chore(uptime-kuma): stage W8 desired image update #513

Merged
pdurlej merged 1 commit from codex/w8-uptime-kuma-upgrade-pr into main 2026-05-26 23:30:10 +02:00
Collaborator

Canary status: missing — fire canary 3+3 manually before merge

Canary Context Pack

Product story

W8 needs one real low-risk runtime pilot candidate. uptime-kuma has a current upstream security/bugfix release and a small rollback surface, but it is still stateful. This PR stages desired metadata only so runtime remains a separate operator decision.

What changed

Updated modules/uptime-kuma/module.yaml desired source/artifact from 2.1.3 to 2.3.2, including the Docker Hub manifest-list digest. Updated the W8 Uptime Kuma packet to record that desired metadata has been staged.

Why it changed

#510 established 2.3.2 as the W8.2 candidate. This PR makes the desired artifact explicit before any backup/recreate/smoke step.

Files touched

  • modules/uptime-kuma/module.yaml
  • state/cycle/W8-uptime-kuma-upgrade-packet.md

Relevant context

  • #506/#510 Uptime Kuma upgrade packet
  • #507/#511 W8.3 stateful/sidecar gate
  • modules/uptime-kuma/runbook.md
  • Uptime Kuma upstream release 2.3.2
  • Docker Hub tag metadata for louislam/uptime-kuma:2.3.2

Runtime evidence

No runtime mutation. spec.runtime.image_observed intentionally remains louislam/uptime-kuma:2.1.3@sha256:dac5... until an explicit runtime pilot runs and smokes.

Known constraints

uptime-kuma is stateful (home-platform_uptime_kuma_data). Runtime apply requires backup-before and the explicit phrase w8-uptime-kuma-runtime-approved.

Explicit out-of-scope

  • RS2000 backup/recreate/smoke
  • Compose/env changes
  • Updating spec.runtime.image_observed
  • Any broad W8/core upgrade

Requested decision

Approve/merge this repo-only desired metadata update. Runtime remains blocked until explicit operator approval.

Merge blockers

  • Treating this PR as deploy approval
  • Accidentally changing runtime observed evidence
  • Missing rollback/backup link in the packet

Spec sources read

  • modules/uptime-kuma/module.yaml — desired/runtime metadata
  • modules/uptime-kuma/runbook.md — state and recovery constraints
  • state/cycle/W8-uptime-kuma-upgrade-packet.md — candidate packet
  • state/cycle/W8-stateful-sidecar-gate.md — stateful runtime gate
  • Docker Hub tag metadata for louislam/uptime-kuma:2.3.2 — digest evidence
  • Uptime Kuma GitHub release 2.3.2 — release evidence

Test plan

  • PYTHONPATH=control-plane python3 -m platformctl.cli validate all --json → exitCode 0

Refs #389
Refs #506

Canary status: missing — fire canary 3+3 manually before merge ## Canary Context Pack ### Product story W8 needs one real low-risk runtime pilot candidate. `uptime-kuma` has a current upstream security/bugfix release and a small rollback surface, but it is still stateful. This PR stages desired metadata only so runtime remains a separate operator decision. ### What changed Updated `modules/uptime-kuma/module.yaml` desired source/artifact from `2.1.3` to `2.3.2`, including the Docker Hub manifest-list digest. Updated the W8 Uptime Kuma packet to record that desired metadata has been staged. ### Why it changed #510 established `2.3.2` as the W8.2 candidate. This PR makes the desired artifact explicit before any backup/recreate/smoke step. ### Files touched - `modules/uptime-kuma/module.yaml` - `state/cycle/W8-uptime-kuma-upgrade-packet.md` ### Relevant context - #506/#510 Uptime Kuma upgrade packet - #507/#511 W8.3 stateful/sidecar gate - `modules/uptime-kuma/runbook.md` - Uptime Kuma upstream release `2.3.2` - Docker Hub tag metadata for `louislam/uptime-kuma:2.3.2` ### Runtime evidence No runtime mutation. `spec.runtime.image_observed` intentionally remains `louislam/uptime-kuma:2.1.3@sha256:dac5...` until an explicit runtime pilot runs and smokes. ### Known constraints `uptime-kuma` is stateful (`home-platform_uptime_kuma_data`). Runtime apply requires backup-before and the explicit phrase `w8-uptime-kuma-runtime-approved`. ### Explicit out-of-scope - RS2000 backup/recreate/smoke - Compose/env changes - Updating `spec.runtime.image_observed` - Any broad W8/core upgrade ### Requested decision Approve/merge this repo-only desired metadata update. Runtime remains blocked until explicit operator approval. ### Merge blockers - Treating this PR as deploy approval - Accidentally changing runtime observed evidence - Missing rollback/backup link in the packet ## Spec sources read - `modules/uptime-kuma/module.yaml` — desired/runtime metadata - `modules/uptime-kuma/runbook.md` — state and recovery constraints - `state/cycle/W8-uptime-kuma-upgrade-packet.md` — candidate packet - `state/cycle/W8-stateful-sidecar-gate.md` — stateful runtime gate - Docker Hub tag metadata for `louislam/uptime-kuma:2.3.2` — digest evidence - Uptime Kuma GitHub release `2.3.2` — release evidence ## Test plan - `PYTHONPATH=control-plane python3 -m platformctl.cli validate all --json` → exitCode 0 Refs #389 Refs #506
chore(uptime-kuma): stage W8 desired image update
All checks were successful
base-is-main / guard (pull_request) Successful in 1s
canary-required / collect-diff (pull_request) Successful in 5s
patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 5s
platformctl plan / auto-apply scope (pull_request) Successful in 24s
canary-required / canary (pull_request) Successful in 15s
patchwarden-client-dry-run / dry-run (pull_request) Successful in 22s
patchwarden-pr-sanity / sanity (pull_request) Successful in 23s
b5a930ca9e
Sign in to join this conversation.
No reviewers
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform!513
No description provided.