Merge-ready after the 2026-09-19 review sweep — 40 PRs waiting only on the merge button

[Danathar]

@castrojo @hanthor — one list instead of forty pings.

I spent today reviewing the open pull-request backlog across the org. Every PR below is in mergeStateStatus: CLEAN as of this afternoon: CI green, required approvals present, no conflicts, nothing left but the merge button. Each one has a review comment from me saying exactly what was run or checked (tests executed locally, pins verified against upstream, digests checked against the registry), so you can read that instead of re-doing it.

Merging is by hand in all of these repos, which is why they're waiting. Grouped by repo, with who approved:

bluefin (6)

Note bluefin#1263 is a Renovate PR that was rebased after my approval; the pins are unchanged and the approval survived.

PR	Author	Approved by	Title
projectbluefin/bluefin#1263	mergeraptor (Renovate)	Danathar	chore(deps): update github-actions (non-major)
projectbluefin/bluefin#1267	kylerankin	Danathar	fix(sec): pin akmods secureboot signing cert to commit SHA + SHA-256
projectbluefin/bluefin#1275	kubestellar-hive	Danathar	feat(packages): add gstreamer1-plugin-gtk4 to base image
projectbluefin/bluefin#1298	mendezr	Danathar	fix(factory): trim promote-testing-to-main caller below loc-drift threshold
projectbluefin/bluefin#1301	mendezr	Danathar	docs(ci): record firefox.feature AT-SPI blocker resolution (#989)
projectbluefin/bluefin#1306	kylerankin	Danathar	fix(ci): re-run check-base-branch when PR base is retargeted

bluefin-bling (5)

PR	Author	Approved by	Title
projectbluefin/bluefin-bling#54	kubestellar-hive	Danathar	test(light-style): behavioral coverage for extensions/light-style/extension.js
projectbluefin/bluefin-bling#55	kubestellar-hive	Danathar	test(docs): gate AGENTS.md Repo Layout tree against tracked top-level entries
projectbluefin/bluefin-bling#57	kubestellar-hive	Danathar	test(metadata): gate the GNOME Shell compatibility ceiling across extensions
projectbluefin/bluefin-bling#59	kubestellar-hive	Danathar	test(syncthing-toggle): executed behavior coverage for prefs.js — tests/syncthing_prefs_harness.mjs + tests/test_syncthing_prefs_behavior.py
projectbluefin/bluefin-bling#61	kubestellar-hive	Danathar	refactor(tests): single owner for the GNOME ESM import rewrite — tests/gnome_module_loader.mjs

bluespeed (2)

PR	Author	Approved by	Title
projectbluefin/bluespeed#67	mergeraptor (Renovate)	Danathar	chore(deps): update docker.io/otel/opentelemetry-collector-contrib docker tag to v0.161.0
projectbluefin/bluespeed#68	mergeraptor (Renovate)	Danathar	chore(deps): update docker.io/grafana/loki docker tag to v3.7.8

chairlift (5)

I only have read access here, so my approvals are advisory — these still need a write-access approval before merge.

PR	Author	Approved by	Title
projectbluefin/chairlift#145	kubestellar-hive	Danathar	refactor: remove unshipped config.bootc-example.yml, gate example configs — internal/installcheck/exampleconfig_test.go
projectbluefin/chairlift#147	kubestellar-hive	Danathar	fix(gaming): do not offer gaming mode on images that ship the stack
projectbluefin/chairlift#149	kubestellar-hive	Danathar	test(aistack): cover the host seams behind the injection points — internal/aistack/hostseams_test.go
projectbluefin/chairlift#150	kubestellar-hive	Danathar	test(navigation): gate every advertised shortcut action against its registration
projectbluefin/chairlift#151	kubestellar-hive	Danathar	fix(updates): reject stale Flatpak update inventory refreshes

documentation (3)

#1283 fixes the site build that is currently red on main (DakotaSection unimported in docs/downloads.mdx) — worth merging first.

PR	Author	Approved by	Title
projectbluefin/documentation#1274	mrbobbytables	Danathar	[architect] fix: propagate typecheck and lint exit codes in pages.yml validation step
projectbluefin/documentation#1277	kubestellar-hive	Danathar	test(portal): tolerate absent build-generated static/data JSON
projectbluefin/documentation#1283	kubestellar-hive	Danathar	fix(downloads): import DakotaSection and restore the warning admonition

fsdk-containers (9)

PR	Author	Approved by	Title
projectbluefin/fsdk-containers#249	kubestellar-hive	Danathar, castrojo	test(gate): follow just recipes in test_catalog_gate_coverage.py CI-coverage model
projectbluefin/fsdk-containers#271	kylerankin	Danathar, castrojo	Pin pyyaml/jsonschema with hashes in catalog & verify workflows
projectbluefin/fsdk-containers#275	kubestellar-hive	Danathar, castrojo	test: executed coverage for the check_multiarch_refs CLI gate — tests/test_catalog_multiarch_refs_cli.py covers main()/get_changed_files()/get_git_file_content()
projectbluefin/fsdk-containers#285	mergeraptor (Renovate)	Danathar, castrojo	chore(deps): bump freedesktop-sdk point release
projectbluefin/fsdk-containers#293	kubestellar-hive	Danathar, castrojo	test(catalog): ratchet the README image table against elements/targets.json — tests/test_catalog_readme_inventory.py, README.md Images table, elements/targets.json shared-paths note
projectbluefin/fsdk-containers#297	kubestellar-hive	Danathar, castrojo	test(catalog): gate slim.includes against include/ — tests/test_catalog_slim_includes.py
projectbluefin/fsdk-containers#300	mergeraptor (Renovate)	Danathar, castrojo	chore(deps): update dependency argoproj/argo-workflows to v4.1.4
projectbluefin/fsdk-containers#301	mergeraptor (Renovate)	Danathar, castrojo	chore(deps): update github-actions-non-major
projectbluefin/fsdk-containers#303	kubestellar-hive	Danathar, castrojo	test: executed coverage for the tests/vm-boot.sh preflight refusals — tests/test_catalog_vm_boot_preflight.py

review (8)

PR	Author	Approved by	Title
projectbluefin/contribute#614	kubestellar-hive	Danathar, hanthor	test: coverage for mutations.ts confirmed comment plans and fail-closed head revalidation
projectbluefin/contribute#615	mergeraptor (Renovate)	Danathar, hanthor	chore(deps): update hivecommons/hive digest to a9f5ed2
projectbluefin/contribute#625	mergeraptor (Renovate)	Danathar	chore(deps): update projectbluefin/actions digest to 8895d09
projectbluefin/contribute#627	kubestellar-hive	Danathar	chore(renovate): track the Hive SHA fallback in bin/bluefin
projectbluefin/contribute#628	mergeraptor (Renovate)	Danathar	chore(deps): update ghcr.io/projectbluefin/base:26.08 docker digest to c8e47df
projectbluefin/contribute#629	mergeraptor (Renovate)	Danathar	chore(deps): update ghcr.io/projectbluefin/lab-runner:26.08 docker digest to c2f4496
projectbluefin/contribute#632	kubestellar-hive	Danathar	refactor(sbom): give contribute packages the purl contract the appliance already keeps
projectbluefin/contribute#633	mrbobbytables	Danathar	docs: document Conventional Commits PR-title rule in AGENTS.md

website (2)

PR	Author	Approved by	Title
projectbluefin/website#812	kubestellar-hive	Danathar, hanthor	refactor: remove unreachable src/utils/loreRotation.ts + src/utils/wolvesStory.ts, gate src/utils reachability
projectbluefin/website#814	kubestellar-hive	Danathar, hanthor	test: black-box coverage for scripts/check-git-hygiene.mjs — new scripts/tests/check-git-hygiene.test.ts

Also ready, but I'm the author so I can't be the second approval

• fix(ci): smoke-test the image Publish built, not the default-branch tip dakota#1605 — Publish Smoke has been red since 09-18; this fixes the SHA it resolves. dakota#1606 (pin cosign), #1607 (dead recipe), #1609 (SBOM has failed since June; fix is one flag) are the others. All green.
• test(quality): eliminate host-environment flakiness and gate yt-dlp probe (#766) website#792 — castrojo approved on 09-12; its fork CI runs were never approved until today, so it's only now able to go green.
• ci: gate image catalog on README changes fsdk-containers#295 — castrojo approved; needs a second.

Not on this list on purpose

Everything I requested changes on (common#1112/#1122/#1108/#1142, bluefin#1247/#1255/#1299/#1305, dakota#1592, chairlift#118, testsuite#848) is waiting on its author, with the reason written on the PR. The ubuntu → 26.04 Renovate bumps are all blocked by projectbluefin/actions#541.

I'll close this once the list is drained.