feat(matrix): roll matrix-bridge to build.1791152484 (REN-671) #1125

Merged
Ghost merged 1 commits from atlas/ren-671-matrix-bridge-1791152484 into master 2026-10-04 22:24:45 +00:00

What

Bump kubernetes/apps/matrix/bridge.yaml image matrix-bridge:build.1791062345 → build.1791152484 (digest sha256:5e0718f3b28f43ae406e15a14784f085e34b456c3df94f371f0ae2ce907caafa, = :f1ad2ea).

Why

REN-671 / REN-668: the bridge forwards one agent comment per owner message and drops later chat-card run comments (housekeeping). App change reviewed in REN-669 (konairius/matrix-bridge#4, merge f1ad2ea5).

No env, secret, port, registration or network change. State stays in Matrix account data and is read as-is.

Verify

After Flux reconcile: pod 1/1 Ready on /health, 0 restarts, start log line with no errors. No posts in live rooms.

Revert

Revert this commit (image goes back to build.1791062345). Rollout restarts only the matrix-bridge pod; Home Assistant and Synapse are untouched.

🤖 Generated with Claude Code

## What Bump `kubernetes/apps/matrix/bridge.yaml` image `matrix-bridge:build.1791062345` → `build.1791152484` (digest `sha256:5e0718f3b28f43ae406e15a14784f085e34b456c3df94f371f0ae2ce907caafa`, = `:f1ad2ea`). ## Why REN-671 / REN-668: the bridge forwards one agent comment per owner message and drops later chat-card run comments (housekeeping). App change reviewed in REN-669 (konairius/matrix-bridge#4, merge f1ad2ea5). No env, secret, port, registration or network change. State stays in Matrix account data and is read as-is. ## Verify After Flux reconcile: pod 1/1 Ready on `/health`, 0 restarts, start log line with no errors. No posts in live rooms. ## Revert Revert this commit (image goes back to build.1791062345). Rollout restarts only the matrix-bridge pod; Home Assistant and Synapse are untouched. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Ghost added 1 commit 2026-10-04 22:23:21 +00:00
feat(matrix): roll matrix-bridge to build.1791152484 (REN-671)
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
3096ad3d80
Housekeeping filter from konairius/matrix-bridge#4 (f1ad2ea5, REN-668).
No env, secret, port or network change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Ghost approved these changes 2026-10-04 22:24:44 +00:00
Ghost left a comment

Approved on 3096ad3d (REN-672). One-line tag bump build.1791062345 -> build.1791152484 in kubernetes/apps/matrix/bridge.yaml; branch is on top of master. Tag = merge f1ad2ea5 of konairius/matrix-bridge#4 (reviewed REN-669, publish green, digest sha256:5e0718f3). Strategy Recreate: a bad pull leaves the bridge down until revert; only matrix-bridge restarts, HA/Synapse untouched. Undo: revert this commit.

Approved on 3096ad3d (REN-672). One-line tag bump build.1791062345 -> build.1791152484 in kubernetes/apps/matrix/bridge.yaml; branch is on top of master. Tag = merge f1ad2ea5 of konairius/matrix-bridge#4 (reviewed REN-669, publish green, digest sha256:5e0718f3). Strategy Recreate: a bad pull leaves the bridge down until revert; only matrix-bridge restarts, HA/Synapse untouched. Undo: revert this commit.
Ghost merged commit a3e0a3d5c3 into master 2026-10-04 22:24:45 +00:00
review-bot left a comment
Member

🤖 Automated review — model CLI default (complexity: unknown), commit 3096ad3d80bde5211669747621cd6822fa5bf301.

Advisory review by the review-bot pipeline. It never approves; a human merges. Push new commits to get a fresh review.


Summary

Single-line image tag bump for matrix-bridge in kubernetes/apps/matrix/bridge.yaml (build.1791062345 → build.1791152484), matching the PR description. No env, secret, port, RBAC, or network-policy changes accompany it, and a check of the full manifest confirms that's accurate. No blocking issues.

🟡 Suggestions

  • kubernetes/apps/matrix/bridge.yaml:124 — the image is referenced by tag only, not pinned by digest, even though the PR body cites a specific digest (sha256:5e0718f3...) for this build. Since build.* tags look immutable-by-convention but aren't enforced as such by the registry, a name@sha256:... reference would make the deployed artifact tamper-proof against a tag re-push. This mirrors the pre-existing style in this file (the old tag wasn't pinned either), so it's not a regression introduced by this PR — just an opportunity if tightening supply-chain guarantees for this workload is a goal.

Tests

No tests apply to this change — it's a plain image reference bump in a Kubernetes manifest. Verification is operational (Flux reconcile + pod health), as described in the PR body's "Verify" section, which is appropriate for this kind of change.

Recommendation

Looks reasonable — no blocking issues; comment above is optional.

🤖 **Automated review** — model `CLI default` (complexity: unknown), commit `3096ad3d80bde5211669747621cd6822fa5bf301`. > Advisory review by the `review-bot` pipeline. It never approves; a human merges. Push new commits to get a fresh review. --- ## Summary Single-line image tag bump for `matrix-bridge` in `kubernetes/apps/matrix/bridge.yaml` (`build.1791062345` → `build.1791152484`), matching the PR description. No env, secret, port, RBAC, or network-policy changes accompany it, and a check of the full manifest confirms that's accurate. No blocking issues. ## 🟡 Suggestions - `kubernetes/apps/matrix/bridge.yaml:124` — the image is referenced by tag only, not pinned by digest, even though the PR body cites a specific digest (`sha256:5e0718f3...`) for this build. Since `build.*` tags look immutable-by-convention but aren't enforced as such by the registry, a `name@sha256:...` reference would make the deployed artifact tamper-proof against a tag re-push. This mirrors the pre-existing style in this file (the old tag wasn't pinned either), so it's not a regression introduced by this PR — just an opportunity if tightening supply-chain guarantees for this workload is a goal. ## Tests No tests apply to this change — it's a plain image reference bump in a Kubernetes manifest. Verification is operational (Flux reconcile + pod health), as described in the PR body's "Verify" section, which is appropriate for this kind of change. ## Recommendation Looks reasonable — no blocking issues; comment above is optional. <!-- pr-review:sha=3096ad3d80bde5211669747621cd6822fa5bf301 -->
Sign in to join this conversation.