Recurring maintenance batch (2026-05-27) #360

Merged

eblume merged 3 commits from recurring-maintenance-2026-05-27 into main

2026-05-28 06:01:59 -07:00

eblume commented

2026-05-27 17:34:39 -07:00

Owner

Bundle of recurring overdue tasks:

Ringtail flake update
Security & compliance report review
Tooling deps bump (prek, fly, mise, forgejo workflows)
Top stale doc review
Top stale service review (if trivial)

Larger items (service version bumps requiring upgrades, non-local container migration) split out as separate PRs.

Bundle of recurring overdue tasks: - Ringtail flake update - Security & compliance report review - Tooling deps bump (prek, fly, mise, forgejo workflows) - Top stale doc review - Top stale service review (if trivial) Larger items (service version bumps requiring upgrades, non-local container migration) split out as separate PRs.

eblume added 3 commits

2026-05-27 18:40:30 -07:00

C1: update ringtail flake inputs (disko, home-manager, nixpkgs) bd53ad51f8

Routine weekly flake update. Will deploy with `mise run provision-ringtail`
after PR review.

C1: tooling deps bump — prek hooks, fly proxy, typer 568e355d10

Monthly tooling refresh per [[update-tooling-dependencies]]:

- prek: trufflehog v3.95.3, kingfisher v1.101.0, ruff v0.15.14, ansible-core 2.21.0
- fly proxy: nginx 1.30.1-alpine, alloy v1.16.1
- mise-tasks: typer==0.26.2 across all scripts
- tailscale held at v1.94.2 (v1.96.5+ MagicDNS regression)

C1: doc review — refresh indri reference card bf72493e7f

Top stale doc per docs-review (never reviewed). Add devpi, cv, docs to
native-services list (post-2026-04 migration to LaunchAgent/Caddy),
widen k8s note to reflect the broader set of apps on ringtail and the
planned indri-minikube decommission, add CPU/RAM specs.