ·
  1

  9

• fix(e2e): fail loudly when OpenShift detection is inconclusive

  #4090·russellb opened Oct 1, 2026Contributor·6 tasks done·

  ·
  1

  1

• feat(sandbox): restore peer addresses on kernels without WAIT_KILLABLE_RECV

  #4087·russellb opened Oct 1, 2026Contributor·

  ·
  1

  2

• docs(ci): propose runner archive cache for Debian download failures

  #4086·matthewgrossman opened Oct 1, 2026Contributor·6 of 9 tasks·

  ·
  1

  1

• feat(mxc): integrate Windows runtime on portable isolation foundations

  #4084·drew opened Oct 1, 2026Collaborator·4 of 7 tasks·

  ·
  2

• chore: (wip) merge openshell windows branch to main

  #4082·drew opened Oct 1, 2026Collaborator·

  ·
  1

• test(tmachine): add K3s PostgreSQL and mTLS conformance installer

  #4081·matthewgrossman opened Oct 1, 2026Contributor·6 tasks done·

  ·
  1

• fix(server): sort map fields when hashing provider profiles

  gator:blockedtest:e2e
  #4077·ericcurtin opened Oct 1, 2026Contributor·4 of 6 tasks·

  ·
  1

  5