v2.24.13

2.24.13 (2026-10-07)

Bug Fixes

• add git-scrub and macbash, and clear the open issue residuals (#70) (06035f1), closes #62 #69 #61 #59
• add packer as its own opt-in role (#112) (38f3646)
• ansible: load the shared vars for every inventory (7d17f23)
• apply the user-level settings for every human account, not just one (#65) (82a7295)
• ci: read classification, move npm opt-out (#98) (456cd59)
• ci: state the reason for the warn-level npm audit gate (#97) (cab7acd)
• claude and ghostty from signed vendor repos (#113) (9c44e7b)
• clear duplicate copies of managed tools (#107) (eab8b8d)
• clear shadowed binaries and frozen installs (#103) (eaf3224)
• create the dconf directory before region.yml writes into it (#58) (4468511), closes #54
• developer-ai: opt-in Codex agent tooling (75c95b9)
• developer-rust: add LLVM, PGO and BOLT as standard (#105) (d95ad82)
• developer-rust: bound the build pool against free space, not just the clock (#77) (ee099d7)
• developer-rust: bound the pool by free space (#95) (fd60029)
• developer-rust: defer CPU by nice and weight, drop the build semaphore (af2ebc6), closes #90
• developer-rust: derive CARGO_HOME from the host (19e4632)
• developer-rust: install a C compiler before the first cargo install (ccaf305)
• developer-rust: let the build cache live on a dedicated volume (#82) (f675874)
• developer: retire stale /usr/local/bin/helm (#101) (34f1e74)
• drop ts-node, which breaks on typescript 7 (#116) (4db8546)
• govern rust builds so concurrent compiles cannot OOM the host (#56) (36c61c9)
• infrastructure: move Helm off baltocdn (#100) (26d63ff)
• infrastructure: rpk, Confluent and librdkafka from vendor repos (#104) (ed5b5d0)
• install: resolve every tool version at install time, and upgrade on re-run (#81) (ce9950f)
• make python 3.14 the default (#110) (ed74099)
• move role files to the roles whose tasks copy them (#53) (22e9501)
• never mint an RDP password over credentials grd already holds (#60) (056d8f8)
• realign hyperi-update with how tools install (#111) (52eda5b)
• remove five files nothing references (#66) (e1b68dd)
• repair what a real macOS run exposed, and align the update scripts (#57) (7d1dfc1)
• show disk usage in the top bar alongside CPU and memory (#67) (12733eb)
• stop inventing an Arcane password and keep the seeded login (#68) (1509b4d)
• take container and git-scrub from brew on mac (#114) (d1dfc8d)
• target user-level settings at the desktop user, not the connecting account (#64) (f192214), closes #62
• tests: snapshot-reset harness for Proxmox VMs (dd2d7fe)
• ubuntu: stop vendor packages breaking apt (#99) (e4871e0)
• wait 7 days for github releases, drop dive (#115) (64f913a)
• warn and continue when an optional component fails, and tombstone what 741e4b2 left (#55) (1709593)

What's Changed

• fix: move role files to the roles whose tasks copy them by @catinspace-au in #53
• fix: warn and continue when an optional component fails, and tombstone what 741e4b2 left by @catinspace-au in #55
• fix: govern rust builds so concurrent compiles cannot OOM the host by @catinspace-au in #56
• fix: create the dconf directory before region.yml writes into it by @catinspace-au in #58
• fix: repair what a real macOS run exposed, and align the update scripts by @catinspace-au in #57
• fix: never mint an RDP password over credentials grd already holds by @catinspace-au in #60
• fix: target user-level settings at the desktop user, not the connecting account by @catinspace-au in #64
• fix: apply the user-level settings for every human account, not just one by @catinspace-au in #65
• fix: remove five files nothing references by @catinspace-au in #66
• fix: show disk usage in the top bar alongside CPU and memory by @catinspace-au in #67
• fix: stop inventing an Arcane password and keep the seeded login by @catinspace-au in #68
• fix: add git-scrub and macbash, and clear the open issue residuals by @catinspace-au in #70
• fix(install): resolve every tool version at install time, and upgrade on re-run by @catinspace-au in #81
• fix(developer-rust): bound the build pool against free space, not just the clock by @catinspace-au in #77
• fix(developer-rust): let the build cache live on a dedicated volume by @catinspace-au in #82
• chore(soe): make the Arcane long-lived login an opt-in by @catinspace-au in #84
• fix(developer-ai): opt-in Codex agent tooling by @catinspace-au in #88
• fix(developer-rust): derive CARGO_HOME from the host by @catinspace-au in #85
• docs: explain host-wide build bounding by @catinspace-au in #89
• fix(developer-rust): defer CPU by nice and weight, drop the build semaphore by @catinspace-au in #91
• fix(developer-rust): install a C compiler before the first cargo install by @catinspace-au in #93
• fix(developer-rust): bound the pool by free space by @catinspace-au in #95
• fix(ci): state the reason for the warn-level npm audit gate by @catinspace-au in #97
• fix(ci): read classification, move npm opt-out by @catinspace-au in #98
• fix(ubuntu): stop vendor packages breaking apt by @catinspace-au in #99
• fix(infrastructure): move Helm off baltocdn by @catinspace-au in #100
• fix(developer): retire stale /usr/local/bin/helm by @catinspace-au in #101
• fix: clear shadowed binaries and frozen installs by @catinspace-au in #103
• fix(infrastructure): rpk, Confluent and librdkafka from vendor repos by @catinspace-au in #104
• fix(developer-rust): add LLVM, PGO and BOLT as standard by @catinspace-au in #105
• fix: clear duplicate copies of managed tools by @catinspace-au in #107
• fix: make python 3.14 the default by @catinspace-au in #110
• fix: realign hyperi-update with how tools install by @catinspace-au in #111
• fix: add packer as its own opt-in role by @catinspace-au in #112
• fix: claude and ghostty from signed vendor repos by @catinspace-au in #113
• fix: take container and git-scrub from brew on mac by @catinspace-au in #114
• fix: wait 7 days for github releases, drop dive by @catinspace-au in #115
• fix: drop ts-node, which breaks on typescript 7 by @catinspace-au in #116

Full Changelog: v2.24.12...v2.24.13