garrytanandcapy-ai[bot] 5751f5b4cc ci(free-tests): grant user namespaces to the bundled Chromium on runner image 20261026 ...

Runner image 20261026.1.0 keeps kernel.apparmor_restrict_unprivileged_userns=1
but loads only three AppArmor profiles, so Chromium's namespace sandbox aborts
(credentials.cc:131 Permission denied) and the cookie-import-native pipe smoke
fails on every job that lands on it. Load a scoped AppArmor profile granting
userns to the resolved Playwright Chromium only, in both Linux jobs that set up
the sandbox helper. The kernel restriction and the SUID helper stay as they are.

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

2026-10-29 17:44:52 +00:00

..

actionlint.yml

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

arm-setup-smoke.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

cso-runtime-images.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

cso-runtime-promote.yml

v1.91.177.0 ci(cso): give the promote candidate step GH_TOKEN; fail any workflow step that runs gh without a token (#3336)

2026-10-22 19:35:30 +00:00

cso-runtime-qualification.yml

v1.91.176.0 cso: ignore the compiled helpers' leading #! line in the release contract's preparationSha256 (both sides) (#3333)

2026-10-21 19:22:49 +00:00

cso-scanner-images.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

dependency-review.yml

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

eval-sweep.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

evals-main-backstop.yml

v1.91.292.0 Stable channel: a regression exception beside the security one, and the stale weekly wording (#3533)

2026-10-28 09:59:40 +00:00

evals-marathon.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

evals-periodic.yml

v1.91.272.0 feat(skills): absorb pstack's blast radius, transcript recall, vet-the-number and design-twice as lazy passes (#3500)

2026-10-27 09:59:09 +00:00

evals.yml

v1.91.271.0 fix(evals): run train-bisect steps under bash; lint sh-run workflow steps for bash-isms (#3509)

2026-10-27 09:43:47 +00:00

free-durations-record.yml

v1.91.148.0 ci(seed): seed PRs also dispatch Quality gate, and say which runs are their checks (#3297)

2026-10-19 17:13:58 +00:00

free-tests.yml

ci(free-tests): grant user namespaces to the bundled Chromium on runner image 20261026

2026-10-29 17:44:52 +00:00

make-pdf-gate.yml

v1.91.60.0 fix(windows): setup degrades instead of dying on a CSO failure, detects Smart App Control, Consolas terminal font (#3079)

2026-10-08 15:43:32 +00:00

measure-journal-read.yml

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

model-policy-freshness.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

native-qualification.yml

v1.91.298.0 chore: remove Dia from gstack (cookie source and qualification harness) (#3551)

2026-10-28 19:37:41 +00:00

osv-scanner.yml

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

platform-qualification.yml

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

pr-title-sync.yml

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

quality-gate.yml

v1.91.273.0 feat(ship): PR bodies open with the problem and a Blast radius line, and gstack-prose-lint catches autopilot phrasing before /ship publishes a CHANGELOG entry or PR body (#3501)

2026-10-27 10:16:08 +00:00

scorecard.yml

ci(scorecard): bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 (#3401)

2026-10-26 05:01:10 +00:00

skill-docs.yml

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

test-health.yml

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

version-gate.yml

v1.91.237.0 fix(version-gate): a release output regenerated at the base VERSION is not a stamp (#3451)

2026-10-26 09:17:09 +00:00

weekly-release.yml

v1.91.292.0 Stable channel: a regression exception beside the security one, and the stale weekly wording (#3533)

2026-10-28 09:59:40 +00:00

windows-free-tests.yml

v1.91.298.0 chore: remove Dia from gstack (cookie source and qualification harness) (#3551)

2026-10-28 19:37:41 +00:00

windows-pregate-e2e.yml

v1.91.117.0 fix: pregate bats lanes, WTREE_UNAVAILABLE, doctor rows, SKILL.md size guard, planMode hosts (fix wave PR 5) (#3236)

2026-10-17 04:36:00 +00:00

windows-setup-e2e.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00