Add support for multiple composefs= digests by cgwalters · Pull Request #2248 · bootc-dev/bootc

cgwalters · 2026-06-12T10:42:12Z

This adapts bootc to build on top of the work in composefs/composefs-rs#297

A toplevel goal here is supporting both the v1 and v2 EROFS formats, which means we'll work with RHEL9 era systems.

Right now bootc container ukify still generates composefs= i.e. v2, but I'd like to change that to do both - it's a pretty cheap thing (the main cost is generating the fsverity digests).

cgwalters · 2026-06-22T16:07:48Z

OK I think the chain here should be:

Merge Release 0.7.0 composefs/composefs-rs#314
Rebase on this on top

jmarrero

lgtm

just needs a rebase I think.

The only nit is that

            config.erofs_formats = composefs_ctl::composefs::erofs::format::FormatConfig {
                default: composefs_ctl::composefs::erofs::format::FormatVersion::V1,
                extra: [composefs_ctl::composefs::erofs::format::FormatVersion::V2].into(),
            };

Is duplicated 3 times here. So if we add a new version in the future we need to care about 3 places. Maybe it should be a helper function?

Johan-Liebert1

Lots of .clone() that I believe shouldn't be needed, I might be wrong though. Supporting both V1 and V2 are great, but it is a bit messy, not sure if there's a better way to do this. Also, some inconsistencies here and there (esp in comments) regarding whether V1 is the default or V2

Johan-Liebert1 · 2026-06-29T04:26:58Z

 seal_state=$1
 shift
+# EROFS format version to pass to bootc container ukify (optional, default: v2)
+erofs_version=${1:-v2}


Kind of conflicts with composefs/composefs-rs#330. We'd probably want to have the same defaults everywhere

Johan-Liebert1 · 2026-06-29T04:34:37Z

    os_id: Option<String>,
    boot_digest: String,
+    /// The composefs image digest parsed from (and validated against) the UKI's
+    /// own cmdline.  This is the authoritative deployment key for UKI boots:


This is for every boot right, not just UKIs?

Johan-Liebert1 · 2026-06-29T04:38:22Z

+        let composefs_info = BootComposefsCmdline::<Sha512HashValue>::from_cmdline(&cmdline)
+            .context("Parsing composefs=")?
+            .ok_or_else(|| anyhow::anyhow!("No composefs= or composefs.digest.v1= karg found in UKI cmdline"))?;
+        let composefs_cmdline = composefs_info.digest().clone();


This name is a bit confusing. afaiu this is only the digest and not the entire cmdline?

Johan-Liebert1 · 2026-06-29T04:59:16Z


 if test "${boot_type}" = "uki"; then
-  /run/packaging/seal-uki /run/target /out /run/secrets "${allow_missing_verity}" "${seal_state}"
+  /run/packaging/seal-uki /run/target /out /run/secrets "${allow_missing_verity}" "${seal_state}" "${erofs_version}"


We also need this in tmt/tests/booted/test-install-to-filesystem-var-mount.sh

Johan-Liebert1 · 2026-06-29T05:13:48Z

+    // (see setup_composefs_boot for the full rationale).  Provisional value for
+    // BLS (where bootc writes the karg from this same id); overridden for UKI by
+    // the digest the UKI cmdline actually carries.
+    let provisional_deploy_id = boot_id_v2.clone().unwrap_or_else(|| id.clone());


id here is confusing especially with both boot_id_v1/v2 defined. I believe it's the erofs digest corresponding to the erofs version that the repo is currently using?

Johan-Liebert1 · 2026-06-29T05:16:01Z

+    // Authoritative collision check against the final deploy key.  For UKI this
+    // may differ from the provisional checked above (the UKI may carry a
+    // non-default digest), so this is the load-bearing guarantee.
+    ensure_no_deploy_collision(host, &deploy_id)?;


why do we need to do this again?

Johan-Liebert1 · 2026-06-29T05:18:03Z

+    // setup-root opens `state/deploy/<this>` using that same karg, so we must
+    // key the deployment off exactly this value -- whether the UKI was sealed
+    // with the V2 (default) or V1 EROFS digest.
+    let deploy_id = uki_info.composefs_cmdline.clone();


we shouldn't need to clone this?

cgwalters · 2026-08-31T13:11:56Z

In the general case we may need to add support for "older bootc version" which includes not just the v2 digest but the xattr filtering logic too? See composefs/composefs-rs#337

cgwalters · 2026-09-03T15:45:51Z

OK, this one wants #2290 to land first which fixes our composefs mounts on c9s.

cgwalters · 2026-09-16T11:28:41Z

OK, this one wants #2290 to land first which fixes our composefs mounts on c9s.

OK! Finally that landed. I rebased this, but it's still somewhat raw, especially the last commit.

cgwalters · 2026-09-16T22:56:54Z

+    repo_requires_fsverity: bool,
+    missing_fsverity_allowed: bool,
+    uki_allows_missing_fsverity: bool,


Too many bool here...I think we may need an enum

cgwalters · 2026-09-16T22:58:05Z

+    Ok(())
+}
+
+/// Validate every primary UKI before any bootloader or ESP operation.  The


Hmmm I'm not sure, I think we need to be robust to corrupted state and allow recovery. Bailing early hurts that.

This seems more like a bootc internals fsck style thing.

cgwalters · 2026-09-16T22:58:35Z

+            .file_path
+            .file_name()
+            .ok_or_else(|| anyhow!("Could not get UKI file name"))?
+            .to_string_lossy()


No. We should require UTF-8.

cgwalters · 2026-09-16T23:15:28Z

+const COMPOSEFS_DIGEST_V1_FEATURE: &str = "/usr/lib/bootc/initramfs-features/composefs-digest-v1";
+const COMPOSEFS_DIGEST_V1_FEATURE_CONTENT: &[u8] = b"composefs-digest-v1 state-v1\n";
+
+/// Query `lsinitrd` without unpacking or executing any initramfs contents.


No, this is awful. I don't want ukify to be parsing the initramfs.

Among other things I don't want to hard depend on dracut.

I think we should just default to injecting both EROFS kargs right?

If we just want the cmdline, we have a function in composefs-rs for that. get_uki_cmdline_buffered

Johan-Liebert1 · 2026-09-17T09:12:42Z

Minor thing here, but this is now definitely out of sync with https://github.com/composefs/composefs-rs/blob/main/crates/composefs-setup-root/src/main.rs

Not sure if we'd want to keep them in sync

Johan-Liebert1 · 2026-09-17T09:18:50Z


+fn parse_composefs_candidates(cmdline: &str) -> Result<Vec<ComposefsCmdline<Sha512HashValue>>> {
+    let mut candidates = Vec::new();
+    for token in split_cmdline(cmdline) {


We should really be using the kernel-cmdline crate here

Johan-Liebert1 · 2026-09-17T09:21:56Z

+fn mount_composefs_candidate(
+    sysroot: &OwnedFd,
+    candidate: &ComposefsCmdline<Sha512HashValue>,
+    allow_missing_fsverity: bool,


I think it's worth documenting that allow_missing_verity is coming from the repo and not the cmdline

Johan-Liebert1 · 2026-09-17T09:27:03Z

+fn parse_composefs_candidates(cmdline: &str) -> Result<Vec<ComposefsCmdline<Sha512HashValue>>> {
+    let mut candidates = Vec::new();
+    for token in split_cmdline(cmdline) {
+        if token.starts_with(&format!("{KARG_COMPOSEFS_DIGEST}="))


I think we should only allow one of each, as in at max composefs.digest=abc123 composefs=a1b2c3. I don't think we should allow multiple of composefs.digest= or composefs= in the kernel cmdline

Johan-Liebert1 · 2026-09-17T10:04:29Z

+    cmdline.remove(&ParameterKey::from(COMPOSEFS_CMDLINE));
+    cmdline.remove(&ParameterKey::from(COMPOSEFS_DIGEST_CMDLINE));


In initrarmfs/src/lib.rs these are imported from composefs-rs under the names KARG_V2 and KARG_COMPOSEFS_DIGEST respectively. We should just use one import location, or at least have the same names for constants

Johan-Liebert1 · 2026-09-17T10:11:15Z

+        let cmdline = uki::get_cmdline_buffered(&mut uki_reader).context("Getting UKI cmdline")?;
+        let composefs_info = ComposefsBootCmdline::<Sha512HashValue>::from_cmdline(&cmdline)
+            .context("Parsing composefs=")?
+            .ok_or_else(|| anyhow::anyhow!("No composefs image in UKI cmdline"))?;


Suggested change

.ok_or_else(|| anyhow::anyhow!("No composefs image in UKI cmdline"))?;

.ok_or_else(|| anyhow::anyhow!("No composefs digest in UKI cmdline"))?;

Johan-Liebert1 · 2026-09-17T10:37:26Z

    let entries =
        get_boot_resources(&fs, &*repo).context("Extracting boot entries from OCI image")?;

+    // If the UKI was built by tooling using a different xattr filtering


We already do this when pulling the repo. Why again?

Also, these functions have nothing to do with "boot" itself. They should be in a separate file, like boot_utils.rs or something

Johan-Liebert1 · 2026-09-17T10:58:40Z

+
+let is_composefs = (tap is_composefs)
+
+if not $is_composefs {


can use skip_if_ostree

Johan-Liebert1 · 2026-09-17T11:02:17Z

This test specifically is failing with

content: error: Installing to disk: Setting up composefs boot: The UKI requests insecure composefs operation, but this repository requires fs-verity. Use --allow-missing-fsverity only when missing fs-verity is explicitly supported for this install. content: Connection to localhost closed.

I guess in the install path --allow-missing-verity is not being respected?

Copilot

Copilot review overview

🟡 Changes recommended

Existing V2-only repositories cannot be reopened with the dual config, and fallback UKI candidates are not fully validated.

Get a fresh assessment by requesting another Copilot review.

Review effort: Balanced
Findings: 2

Open (2)

Validate every composefs candidate and enforce consistent verity policy · New
Allow existing repositories to retain their recorded format configuration · New

What changed in this PR

Adds dual EROFS V1/V2 composefs support across UKI generation, repository management, boot selection, installation, upgrades, and regression testing.

Changes:

Generates V1 UKI digests with a V2 compatibility fallback.
Supports multi-format repository, boot, upgrade, status, and GC paths.
Adds unit, integration, historical bridge, and booted-system coverage.

File	Description
`tmt/tests/tests.fmf`	Registers bridge test.
`tmt/tests/Dockerfile.upgrade`	Parameterizes upgrade image and EROFS version.
`tmt/tests/booted/test-install-to-filesystem-var-mount.sh`	Selects EROFS format in test UKIs.
`tmt/tests/booted/test-install-outside-container.nu`	Validates installed UKI and verity policy.
`tmt/tests/booted/test-image-upgrade-reboot.nu`	Checks format-specific upgrade UKIs.
`tmt/tests/booted/test-composefs-uki-dumpfile.nu`	Updates mismatch assertions.
`tmt/tests/booted/test-composefs-corrupted-state-resilience.nu`	Uses a valid-length missing digest.
`tmt/tests/booted/test-49-composefs-1-16-bridge.nu`	Tests bootc 1.16 migration and rollback.
`tmt/tests/booted/tap.nu`	Adds shared EROFS test controls.
`tmt/tests/booted/readonly/046-test-erofs-version.nu`	Verifies booted digest format.
`tmt/tests/booted/README.md`	Documents regression and bridge testing.
`tmt/plans/integration.fmf`	Adds generated bridge plan.
`Justfile`	Plumbs image and EROFS configuration.
`hack/packages.txt`	Adds `binutils` for UKI inspection.
`docs/src/man/bootc-container-ukify.8.md`	Documents the new option and defaults.
`docs/src/experimental-composefs.md`	Documents transition and compatibility scope.
`Dockerfile`	Passes EROFS format during sealing.
`crates/xtask/src/xtask.rs`	Adds bridge and storage-control arguments.
`crates/xtask/src/tmt.rs`	Supports bridge images and disabled plans.
`crates/tests-integration/src/container.rs`	Tests digest and UKI argument generation.
`crates/lib/src/ukify.rs`	Generates ordered V1/V2 UKI arguments.
`crates/lib/src/testutils.rs`	Updates fixtures to SHA-512 identities.
`crates/lib/src/store/mod.rs`	Configures new dual-format repositories.
`crates/lib/src/parsers/bls_config.rs`	Parses both composefs argument forms.
`crates/lib/src/install.rs`	Reworks install identity and verity policy handling.
`crates/lib/src/composefs_consts.rs`	Removes obsolete command-line constant.
`crates/lib/src/cli.rs`	Exposes EROFS version selection.
`crates/lib/src/bootc_composefs/update.rs`	Handles multiple boot-image identities.
`crates/lib/src/bootc_composefs/status.rs`	Parses and reports either digest form.
`crates/lib/src/bootc_composefs/state.rs`	Propagates command-line parse failures.
`crates/lib/src/bootc_composefs/soft_reboot.rs`	Builds format-aware soft-reboot arguments.
`crates/lib/src/bootc_composefs/repo.rs`	Adds repository policy and boot-image preparation.
`crates/lib/src/bootc_composefs/gc.rs`	Retains references across both formats.
`crates/lib/src/bootc_composefs/digest.rs`	Computes version-specific digests.
`crates/lib/src/bootc_composefs/boot.rs`	Validates and installs multi-format UKIs.
`crates/initramfs/src/lib.rs`	Selects the first mountable digest candidate.
`crates/initramfs/dracut/module-setup.sh`	Records V1 initramfs capability.
`crates/initramfs/bootc-root-setup.service`	Activates for either command-line key.
`contrib/packaging/seal-uki`	Forwards EROFS version selection.
`contrib/packaging/install-buildroot`	Safely synchronizes installed packages.
`.github/workflows/ci.yml`	Configures distro-specific buildroots and exclusions.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

+        let composefs_info = ComposefsBootCmdline::<Sha512HashValue>::from_cmdline(&cmdline)
+            .context("Parsing composefs=")?
+            .ok_or_else(|| anyhow::anyhow!("No composefs digest in UKI cmdline"))?;


+    let config = composefs_repository_config(allow_missing_fsverity);
+    let (mut repo, created) =
        crate::store::ComposefsRepository::init_path(rootfs_dir, "composefs", config)
            .context("Failed to initialize composefs repository")?;


CentOS 9 cannot consume sealed host-built UKI upgrades because shared storage is unavailable and its guest-local builder produces unsigned images. Record that limitation while retaining installation, readonly, other upgrade variants, and newer-system sealed coverage. With V1 EROFS as the default, sealed UKIs are viable on CentOS 9; exclude only the BLS and unsealed modes that still require newer dracut/systemd features. Resolve both the runtime base and buildroot from each matrix OS. Otherwise CentOS 9 jobs silently build EL10 RPMs and binaries that cannot run against its older glibc. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

The `--bind-storage-ro` host container-storage passthrough relies on a libvirt-managed virtiofsd, which cannot run in some environments such as nested user namespaces or cloud/non-qemu setups. Plans that normally request bind-storage previously had no way to opt out short of editing plan metadata. Add a `--skip-bind-storage` flag (and matching `BOOTC_skip_bind_storage` env var) that forces those plans to run without the host container- storage mount. Default behavior is unchanged: bind-storage is still used wherever it is requested and supported. Plans that depend on a locally built upgrade image reaching the VM via bind-storage will be unable to perform the upgrade/switch step when this is set. Assisted-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

composefs-rs landed support for V1 EROFS, which we need to enable composefs on RHEL9. Make new installs produce both V1 and V2 EROFS images for committed composefs images, and make V1 the default wherever a single format must be chosen: the repository's default EROFS format, the `--erofs-version` flag on `bootc container ukify` and `compute-composefs-digest`, and the provisional BLS deploy key computed at install time. V2 remains available via `--erofs-version=v2` and is always generated alongside V1, so a deployment can still be booted via the legacy `composefs=` karg. This keeps the install path consistent with the upgrade and GC paths, which already prefer V1. Critically, a V1 digest must be written as a `composefs.digest=v1-...` karg, not the legacy `composefs=` shorthand (which upstream reserves for V2). Add `build_composefs_karg`, which selects the correct form via composefs-boot's own `ComposefsCmdline::new_v1`/`new_v2` and `to_cmdline_arg`, and use it everywhere bootc writes a new karg (install, upgrade, `container ukify`, soft-reboot) instead of the version-unaware helper that only ever emitted `composefs=`. Assisted-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

Older and newer composefs-rs tooling can differ in xattr filtering and EROFS defaults, which otherwise breaks UKI upgrades across bootc versions. Search supported combinations for the digest embedded in the UKI so a newer client can adapt to an older target. Keep the missing-deployment resilience fixture syntactically valid so typed argument parsing reaches the warning path it is intended to exercise. Assisted-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

We want to support upgrades from older bootc. bootc 1.16 stagers create only V2 images and state. A UKI built with a newly regenerated initramfs carries the V1 digest followed by the V2 fallback, so its first boot selects the V2 image and state. A subsequent upgrade by a current client can then create and select the V1 image. Image builders must regenerate the initramfs when updating bootc; this change does not claim compatibility for stale initramfs artifacts. Explicit V2 remains available as a format control. Always emit both digests without probing initramfs contents. Preserve strict repository requirements when recovering a non-default boot image; changing serialization must not relax integrity. Assisted-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

Composefs installation must preserve kernel argument policy, validate the target repository before writing boot artifacts, and inspect external images from a target-backed staged copy. Keep the source identity and initial UKI fs-verity policy authoritative across the entire install path. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

The compatibility claim depends on regenerated current initramfs artifacts and on keeping strict and missing-verity fixtures distinct. Make the opt-in tests assert those boundaries and inspect the installed target rather than the running installer. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

Document the exact dual-format UKI behavior, separate fs-verity from Secure Boot, and limit the historical bridge claim to the tested bootc 1.16.0 regenerated-initramfs fixtures. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

The UKI parser is looking for a composefs digest, not an image object. Make failures identify the missing value so policy and boot-entry diagnostics point at the actual malformed command line. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

The separate-/var install test should exercise the format selected by the test plan rather than silently forcing V1. Forward the environment selection while retaining V1 as the standalone default. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

…fs boots On native composefs boots, systemd-tmpfiles-setup.service and systemd-random-seed.service race: both are wanted by sysinit.target with no ordering between them. When the container image ships a sparse /var (common after the var-tmpfiles lint removes /var/lib), the var-lib-nfs-rpc_pipefs.mount unit creates /var/lib with an unlabeled_t SELinux context before policy loads, and systemd-random-seed's attempt to mkdir /var/lib/systemd is denied by SELinux. systemd-tpm2-setup similarly fails trying to write to the nonexistent directory. On ostree boots this doesn't happen because ostree-remount.service provides Before=systemd-tmpfiles-setup and Before=systemd-random-seed, but that unit has ConditionKernelCommandLine=ostree and doesn't run on native composefs boots. Generate a systemd-tmpfiles-setup.service.d drop-in on native composefs boots that adds Before=systemd-random-seed.service and Before=systemd-tpm2-setup.service, ensuring /var/lib/systemd exists with correct labels before those services start. Also refactor the generator to inspect the root filesystem source once and share the is_composefs/is_ostree detection across all blocks. Assisted-by: AI Signed-off-by: Colin Walters <walters@verbum.org>

github-actions Bot added the area/install Issues related to `bootc install` label Jun 12, 2026

bootc-bot Bot requested a review from jeckersb June 12, 2026 10:42

cgwalters mentioned this pull request Jun 22, 2026

Update composefs #2262

Merged

jmarrero self-requested a review June 22, 2026 13:28

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from 3b90847 to f92013b Compare June 22, 2026 17:30

cgwalters marked this pull request as ready for review June 22, 2026 18:51

bootc-bot Bot requested a review from henrywang June 22, 2026 18:51

cgwalters added the ci/tier-1 Run CI for tier-1 OS (centos-10) only label Jun 22, 2026

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from f92013b to 69757fc Compare June 22, 2026 21:56

jmarrero previously approved these changes Jun 28, 2026

View reviewed changes

Johan-Liebert1 requested changes Jun 29, 2026

View reviewed changes

cgwalters added this to the 1.17 milestone Jul 6, 2026

cgwalters dismissed jmarrero’s stale review via 4ecc241 July 7, 2026 22:55

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch 3 times, most recently from 6ec1bf4 to cbff4b5 Compare July 9, 2026 15:20

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from cbff4b5 to 8e7417f Compare August 31, 2026 16:16

github-actions Bot added the area/documentation Updates to the documentation label Aug 31, 2026

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from 4bf145c to 45e92e4 Compare September 1, 2026 11:59

Johan-Liebert1 mentioned this pull request Sep 8, 2026

Remove condition on existance of /run/ostree-booted for bootc systemd units/timers #2437

Open

cgwalters-bot mentioned this pull request Sep 9, 2026

deploy: Pull bound images before staging via composefs mount #2290

Merged

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from 45e92e4 to f839490 Compare September 16, 2026 10:59

cgwalters added the ci/merge Run full CI suite (all OSes) — equivalent to merge queue label Sep 16, 2026

Johan-Liebert1 self-assigned this Sep 16, 2026

cgwalters mentioned this pull request Sep 16, 2026

composefs+UKI: Try to generate image with matching digest #2353

Closed

cgwalters commented Sep 16, 2026

View reviewed changes

Johan-Liebert1 reviewed Sep 17, 2026

View reviewed changes

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from f839490 to 9d48e85 Compare September 18, 2026 01:47

Johan-Liebert1 force-pushed the adapt-composefs-rs-v1-erofs-2 branch 2 times, most recently from 26b0c2c to b868db6 Compare September 18, 2026 06:17

Johan-Liebert1 reviewed Sep 18, 2026

View reviewed changes

Comment thread crates/lib/src/deploy.rs Outdated

Johan-Liebert1 reviewed Sep 18, 2026

View reviewed changes

Comment thread crates/lib/src/install.rs Outdated

Johan-Liebert1 reviewed Sep 18, 2026

View reviewed changes

Comment thread crates/lib/src/install.rs Outdated

Johan-Liebert1 reviewed Sep 18, 2026

View reviewed changes

Comment thread crates/lib/src/install.rs Outdated

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from b868db6 to e20fb0d Compare September 18, 2026 17:57

cgwalters requested a balanced review from Copilot September 18, 2026 22:46

Copilot started reviewing on behalf of cgwalters September 18, 2026 22:46 View session

Copilot AI reviewed Sep 18, 2026

View reviewed changes

cgwalters added 11 commits September 18, 2026 19:42

cgwalters force-pushed the adapt-composefs-rs-v1-erofs-2 branch from e20fb0d to 2df476c Compare September 18, 2026 23:45

		cmdline.remove(&ParameterKey::from(COMPOSEFS_CMDLINE));
		cmdline.remove(&ParameterKey::from(COMPOSEFS_DIGEST_CMDLINE));

	.ok_or_else(\|\| anyhow::anyhow!("No composefs image in UKI cmdline"))?;
	.ok_or_else(\|\| anyhow::anyhow!("No composefs digest in UKI cmdline"))?;

Conversation

cgwalters commented Jun 12, 2026

Uh oh!

cgwalters commented Jun 22, 2026

Uh oh!

jmarrero left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Johan-Liebert1 left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

cgwalters commented Aug 31, 2026

Uh oh!

cgwalters commented Sep 3, 2026

Uh oh!

cgwalters commented Sep 16, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟡 Changes recommended

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

jmarrero left a comment •

edited

Loading