Issues

• [sec-check] restrict GitHub token permissions in all CI/CD workflows

  agent/sec-checkhive/hive-school-tunaos
  tuna-os/bootc-migrate#325 · Filter by author hanthor-hive-agent opened on Oct 1, 2026

• [architect] phase5_setup_bootloader collapses target extraction, hardware validation, BLS assembly, and bootloader installation (1,565 LOC)

  agent/architectarchitecturehive/hive-school-tunaostech-debt
  tuna-os/bootc-migrate#323 · Filter by author hanthor-hive-agent opened on Oct 1, 2026

• OstreeInstall has no commit step: add guided old-state cleanup

  tuna-os/bootc-migrate#315 · Filter by author hanthor opened on Sep 30, 2026
  1

• [sec-check] fix: upgrade Node.js 20 deprecated GitHub Actions to Node.js 24 compatible versions

  agent/sec-checkcihive/hive-school-tunaosinfrastructuresecurity
  tuna-os/bootc-migrate#314 · Filter by author hanthor-hive-agent opened on Sep 30, 2026

• firstboot verify/status don't cover the OstreeInstall direction

  tuna-os/bootc-migrate#313 · Filter by author hanthor opened on Sep 30, 2026

• TUI: scan-driven backend/bootloader selection with OstreeInstall route

  tuna-os/bootc-migrate#312 · Filter by author hanthor opened on Sep 30, 2026

• [sec-check] bootc-migrate: update GitHub Actions to Node.js 24-compatible versions

  agent/sec-checkcihive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#311 · Filter by author hanthor-hive-agent opened on Sep 30, 2026

• [sec-check] CI: upgrade actions to support Node.js 24

  agent/sec-checkhive/hive-school-tunaossecurityworkflow
  tuna-os/bootc-migrate#310 · Filter by author hanthor-hive-agent opened on Sep 30, 2026

• Layer 3: first-boot auto-repair for known migration breakage classes

  enhancement
  tuna-os/bootc-migrate#309 · Filter by author hanthor opened on Sep 29, 2026

• /var carry loses ownership and mtimes — boots to a broken desktop

  tuna-os/bootc-migrate#308 · Filter by author hanthor opened on Sep 29, 2026

• OstreeInstall on LUKS-without-separate-/boot stages an unbootable GRUB

  tuna-os/bootc-migrate#305 · Filter by author hanthor opened on Sep 29, 2026
  1

• Decide the fate of the dakota->utah image-swap cell

  hive/covered-by-pr
  tuna-os/bootc-migrate#304 · Filter by author hanthor opened on Sep 29, 2026

• OstreeInstall: lock out concurrent runs (deploy-exists check is TOCTOU)

  tuna-os/bootc-migrate#303 · Filter by author hanthor opened on Sep 29, 2026

• E2E: Dakota (composefs) -> Utah (ostree) OstreeInstall cell

  tuna-os/bootc-migrate#302 · Filter by author hanthor opened on Sep 29, 2026

• [sec-check] workflows: update actions for Node.js 24 compatibility

  agent/sec-checkhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#301 · Filter by author hanthor-hive-agent opened on Sep 29, 2026

• [sec-check] GitHub Actions: update actions to Node.js 24 compatible versions

  agent/sec-checkhive/hive-school-tunaos
  tuna-os/bootc-migrate#300 · Filter by author hanthor-hive-agent opened on Sep 29, 2026

• [sec-check] GitHub Actions workflow: update to Node.js 24 compatible action versions

  agent/sec-checkhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#299 · Filter by author hanthor-hive-agent opened on Sep 29, 2026

• [sec-check] Fix Node.js 20 deprecation: upgrade actions/checkout@v4 and actions/upload-artifact@v4

  agent/sec-checkhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#298 · Filter by author hanthor-hive-agent opened on Sep 29, 2026

• [sec-check] CI blocker: GitHub Actions Node.js 20 deprecation breaks 3 PRs

  agent/sec-checkhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#297 · Filter by author hanthor-hive-agent opened on Sep 28, 2026
  1

• [sec-check] GitHub Actions: update deprecated Node.js 20 actions to v4+ versions

  agent/sec-checkhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#296 · Filter by author hanthor-hive-agent opened on Sep 28, 2026

• [sec-check] workflows: fix Node.js 20 → 24 deprecation in actions/checkout and actions/upload-artifact

  agent/sec-checkhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#295 · Filter by author hanthor-hive-agent opened on Sep 28, 2026

• [sec-check] workflows: update deprecated Node.js 20 actions to fix CI failures on PRs #271, #272, #273

  agent/sec-checkcigithub-actionshive/hive-school-tunaos
  tuna-os/bootc-migrate#294 · Filter by author hanthor-hive-agent opened on Sep 28, 2026

• [sec-check] PRs #271, #272, #273 blocked on protected .github/workflows paths

  agent/sec-checkblockedhive/hive-school-tunaossecurity
  tuna-os/bootc-migrate#293 · Filter by author hanthor-hive-agent opened on Sep 28, 2026

• [sec-check] fix: update GitHub Actions to Node.js 24 compatible versions

  agent/sec-checkhive/hive-school-tunaosneeds-humansecurity
  tuna-os/bootc-migrate#292 · Filter by author hanthor-hive-agent opened on Sep 27, 2026

• [sec-check] PRs #271 and #272: workflow file modifications blocked by missing workflows permission

  agent/securityhive/hive-school-tunaos
  tuna-os/bootc-migrate#291 · Filter by author hanthor-hive-agent opened on Sep 27, 2026