Skip to content

Release: 2 features, 1 fix, 1 refactor, 2 chores → Main#9628

Merged
h0lybyte merged 8 commits intomainfrom
dev
Apr 4, 2026
Merged

Release: 2 features, 1 fix, 1 refactor, 2 chores → Main#9628
h0lybyte merged 8 commits intomainfrom
dev

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented Apr 4, 2026

Release: Dev → Main

7 atomic commits ready for main

Features

Bug Fixes

Refactoring

Reverts

  • revert(isometric): restore StandardMaterial for frog/wraith — SpriteSheetMaterial doesn't render (390e851)

Chores


This PR is automatically maintained by CI — KBVE Studio

… failures (#9627)

Add jlumbroso/free-disk-space action to both docker-test-app and
utils-publish-docker-image workflows. Removes Android SDK, .NET,
Haskell, and pre-pulled Docker images — reclaims ~10-15GB on
ubuntu-latest runners.
h0lybyte added 2 commits April 4, 2026 04:20
#9629)

Converts frogs from per-entity StandardMaterial + per-frame UV uploads
to the shared SpriteSheetMaterial + storage buffer pattern:

- One shared mesh + one shared material for ALL frogs (auto-instanced)
- MeshTag on each entity indexes into ShaderStorageBuffer
- animate_frogs updates SpriteInstanceData (frame_col, frame_row, flip,
  tint) then flushes to GPU via flush_sprite_buffer()
- Day/night tinting now in animate_frogs via storage buffer tint field
  (removed separate tint_frogs_for_daynight weather system)
- Zero per-frame mesh UV buffer uploads

Wraith conversion pending — same pattern, separate PR.
#9625)

* fix(firecracker-ctl): remove NET_ADMIN capability violating PodSecurity baseline

The kilobase namespace enforces PodSecurity baseline which disallows
NET_ADMIN. The capability was added for future TAP networking but is
not needed yet (MMDS-based communication doesn't require it). Can be
re-added when the namespace policy is updated or firecracker moves
to a privileged namespace.

* refactor(firecracker): move to dedicated namespace with privileged PodSecurity

Move firecracker-ctl from kilobase to its own `firecracker` namespace:
- New namespace manifest with pod-security.kubernetes.io/enforce: privileged
- All manifests updated from kilobase → firecracker namespace
- ArgoCD app destination updated, CreateNamespace=true
- NET_ADMIN capability restored (allowed in privileged namespace)
- NetworkPolicy updated for cross-namespace access from kilobase/functions
- FIRECRACKER_URL updated to FQDN (firecracker-ctl.firecracker.svc.cluster.local)
@github-actions
Copy link
Copy Markdown
Contributor Author

github-actions Bot commented Apr 4, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA c09c37f.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/jlumbroso/free-disk-space main 🟢 3.3
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • .github/workflows/utils-publish-docker-image.yml

@github-actions github-actions Bot changed the title Release: 1 fix → Main Release: 1 feature, 1 fix, 1 refactor → Main Apr 4, 2026
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@github-actions github-actions Bot changed the title Release: 1 feature, 1 fix, 1 refactor → Main Release: 1 feature, 1 fix, 1 refactor, 1 chore → Main Apr 4, 2026
…ine (#9631)

Same pattern as frogs — converts wraiths from per-entity StandardMaterial
+ per-frame UV uploads to shared SpriteSheetMaterial + storage buffer:

- One shared mesh + material for ALL wraiths (auto-instanced)
- MeshTag on each entity indexes into ShaderStorageBuffer
- animate_wraiths writes frame/flip/tint to storage buffer
- Day/night ghostly transparency in animate system via tint alpha
- Removed tint_wraiths_for_daynight weather system (redundant)
@github-actions github-actions Bot changed the title Release: 1 feature, 1 fix, 1 refactor, 1 chore → Main Release: 2 features, 1 fix, 1 refactor, 1 chore → Main Apr 4, 2026
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@github-actions github-actions Bot changed the title Release: 2 features, 1 fix, 1 refactor, 1 chore → Main Release: 2 features, 1 fix, 1 refactor, 2 chores → Main Apr 4, 2026
h0lybyte added 2 commits April 4, 2026 12:37
…heetMaterial doesn't render

Custom Material implementations silently don't render in this project's
two-camera pixel-art pipeline (IsometricCamera with RenderTarget::Image).
Reverts to per-frame UV updates with StandardMaterial until the root cause
is identified.
…9633)

* fix(edge): correct CLICKHOUSE_ENDPOINT env var name in logs worker allowlist

The edge function main router allowlisted CLICKHOUSE_URL for the logs
worker, but the K8s deployment and logs/index.ts both use
CLICKHOUSE_ENDPOINT. The mismatch caused the worker to receive an empty
URL, crashing every request with "ClickHouse URL is malformed".

Also fix the db_logs Vector transform where upcase!() panicked on null
when the postgres log regex didn't match — use fallible upcase() with
a "LOG" default instead.

* chore(kube): bump rollout annotations to trigger ArgoCD restart

Bump rollout-restart on functions deployment and add config-updated
annotation on Vector daemonset pod template so ArgoCD picks up the
env var fix and VRL transform fix respectively.
@h0lybyte h0lybyte merged commit 12485cf into main Apr 4, 2026
7 checks passed
@github-project-automation github-project-automation Bot moved this from Review to Done in KBVE Apr 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant