infra: open-webui v0.11.0, qdrant v1.19.0, n8n 2.33.5 (security + minor) - #154
Merged
Conversation
AlienWalker1995
pushed a commit
that referenced
this pull request
Aug 6, 2026
's squash) The #154 squash merged only the agent's original commit — the branch-side follow-ups (this pin-lock update, the LF restore) never reached origin because their pushes failed silently under -q and the remote head was never verified. Full suite back to the 3 known catalog-only failures. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
AlienWalker1995
added a commit
that referenced
this pull request
Aug 6, 2026
* fix: enforce LF for yaml/md/py via .gitattributes + renormalize the three CRLF manifests PR #154's squash landed the agent's CRLF rewrite on main despite a branch-side LF restore — per-file fixes lose to git's EOL layering, so this is the root-cause form: `text eol=lf` rules make CRLF uncommittable for manifests regardless of which runtime writes them, and `git add --renormalize` fixes the three affected files (services/{automation,open-webui,rag}/plugin.yaml — the only CRLF files in the tree). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * test(parity): move pin locks to the updated image versions (lost in #154's squash) The #154 squash merged only the agent's original commit — the branch-side follow-ups (this pin-lock update, the LF restore) never reached origin because their pushes failed silently under -q and the remote head was never verified. Full suite back to the 3 known catalog-only failures. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Hermes Bot <hermes@ordo-ai-stack.local> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hermes-initiated infra updates from the daily stack audit (job
5cb290c34008), human-audited before merge.The updates (Hermes' work — verified correct)
All three deployed and healthy 1h+ live. Net diff (ignoring EOL): exactly 3 lines.
What the audit fixed on top
out/docker-compose.ymlfrom inside its container, where no GPU is visible — hardware-auto silently dropped comfyui, ltx-trainer, stt, tts from the deployed compose (1219 → 1022 lines) while the containers kept running as config-orphans. Re-rendered from the host; declared config again matches reality byte-for-byte. This is the failure classordo.yaml's own comment warns about ("a hiccup that hides the 1070 must not silently drop voice") — follow-up:ordo rendershould refuse or loudly warn when hardware-auto resolves to fewer GPUs than the source's plugin set implies.*.yaml text eol=lfto.gitattributes.🤖 Generated with Claude Code