ci(promote): bluefin testing → main 2026-08-18

[github-actions]

🦕 Bluefin testing → stable · 2026-08-18

29 days since the last stable release · stable-20260720 ↗
Auto-maintained by promote-testing-to-main.yml · Updated 2026-08-18T04:15:29Z · Run ↗

Release checklist

✅ All checks passed

Check	Status	Details
Digest resolution	✅ passed	Resolved 2 digest(s) from testing.
Cosign signatures	✅ passed	All resolved digests passed cosign verification.
E2E	⏭️ skipped	E2E check disabled by caller. Caller disabled the E2E gate.

Variants being promoted

Variant	Tag
bluefin	:testing
bluefin-nvidia	:testing

Changes since last stable

466 commits ahead of stable · Compare main…testing ↗

Recent commits (showing last 20)

SHA	Subject
199e126	chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to fb943c8 (#1112)
345ce40	chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 0d4e7e0 (#1110)
1841ccc	chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to 8f952ae (#1109)
8211bf0	test(brew): assert the brew-preinstall delivery path ships in the image (#1081)
35ba687	chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 6d35613 (#1105)
e9e2e29	docs(security): correct CVE-2026-33186 root cause — podman is a second carrier (#1082)
678b177	test(framework): assert fw-charge-control.conf ships in the built image (#1080)
2d780e9	chore(deps): update github/codeql-action digest to ff2f1c6 (#1097)
15f50b2	ci: guard the testsuite workflow contract (#1044)
33668ee	chore(deps): update system_files/shared/usr/share/gnome-shell/extensions/blur-my-shell@aunetx digest to 86676ab (#1094)
126049e	chore(deps): update dependency pre-commit to v4.6.2 (#1088)
19dc72a	chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 3097cdd (#1087)
fdde04d	chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to feeeb1d (#1084)
550678a	docs(security): document the cosign signature-format requirement (#1071)
1168c5d	chore(deps): update ghcr.io/ublue-os/brew:latest docker digest to de0391c (#1070)
e4c24c0	chore(deps): update ghcr.io/projectbluefin/common:latest docker digest to 9ee1848 (#1069)
2773b09	ci: actually remove the mirrored validate status shim (#1074)
ba89505	ci: replace mirrored validate status with real check on merge queue (#1072)
49435c8	fix(packages): add fzf to base package manifest and image validation test (#965) (#1057)
b8772b9	docs(release): clarify e2e gates for stable promotion (#1049)

---

Requires 2 approvals from @projectbluefin/maintainers. Force: gh pr merge <pr-number> --repo projectbluefin/bluefin --merge --admin

Desktop Screenshot

Caution

Auto-merge scheduled for Tuesday 04:00 UTC (bluefin/dakota) / Thursday 04:00 UTC (bluefin-lts).
To block this release: add the do-not-merge label to this PR before that time.
Remove the label when the issue is resolved -- the next weekly window will pick it up automatically.

[github-actions]

Reminder

Days since last release: 29. This PR has been open for over two weeks without a stable release.