From 5629bc9b4bbd33ed4c50a6fb692de632bac1cb78 Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Fri, 4 Sep 2026 12:13:35 -0500
Subject: [PATCH 1/3] =?UTF-8?q?ci:=20runs-on=20ultix=20=E2=80=94=20fleet?=
 =?UTF-8?q?=20runner=20label=20scoping=20[#784]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Runner is label-scoped to this fleet; other repos' ubuntu-latest
jobs no longer land on it.
https://projects.knownelement.com/issues/784
---
 .gitea/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 5b9afae..0ef2db9 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -6,7 +6,7 @@ on:
     branches: [dev, release]
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ultix
     container:
       image: node:20-bookworm
     steps:
-- 
2.43.0


From c8f2cbde4a8088f8c69af274f731da5f6fc8f29e Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Fri, 4 Sep 2026 12:22:23 -0500
Subject: [PATCH 2/3] fix(ci): bookworm pip via apt, valid truthy nesting,
 runtime-file ignores [#784]

Red/green: run 1 failed 27s (no pip in node image); run 2 blocker was
invalid truthy nesting in .yamllint. Local repro now green.
https://projects.knownelement.com/issues/784
---
 .gitea/workflows/ci.yml | 2 +-
 .yamllint               | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 0ef2db9..f993cd9 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: yamllint
         run: |
-          pip install --quiet yamllint
+          apt-get update -qq >/dev/null && apt-get install -qq -y python3-pip >/dev/null && pip install --quiet --break-system-packages yamllint
           yamllint -c .yamllint .
       - name: secret scan
         run: |
diff --git a/.yamllint b/.yamllint
index 418c3c2..4148a69 100644
--- a/.yamllint
+++ b/.yamllint
@@ -3,12 +3,15 @@
 extends: default
 ignore: |
   docs/
+  secrets.yaml
+  *.db
 rules:
   line-length: disable
   comments: disable
   comments-indentation: disable
   document-start: disable
-  truthy: check-keys: false
+  truthy:
+    check-keys: false
   indentation:
     spaces: consistent
     indent-sequences: consistent
-- 
2.43.0


From 403f83a18716c709a145f675e3d3084211dffba6 Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Fri, 4 Sep 2026 13:33:18 -0500
Subject: [PATCH 3/3] fix(deploy): sha-watch sensor URL -> KNEL/KNELBMS
 post-rename [#785 #784]

---
 packages/deploy_pipeline.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/deploy_pipeline.yaml b/packages/deploy_pipeline.yaml
index c346c8e..da5337d 100644
--- a/packages/deploy_pipeline.yaml
+++ b/packages/deploy_pipeline.yaml
@@ -6,7 +6,7 @@
 # (founder action via Cloudron file manager); this watcher is the
 # always-works safety net.
 rest:
-  - resource: https://git.knownelement.com/api/v1/repos/KNEL/pfv-bms/commits?sha=release&limit=1
+  - resource: https://git.knownelement.com/api/v1/repos/KNEL/KNELBMS/commits?sha=release&limit=1
     headers:
       Authorization: !secret gitea_auth_header
       User-Agent: pfv-bms-deploy-watch
-- 
2.43.0