Org Weekly Report 2026-04-22 -- 2026-04-29 (kagenti)

# Org Weekly Report: 2026-04-22 -- 2026-04-29

*Generated for [kagenti](https://github.com/kagenti)*

## Org-Wide Summary

| Repo | Merged PRs | Open PRs | Open Issues | New Issues | CI Pass Rate | Status |
|------|-----------|----------|-------------|------------|--------------|--------|
| [humr](https://github.com/kagenti/humr) | 67 | 11 | 50 | 16 | 22/30 (73%) | active |
| [kagenti](https://github.com/kagenti/kagenti) | 33 | 33 | 125 | 36 | 22/30 (73%) | active |
| [kagenti-extensions](https://github.com/kagenti/kagenti-extensions) | 8 | 7 | 25 | 3 | 22/30 (73%) | active |
| [kagenti-operator](https://github.com/kagenti/kagenti-operator) | 6 | 10 | 10 | 0 | 24/30 (80%) | active |
| [plugins-adapter](https://github.com/kagenti/plugins-adapter) | 5 | 2 | 14 | 0 | 24/30 (80%) | active |
| [onecli](https://github.com/kagenti/onecli) | 5 | 2 | 1 | 0 | 21/30 (70%) | active |
| [workload-harness](https://github.com/kagenti/workload-harness) | 3 | 1 | 1 | 0 | 28/30 (93%) | active |
| [.github](https://github.com/kagenti/.github) | 3 | 1 | 4 | 0 | 11/30 (37%) | active |
| [agentic-control-plane](https://github.com/kagenti/agentic-control-plane) | 3 | 6 | 1 | 0 | 28/30 (93%) | active |
| [adk](https://github.com/kagenti/adk) | 3 | 9 | 15 | 1 | 9/30 (30%) | active |
| [OpenShell](https://github.com/kagenti/OpenShell) | 2 | 0 | 0 | 0 | 13/30 (43%) | active |
| [openshell-driver-openshift](https://github.com/kagenti/openshell-driver-openshift) | 1 | 0 | 0 | 0 | 3/4 (75%) | active |
| [agent-examples](https://github.com/kagenti/agent-examples) | 1 | 28 | 5 | 0 | 23/30 (77%) | active |
| [openshell-credentials-keycloak](https://github.com/kagenti/openshell-credentials-keycloak) | 0 | 1 | 0 | 0 | -- | quiet |
| [ecosystem-guide](https://github.com/kagenti/ecosystem-guide) | 0 | 2 | 0 | 0 | 28/30 (93%) | quiet |
| [adk-starter](https://github.com/kagenti/adk-starter) | 0 | 0 | 0 | 0 | 0/6 (0%) | quiet |
| [capture-the-flag](https://github.com/kagenti/capture-the-flag) | 0 | 1 | 0 | 0 | 2/4 (50%) | quiet |
| **TOTAL** | **140** | **114** | **251** | **56** | | |

## Cross-Repo Highlights

* **@tomkis** dominated **humr** with 19 merged PRs — agent-runtime refactor (`tseng` adoption, layered skills) plus doc-drift skill scoping. Humr was the most active repo this week (67 merged PRs).
* **@cwiklik** was the primary driver of **kagenti** (8 PRs) — landed SandboxTemplate + SandboxClaim infrastructure, agent-sandbox UI feature flags, Kind installer support.
* **@rubambiza** drove CI/automation across **5 repos** (.github, agentic-control-plane, humr, onecli, workload-harness) — added the org-wide "PR title verifier" workflow this week.
* **@pdettori** spread across **4 repos** focused on the **OpenShell MVP** push (kagenti, OpenShell, agentic-control-plane, openshell-driver-openshift) — 6 merged PRs.
* **@huang195** drove **AuthBridge / auth** work across kagenti, kagenti-extensions, kagenti-operator — auto-create authbridge ConfigMaps in agent namespaces, weather demo proxy-sidecar mode.
* **@Tomas2D** contributed 10 PRs across humr + onecli (provider config docs, OneCLI envMappings).
* **Org CI pass rate: ~64%** (258/405 across reporting repos). Repos dragging the average down: **adk-starter** at 0% (Weekly Docker Build and Test broken across all 6 runs), **adk** at 30% (Docs Check failing), **.github** at 37% (Check links in site failing), **OpenShell** at 43% (Kagenti CI failing). Repos at ≥93%: workload-harness, agentic-control-plane, ecosystem-guide.
* **Security concern**: [humr#257](https://github.com/kagenti/humr/pull/257) (skills marketplace — install/publish/MCP tools) flagged SECURITY, open 7 days, in Needs Review. [humr#254](https://github.com/kagenti/humr/pull/254) (let agents manage own schedules via MCP) flagged SECURITY, **already Ready to Merge** — should land. [kagenti#1390](https://github.com/kagenti/kagenti/pull/1390) (deploy-shared.sh — cert-manager CA, sandbox) freshly opened SECURITY, 0 days.
* **OpenShell MVP cross-cut**: epic [kagenti#1363](https://github.com/kagenti/kagenti/issues/1363) plus 7+ tracking issues (#1356–#1362) for build-images.sh, deploy-shared.sh, deploy-tenant.sh, configure-cli.sh, charts/openshell, E2E tests. Spans kagenti, OpenShell, openshell-driver-openshift, openshell-credentials-keycloak.
* **AuthBridge cross-cut**: kagenti#1367 (API access), kagenti-extensions#349 (statistics/grpc reflection), kagenti-operator#308 (ConfigMap auto-create) — three repos coordinated this sprint.
* **Sandbox cross-cut** (kagenti): SandboxTemplate + SandboxClaim landed (#1381, #1382), build reconciliation (#1327), Helm flag + Kind installer (#1326), UI feature flag (#1330).
* **Dependabot wave**: 38 dependabot PRs awaiting review across the org — recommend batched review. Concentration: kagenti-operator (6 in Needs Review), kagenti-extensions (3), kagenti (4).
* **Stale CHANGES_REQUESTED in kagenti**: [#1078](https://github.com/kagenti/kagenti/pull/1078) (RyanJenkins99, 39d), [#1172](https://github.com/kagenti/kagenti/pull/1172) (Ladas, 20d), [#1236](https://github.com/kagenti/kagenti/pull/1236) (Ladas, 15d) all sitting unanswered.
* **agent-examples backlog**: 28 open PRs against only 1 merged this week — repo is accumulating.

---

## humr

### Merged PRs (67)
**Top contributors:** @tomkis (19), @pilartomas (13), @Tomas2D (9), @kapetr (7), @jezekra1 (6)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#364](https://github.com/kagenti/humr/pull/364) | docs(arch): note Envoy track in security-and-credentials | @pilartomas | 2026-04-29 |
| [#362](https://github.com/kagenti/humr/pull/362) | fix(channels): resolve workspace paths and use canonical ... | @jezekra1 | 2026-04-28 |
| [#360](https://github.com/kagenti/humr/pull/360) | refactor(ui/chat): apply UI engineering rules | @kapetr | 2026-04-28 |
| [#359](https://github.com/kagenti/humr/pull/359) | feat(channels): attach files by workspace path | @jezekra1 | 2026-04-28 |
| [#358](https://github.com/kagenti/humr/pull/358) | fix(api-server): write SDS DiscoveryResponse YAML for Env... | @pilartomas | 2026-04-28 |
| [#357](https://github.com/kagenti/humr/pull/357) | fix(deploy): bump Envoy sidecar past stale-image gate, ex... | @pilartomas | 2026-04-28 |
| [#355](https://github.com/kagenti/humr/pull/355) | feat(channels): optional file attachment on send_channel_... | @jezekra1 | 2026-04-28 |
| [#353](https://github.com/kagenti/humr/pull/353) | refactor(agent-runtime): adopt tseng — layered skills, pr... | @tomkis | 2026-04-28 |
| [#346](https://github.com/kagenti/humr/pull/346) | feat(controller,ui): experimental Envoy credential inject... | @pilartomas | 2026-04-28 |
| [#344](https://github.com/kagenti/humr/pull/344) | docs(skill): scope doc-drift to architecture docs, exclud... | @tomkis | 2026-04-27 |
| [#343](https://github.com/kagenti/humr/pull/343) | docs(skill): scope doc-drift to architecture docs and cod... | @tomkis | 2026-04-27 |
| [#342](https://github.com/kagenti/humr/pull/342) | docs(pi-agent): document configuring providers via OneCLI... | @Tomas2D | 2026-04-28 |
| [#341](https://github.com/kagenti/humr/pull/341) | fix(ui): reload session log on unexpected WS reconnect | @jezekra1 | 2026-04-27 |
| [#334](https://github.com/kagenti/humr/pull/334) | docs: fix drift flagged in architecture audit | @tomkis | 2026-04-27 |
| [#333](https://github.com/kagenti/humr/pull/333) | docs(adrs): draft unified HITL UX — live-consumer model | @jezekra1 | 2026-04-29 |
| ... | +52 more | | |

### Open PRs (11)

#### Ready to Merge (1)
| # | Title | Author | Notes |
|---|-------|--------|-------|
| [#254](https://github.com/kagenti/humr/pull/254) | feat(api-server): let agents manage their own sche... | @xjacka | SECURITY |

#### Changes Requested (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#140](https://github.com/kagenti/humr/pull/140) | refactor: replace StatefulSet with single-use Jobs... | @JanPokorny | 12 |  |

#### Needs Review (6)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#361](https://github.com/kagenti/humr/pull/361) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#348](https://github.com/kagenti/humr/pull/348) | docs(adrs): draft ADR — agent template store | @tomkis | 1 |  |
| [#347](https://github.com/kagenti/humr/pull/347) | docs(adrs): draft ADR — app-owned scheduling | @tomkis | 1 |  |
| [#345](https://github.com/kagenti/humr/pull/345) | fix(cluster): bound dev cluster disk usage (#244) | @Tomas2D | 1 |  |
| [#332](https://github.com/kagenti/humr/pull/332) | Feature: pod-files push for declarative agent-pod ... | @jjeliga | 1 |  |
| [#257](https://github.com/kagenti/humr/pull/257) | feat(skills): marketplace — install, publish, MCP ... | @PetrBulanek | 7 | SECURITY |

#### Draft PRs (3)
- [#363](https://github.com/kagenti/humr/pull/363) — Feature: pod files push mechanism
- [#352](https://github.com/kagenti/humr/pull/352) — feat: add Microsoft Graph provider
- [#120](https://github.com/kagenti/humr/pull/120) — docs(ui): pre-PoC baseline + feature triage

### CI Health
- 22/30 (73%) passed
- **Failing**: "CI" — 4 failure(s)
- **Failing**: "PR Verifier" — 1 failure(s)

### New Issues (16)
| # | Title | Created |
|---|-------|---------|
| [#354](https://github.com/kagenti/humr/issues/354) | Tune ADR skill to produce shorter, sharper records | 2026-04-28 |
| [#351](https://github.com/kagenti/humr/issues/351) | Preview ports running inside agent pods (e.g. open :5173 ... | 2026-04-28 |
| [#350](https://github.com/kagenti/humr/issues/350) | Share instances directly via the UI, not just through Slack | 2026-04-28 |
| [#349](https://github.com/kagenti/humr/issues/349) | Make session loading and live streaming reliable across r... | 2026-04-28 |
| [#340](https://github.com/kagenti/humr/issues/340) | feat(controller,api-server): ADR-027 fork pods on Envoy s... | 2026-04-27 |
| [#339](https://github.com/kagenti/humr/issues/339) | chore(adr-033): remove OneCLI and the experimentalCredent... | 2026-04-27 |
| [#338](https://github.com/kagenti/humr/issues/338) | feat(api-server,controller): OAuth credentials in K8s Sec... | 2026-04-27 |
| [#336](https://github.com/kagenti/humr/issues/336) | Support invoking humr from Slack DMs and group DMs | 2026-04-27 |
| [#335](https://github.com/kagenti/humr/issues/335) | feature: Per-instance GitHub repo: clone on create, refre... | 2026-04-27 |
| [#309](https://github.com/kagenti/humr/issues/309) | Cloning a GitHub repo inside an agent requires manual git... | 2026-04-24 |
| [#307](https://github.com/kagenti/humr/issues/307) | :bug: `gh auth status` fails for gh enterprise | 2026-04-24 |
| [#306](https://github.com/kagenti/humr/issues/306) | Platform-level history pruning for long-running Telegram ... | 2026-04-24 |
| [#290](https://github.com/kagenti/humr/issues/290) | :bug: Opening slack conversation stream will interrupt it | 2026-04-23 |
| [#288](https://github.com/kagenti/humr/issues/288) | :bug: mobile-view screen height is off | 2026-04-23 |
| [#283](https://github.com/kagenti/humr/issues/283) | PRD: Broken link detector agent | 2026-04-22 |
| [#277](https://github.com/kagenti/humr/issues/277) | Policy-gated credential access with HiTL approval as the ... | 2026-04-22 |

## kagenti

### Merged PRs (33)
**Top contributors:** @cwiklik (8), @app/dependabot (6), @Ladas (4), @huang195 (2), @mrsabath (2)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#1382](https://github.com/kagenti/kagenti/pull/1382) | feat: switch sandbox to SandboxTemplate + SandboxClaim wo... | @cwiklik | 2026-04-28 |
| [#1381](https://github.com/kagenti/kagenti/pull/1381) | feat: add SandboxTemplate + SandboxClaim infrastructure | @cwiklik | 2026-04-28 |
| [#1380](https://github.com/kagenti/kagenti/pull/1380) | fix: replace misleading 'Agent CRD not found' error message | @cwiklik | 2026-04-28 |
| [#1367](https://github.com/kagenti/kagenti/pull/1367) | Feat: Provide API access to AuthBridge config and statistics | @esnible | 2026-04-29 |
| [#1365](https://github.com/kagenti/kagenti/pull/1365) | fix(ci): add pull_request trigger to OpenShell Kind workflow | @Ladas | 2026-04-27 |
| [#1350](https://github.com/kagenti/kagenti/pull/1350) | fix: Add authbridge template ConfigMaps for operator prop... | @huang195 | 2026-04-28 |
| [#1347](https://github.com/kagenti/kagenti/pull/1347) | fix(ci): pass LLM and GitHub secrets to OpenShell E2E wor... | @Ladas | 2026-04-27 |
| [#1345](https://github.com/kagenti/kagenti/pull/1345) | chore(skills): pin image tags for all release types | @mrsabath | 2026-04-27 |
| [#1333](https://github.com/kagenti/kagenti/pull/1333) | chore(deps): Bump aquasecurity/trivy-action from 0.35.0 t... | @app/dependabot | 2026-04-27 |
| [#1332](https://github.com/kagenti/kagenti/pull/1332) | chore(deps): Bump the minor-and-patch group in /kagenti/u... | @app/dependabot | 2026-04-27 |
| [#1331](https://github.com/kagenti/kagenti/pull/1331) | chore(deps): Bump ubi9/ubi-minimal from `fe688da` to `7d4... | @app/dependabot | 2026-04-27 |
| [#1330](https://github.com/kagenti/kagenti/pull/1330) | feat: add agent-sandbox to UI types and feature flags | @cwiklik | 2026-04-27 |
| [#1328](https://github.com/kagenti/kagenti/pull/1328) | fix: address upgrade issues from v0.6.0-alpha.4 to alpha.5 | @pdettori | 2026-04-25 |
| [#1327](https://github.com/kagenti/kagenti/pull/1327) | feat: add Sandbox to build reconciliation workload check | @cwiklik | 2026-04-25 |
| [#1326](https://github.com/kagenti/kagenti/pull/1326) | feat: add agent-sandbox Helm flag and Kind installer support | @cwiklik | 2026-04-24 |
| ... | +18 more | | |

### Open PRs (33)

#### Ready to Merge (3)
| # | Title | Author | Notes |
|---|-------|--------|-------|
| [#1379](https://github.com/kagenti/kagenti/pull/1379) | fix(otel): use RHOAI MLflow gateway URL (status.ur... | @ChristianZaccaria |  |
| [#1378](https://github.com/kagenti/kagenti/pull/1378) | feat(ci): trigger OpenShell Kind with /run-e2e-ope... | @Ladas | SECURITY |
| [#1364](https://github.com/kagenti/kagenti/pull/1364) | docs: OpenShell MVP implementation plan and PoC al... | @pdettori |  |

#### Changes Requested (4)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#1344](https://github.com/kagenti/kagenti/pull/1344) | feat: Add initial skill management UI and backend ... | @eranra | 2 |  |
| [#1236](https://github.com/kagenti/kagenti/pull/1236) | feat: add remaining sandbox, integration, and anal... | @Ladas | 15 | stale (15d) |
| [#1172](https://github.com/kagenti/kagenti/pull/1172) | fix: use DNS_PING for Keycloak JGroups cluster dis... | @Ladas | 20 | stale (20d) |
| [#1078](https://github.com/kagenti/kagenti/pull/1078) | feat: Add automated zombie cleanup workflow for CI... | @RyanJenkins99 | 39 | stale (39d) |

#### Needs Review (6)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#1390](https://github.com/kagenti/kagenti/pull/1390) | feat: deploy-shared.sh — cert-manager CA, sandbox ... | @pdettori | 0 | SECURITY |
| [#1383](https://github.com/kagenti/kagenti/pull/1383) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#1319](https://github.com/kagenti/kagenti/pull/1319) | docs: OpenShell integration architecture — sandbox... | @Ladas | 5 | SECURITY |
| [#1271](https://github.com/kagenti/kagenti/pull/1271) | docs: Link health dashboard (auto-updated) | @clawgenti | 11 |  |
| [#965](https://github.com/kagenti/kagenti/pull/965) | chore: Bump OpenShift version from 4.20.11 to 4.20.13 | @RyanJenkins99 | 43 | stale (43d) |
| [#938](https://github.com/kagenti/kagenti/pull/938) | Update table of contents for components documentation | @Romrom54 | 46 | stale (46d) |

#### Draft PRs (20)
20 drafts from @Alan-Cha, @cwiklik, @Ladas, @usize, @akram, @kevincogan, @mrsabath

### CI Health
- 22/30 (73%) passed
- **Failing**: "Cleanup Stale HyperShift Clusters" — 2 failure(s)

### New Issues (36)
| # | Title | Created |
|---|-------|---------|
| [#1386](https://github.com/kagenti/kagenti/issues/1386) | :chore: Clean up log injection errors reported by CodeQL | 2026-04-28 |
| [#1385](https://github.com/kagenti/kagenti/issues/1385) | Propose upstream PR for compute-driver-socket and credent... | 2026-04-28 |
| [#1377](https://github.com/kagenti/kagenti/issues/1377) | feat: agent versioning, upgrade path, and rollback model | 2026-04-28 |
| [#1376](https://github.com/kagenti/kagenti/issues/1376) | feat: dynamic Keycloak role management per team/project | 2026-04-28 |
| [#1375](https://github.com/kagenti/kagenti/issues/1375) | feat: namespace-scoped RBAC and team isolation model | 2026-04-28 |
| [#1374](https://github.com/kagenti/kagenti/issues/1374) | feat: automate ClusterBuildStrategy and in-cluster regist... | 2026-04-28 |
| [#1373](https://github.com/kagenti/kagenti/issues/1373) | feat(admin-ui): platform health & configuration dashboard | 2026-04-28 |
| [#1372](https://github.com/kagenti/kagenti/issues/1372) | feat(admin-ui): team/namespace lifecycle management | 2026-04-28 |
| [#1371](https://github.com/kagenti/kagenti/issues/1371) | feat: gate route/service exposure on backend readiness | 2026-04-28 |
| [#1370](https://github.com/kagenti/kagenti/issues/1370) | feat: preflight validation — Istio, networking, registry,... | 2026-04-28 |
| [#1369](https://github.com/kagenti/kagenti/issues/1369) | feat: make installer warnings/errors actionable with reme... | 2026-04-28 |
| [#1368](https://github.com/kagenti/kagenti/issues/1368) | epic: Platform Operator Experience — Install, Admin & Lif... | 2026-04-28 |
| [#1366](https://github.com/kagenti/kagenti/issues/1366) | feature: AuthBridge API in support of user interface | 2026-04-27 |
| [#1363](https://github.com/kagenti/kagenti/issues/1363) | epic: OpenShell MVP — Gateway-per-Tenant on Kind + OpenShift | 2026-04-27 |
| [#1362](https://github.com/kagenti/kagenti/issues/1362) | feat: E2E tests — multi-tenant OpenShell validation | 2026-04-27 |
| [#1361](https://github.com/kagenti/kagenti/issues/1361) | chore: update openshell-full-test.sh as thin orchestrator | 2026-04-27 |
| [#1360](https://github.com/kagenti/kagenti/issues/1360) | feat: scripts/openshell/configure-cli.sh — extract certs ... | 2026-04-27 |
| [#1359](https://github.com/kagenti/kagenti/issues/1359) | feat: scripts/openshell/deploy-tenant.sh — platform-aware... | 2026-04-27 |
| [#1358](https://github.com/kagenti/kagenti/issues/1358) | feat: charts/openshell/ Helm chart — per-tenant gateway s... | 2026-04-27 |
| [#1357](https://github.com/kagenti/kagenti/issues/1357) | feat: scripts/openshell/deploy-shared.sh — cert-manager C... | 2026-04-27 |
| [#1356](https://github.com/kagenti/kagenti/issues/1356) | chore: scripts/openshell/build-images.sh — build forked i... | 2026-04-27 |
| [#1354](https://github.com/kagenti/kagenti/issues/1354) | feat: compute driver — namespace flag, tenant labels, sco... | 2026-04-27 |
| [#1349](https://github.com/kagenti/kagenti/issues/1349) | release: add deterministic pin-validation script and manu... | 2026-04-27 |
| [#1348](https://github.com/kagenti/kagenti/issues/1348) | Weekly Report 2026-04-27 | 2026-04-27 |
| [#1342](https://github.com/kagenti/kagenti/issues/1342) | Proposal: Skills Management for Kagenti | 2026-04-26 |
| [#1338](https://github.com/kagenti/kagenti/issues/1338) | bug: failurePolicy: Fail on MutatingWebhookConfiguration ... | 2026-04-26 |
| [#1337](https://github.com/kagenti/kagenti/issues/1337) | bug: keycloak-admin-secret in agent namespaces uses stale... | 2026-04-26 |
| [#1335](https://github.com/kagenti/kagenti/issues/1335) | bug: Helm upgrade does not install new CRDs from kagenti-... | 2026-04-26 |
| [#1334](https://github.com/kagenti/kagenti/issues/1334) | Proposal: Governed agent memory services via MemoryHub | 2026-04-26 |
| [#1329](https://github.com/kagenti/kagenti/issues/1329) | how to create a client in keycloak deployed on kind | 2026-04-25 |
| [#1324](https://github.com/kagenti/kagenti/issues/1324) | ci: Kind E2E — AuthBridge weather advanced (tracks PR #1313) | 2026-04-24 |
| [#1316](https://github.com/kagenti/kagenti/issues/1316) | epic: State Management experimentation | 2026-04-23 |
| [#1310](https://github.com/kagenti/kagenti/issues/1310) | feature: AuthBridge tab for Kagenti Agents | 2026-04-22 |
| [#1309](https://github.com/kagenti/kagenti/issues/1309) | feature: Simplify Import Agent AuthBridge UI | 2026-04-22 |
| [#1305](https://github.com/kagenti/kagenti/issues/1305) | feature: Show Kagenti release info | 2026-04-22 |
| [#1304](https://github.com/kagenti/kagenti/issues/1304) | feat(ocp): add --with-kiali, --with-builds, --with-kuadra... | 2026-04-22 |

## kagenti-extensions

### Merged PRs (8)
**Top contributors:** @mrsabath (3), @esnible (2), @app/dependabot (2), @huang195 (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#349](https://github.com/kagenti/kagenti-extensions/pull/349) | Feat: Collect and serve Kagenti Authbridge statistics and... | @esnible | 2026-04-27 |
| [#347](https://github.com/kagenti/kagenti-extensions/pull/347) | authbridge(weather): fix Kind E2E (Deployment progress de... | @mrsabath | 2026-04-25 |
| [#346](https://github.com/kagenti/kagenti-extensions/pull/346) | fix(demos): Kind CI rollout timeouts for weather advanced... | @mrsabath | 2026-04-24 |
| [#344](https://github.com/kagenti/kagenti-extensions/pull/344) | Feat: Support gRPC Reflection API | @esnible | 2026-04-23 |
| [#343](https://github.com/kagenti/kagenti-extensions/pull/343) | feat(demos): Advanced Weather + AuthBridge demo (token ex... | @mrsabath | 2026-04-24 |
| [#337](https://github.com/kagenti/kagenti-extensions/pull/337) | docs: Update weather demo — proxy-sidecar mode, debug log... | @huang195 | 2026-04-22 |
| [#329](https://github.com/kagenti/kagenti-extensions/pull/329) | build(deps): Bump golang from 1.24.5-alpine to 1.26.2-alp... | @app/dependabot | 2026-04-22 |
| [#328](https://github.com/kagenti/kagenti-extensions/pull/328) | build(deps): Bump github/codeql-action from 4.35.1 to 4.35.2 | @app/dependabot | 2026-04-22 |

### Open PRs (7)

#### Needs Review (4)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#355](https://github.com/kagenti/kagenti-extensions/pull/355) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#352](https://github.com/kagenti/kagenti-extensions/pull/352) | build(deps): Bump envoyproxy/envoy from v1.37.2 to... | @app/dependabot | 1 |  |
| [#351](https://github.com/kagenti/kagenti-extensions/pull/351) | build(deps): Update pyyaml requirement from >=6.0 ... | @app/dependabot | 1 | SECURITY |
| [#350](https://github.com/kagenti/kagenti-extensions/pull/350) | build(deps): Bump aquasecurity/trivy-action from 0... | @app/dependabot | 1 |  |

#### Draft PRs (3)
- [#353](https://github.com/kagenti/kagenti-extensions/pull/353) — Style: Pass 'make lint'
- [#342](https://github.com/kagenti/kagenti-extensions/pull/342) — docs: Plugin architecture proposal
- [#272](https://github.com/kagenti/kagenti-extensions/pull/272) — feat(webhook): Add waypoint authentication mode as default

### CI Health
- 22/30 (73%) passed
- **Failing**: "PR Verifier" — 2 failure(s)

### New Issues (3)
| # | Title | Created |
|---|-------|---------|
| [#348](https://github.com/kagenti/kagenti-extensions/issues/348) | :bug: "make lint" fails | 2026-04-25 |
| [#341](https://github.com/kagenti/kagenti-extensions/issues/341) | feature: More metadata in created Keycloak client | 2026-04-22 |
| [#340](https://github.com/kagenti/kagenti-extensions/issues/340) | Doc: Provide a developer doc for using CLI tools such as ... | 2026-04-22 |

## kagenti-operator

### Merged PRs (6)
**Top contributors:** @app/dependabot (2), @Ygnas (1), @huang195 (1), @r3v5 (1), @ChristianZaccaria (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#314](https://github.com/kagenti/kagenti-operator/pull/314) | feat(mlflow): add HTTP retry with exponential backoff | @Ygnas | 2026-04-28 |
| [#308](https://github.com/kagenti/kagenti-operator/pull/308) | fix: Auto-create authbridge ConfigMaps in agent namespace... | @huang195 | 2026-04-28 |
| [#306](https://github.com/kagenti/kagenti-operator/pull/306) | test: Add combined AgentRuntime + AgentCard + Auth Bridge... | @r3v5 | 2026-04-24 |
| [#305](https://github.com/kagenti/kagenti-operator/pull/305) | cve: Upgrade gRPC and otel packages to fix critical CVEs | @ChristianZaccaria | 2026-04-23 |
| [#302](https://github.com/kagenti/kagenti-operator/pull/302) | chore(deps): Bump github.com/onsi/ginkgo/v2 from 2.28.0 t... | @app/dependabot | 2026-04-22 |
| [#301](https://github.com/kagenti/kagenti-operator/pull/301) | chore(deps): Bump k8s.io/apiextensions-apiserver from 0.3... | @app/dependabot | 2026-04-22 |

### Open PRs (10)

#### Needs Review (7)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#315](https://github.com/kagenti/kagenti-operator/pull/315) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#313](https://github.com/kagenti/kagenti-operator/pull/313) | chore(deps): Bump k8s.io/apiextensions-apiserver f... | @app/dependabot | 1 |  |
| [#312](https://github.com/kagenti/kagenti-operator/pull/312) | chore(deps): Bump k8s.io/client-go from 0.35.4 to ... | @app/dependabot | 1 |  |
| [#311](https://github.com/kagenti/kagenti-operator/pull/311) | chore(deps): Bump k8s.io/apimachinery from 0.35.4 ... | @app/dependabot | 1 |  |
| [#310](https://github.com/kagenti/kagenti-operator/pull/310) | chore(deps): Bump github.com/onsi/ginkgo/v2 from 2... | @app/dependabot | 1 |  |
| [#309](https://github.com/kagenti/kagenti-operator/pull/309) | chore(deps): Bump k8s.io/api from 0.35.4 to 0.36.0... | @app/dependabot | 1 |  |
| [#304](https://github.com/kagenti/kagenti-operator/pull/304) | chore(deps): Bump aquasecurity/trivy-action from 0... | @app/dependabot | 6 |  |

#### Draft PRs (3)
- [#284](https://github.com/kagenti/kagenti-operator/pull/284) — ✨ feat: Add operator-side AgentCard signing with SPIFFE identity
- [#283](https://github.com/kagenti/kagenti-operator/pull/283) — Docs: add RFC for Sigstore integration for AgentCard supply chain verification
- [#259](https://github.com/kagenti/kagenti-operator/pull/259) — feat: Add waypoint mode with automatic gateway provisioning

### CI Health
- 24/30 (80%) passed
- **Failing**: "PR Verifier" — 2 failure(s)
- **Failing**: "CI" — 2 failure(s)
- **Failing**: "release" — 2 failure(s)

## plugins-adapter

### Merged PRs (5)
**Top contributors:** @app/dependabot (5)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#120](https://github.com/kagenti/plugins-adapter/pull/120) | chore(deps): bump cpex from 0.1.0.dev11 to 0.1.0.dev12 in... | @app/dependabot | 2026-04-28 |
| [#119](https://github.com/kagenti/plugins-adapter/pull/119) | chore(deps): bump cpex from 0.1.0.dev11 to 0.1.0.dev12 | @app/dependabot | 2026-04-28 |
| [#118](https://github.com/kagenti/plugins-adapter/pull/118) | chore(deps): bump aquasecurity/trivy-action from 0.35.0 t... | @app/dependabot | 2026-04-27 |
| [#117](https://github.com/kagenti/plugins-adapter/pull/117) | chore(deps): bump cpex from 0.1.0.dev10 to 0.1.0.dev11 in... | @app/dependabot | 2026-04-23 |
| [#116](https://github.com/kagenti/plugins-adapter/pull/116) | chore(deps): bump cpex from 0.1.0.dev10 to 0.1.0.dev11 | @app/dependabot | 2026-04-23 |

### Open PRs (2)

#### Needs Review (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#121](https://github.com/kagenti/plugins-adapter/pull/121) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |

#### Draft PRs (1)
- [#81](https://github.com/kagenti/plugins-adapter/pull/81) — feat: prompt pre fetch plugin call

### CI Health
- 24/30 (80%) passed
- **Failing**: "CI" — 3 failure(s)
- **Failing**: "PR Verifier" — 2 failure(s)
- **Failing**: "docker in /. - Update #1338416930" — 1 failure(s)

## onecli

### Merged PRs (5)
**Top contributors:** @jjeliga (3), @rubambiza (1), @Tomas2D (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#22](https://github.com/kagenti/onecli/pull/22) | remove GH_TOKEN env mapping for ghe | @jjeliga | 2026-04-28 |
| [#21](https://github.com/kagenti/onecli/pull/21) | chore: Remove project board automation workflow | @rubambiza | 2026-04-27 |
| [#20](https://github.com/kagenti/onecli/pull/20) | Fix/5 dynamic gh hostname matching | @jjeliga | 2026-04-24 |
| [#19](https://github.com/kagenti/onecli/pull/19) | chore(turbo): drop GITHUB_ENTERPRISE_* from globalPassThr... | @jjeliga | 2026-04-23 |
| [#18](https://github.com/kagenti/onecli/pull/18) | feat(apps): declare envMappings for every app; make field... | @Tomas2D | 2026-04-22 |

### Open PRs (2)

#### Needs Review (2)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#24](https://github.com/kagenti/onecli/pull/24) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#23](https://github.com/kagenti/onecli/pull/23) | feat: add Microsoft Graph provider | @JanPokorny | 0 |  |

### CI Health
- 21/30 (70%) passed
- **Failing**: "Release" — 6 failure(s)
- **Failing**: "PR Verifier" — 2 failure(s)
- **Failing**: "CI" — 1 failure(s)

## workload-harness

### Merged PRs (3)
**Top contributors:** @rubambiza (2), @yoavkatz (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#13](https://github.com/kagenti/workload-harness/pull/13) | CI: Add PR title verifier workflow | @rubambiza | 2026-04-28 |
| [#11](https://github.com/kagenti/workload-harness/pull/11) | ci: Add org-wide project automation workflow | @rubambiza | 2026-04-24 |
| [#10](https://github.com/kagenti/workload-harness/pull/10) | fix: Debug and enhance Exgentic A2A runner | @yoavkatz | 2026-04-27 |

### Open PRs (1)

#### Needs Review (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#14](https://github.com/kagenti/workload-harness/pull/14) | Feat: Add MCP Gateway support with tool prefix nam... | @kellyaa | 0 |  |

### CI Health
- 28/30 (93%) passed
- **Failing**: "PR Verifier" — 2 failure(s)

## .github

### Merged PRs (3)
**Top contributors:** @rubambiza (2), @jenna-winkler (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#66](https://github.com/kagenti/.github/pull/66) | CI: Pin action-pr-title to SHA (v1.0.2) | @rubambiza | 2026-04-28 |
| [#65](https://github.com/kagenti/.github/pull/65) | docs: Remove onecli entry from project list | @jenna-winkler | 2026-04-22 |
| [#59](https://github.com/kagenti/.github/pull/59) | ci: Add org-wide project automation workflow | @rubambiza | 2026-04-28 |

### Open PRs (1)

#### Ready to Merge (1)
| # | Title | Author | Notes |
|---|-------|--------|-------|
| [#67](https://github.com/kagenti/.github/pull/67) | CI: Force Node.js 24 for action-pr-title | @rubambiza |  |

### CI Health
- 11/30 (37%) passed
- **Failing**: "Check links in site" — 14 failure(s)

## agentic-control-plane

### Merged PRs (3)
**Top contributors:** @pdettori (1), @rubambiza (1), @app/dependabot (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#29](https://github.com/kagenti/agentic-control-plane/pull/29) | build(deps): Bump python base image to 3.14-slim | @pdettori | 2026-04-23 |
| [#27](https://github.com/kagenti/agentic-control-plane/pull/27) | ci: Add org-wide project automation workflow | @rubambiza | 2026-04-22 |
| [#26](https://github.com/kagenti/agentic-control-plane/pull/26) | build(deps): Bump the minor-and-patch group across 1 dire... | @app/dependabot | 2026-04-22 |

### Open PRs (6)

#### Needs Review (6)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#34](https://github.com/kagenti/agentic-control-plane/pull/34) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#33](https://github.com/kagenti/agentic-control-plane/pull/33) | build(deps): Bump aquasecurity/trivy-action from 0... | @app/dependabot | 4 |  |
| [#32](https://github.com/kagenti/agentic-control-plane/pull/32) | build(deps): Update fastmcp requirement from >=0.2... | @app/dependabot | 4 | SECURITY |
| [#31](https://github.com/kagenti/agentic-control-plane/pull/31) | build(deps): Update uvicorn requirement from >=0.2... | @app/dependabot | 4 |  |
| [#30](https://github.com/kagenti/agentic-control-plane/pull/30) | build(deps): Update kubernetes requirement from >=... | @app/dependabot | 4 |  |
| [#22](https://github.com/kagenti/agentic-control-plane/pull/22) | feat: bootstrap orchestrate skills for self-suffic... | @pdettori | 46 | stale (46d) |

### CI Health
- 28/30 (93%) passed
- **Failing**: "PR Verifier" — 2 failure(s)

## adk

### Merged PRs (3)
**Top contributors:** @app/dependabot (3)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#215](https://github.com/kagenti/adk/pull/215) | chore(deps): bump the github-actions group with 7 updates | @app/dependabot | 2026-04-22 |
| [#214](https://github.com/kagenti/adk/pull/214) | chore(deps): bump the uv group across 28 directories with... | @app/dependabot | 2026-04-22 |
| [#202](https://github.com/kagenti/adk/pull/202) | chore(deps): bump the uv-security group across 3 director... | @app/dependabot | 2026-04-22 |

### Open PRs (9)

#### Changes Requested (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#231](https://github.com/kagenti/adk/pull/231) | feat: Add MemoryStore protocol for cross-session a... | @rdwj | 3 |  |

#### Needs Review (7)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#233](https://github.com/kagenti/adk/pull/233) | docs: Fix 2 broken internal link(s) in adk | @clawgenti | 0 |  |
| [#232](https://github.com/kagenti/adk/pull/232) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#230](https://github.com/kagenti/adk/pull/230) | chore(deps): bump anthropics/claude-code-action fr... | @app/dependabot | 5 |  |
| [#228](https://github.com/kagenti/adk/pull/228) | chore(deps): bump the uv group across 28 directori... | @app/dependabot | 6 | SECURITY |
| [#227](https://github.com/kagenti/adk/pull/227) | chore(deps): bump the uv-security group across 3 d... | @app/dependabot | 6 | SECURITY |
| [#226](https://github.com/kagenti/adk/pull/226) | chore(deps): bump uuid from 13.0.0 to 14.0.0 in /a... | @app/dependabot | 6 |  |
| [#121](https://github.com/kagenti/adk/pull/121) | feat: replace custom ContextStore with A2A-native ... | @jezekra1 | 33 | stale (33d) |

#### Draft PRs (1)
- [#73](https://github.com/kagenti/adk/pull/73) — [DRAFT] feat(adk-ts): update A2A protocol schemas and types to v1 spec

### CI Health
- 9/30 (30%) passed
- **Failing**: "Docs Check" — 2 failure(s)

### New Issues (1)
| # | Title | Created |
|---|-------|---------|
| [#229](https://github.com/kagenti/adk/issues/229) | Depends does not await async dependency callables | 2026-04-23 |

## OpenShell

### Merged PRs (2)
**Top contributors:** @pdettori (2)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#2](https://github.com/kagenti/OpenShell/pull/2) | chore(ci): remove upstream branch-checks.yml with NVIDIA ... | @pdettori | 2026-04-28 |
| [#1](https://github.com/kagenti/OpenShell/pull/1) | feat: gateway fork — compute-driver-socket + credentials-... | @pdettori | 2026-04-28 |

### CI Health
- 13/30 (43%) passed
- **Failing**: "Kagenti CI" — 3 failure(s)

## openshell-driver-openshift

### Merged PRs (1)
**Top contributors:** @pdettori (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#1](https://github.com/kagenti/openshell-driver-openshift/pull/1) | feat: namespace flag, tenant labels, scoped RBAC, dtach i... | @pdettori | 2026-04-28 |

### CI Health
- 3/4 (75%) passed
- **Failing**: "Kagenti CI" — 1 failure(s)

## agent-examples

### Merged PRs (1)
**Top contributors:** @evaline-ju (1)

| # | Title | Author | Merged |
|---|-------|--------|--------|
| [#255](https://github.com/kagenti/agent-examples/pull/255) | feat: :sparkles: Add tracing to weather tool | @evaline-ju | 2026-04-22 |

### Open PRs (28)

#### Changes Requested (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#219](https://github.com/kagenti/agent-examples/pull/219) | Bug fix: Fix the Git Service when running on Ollama | @esnible | 25 | stale (25d) |

#### Needs Review (21)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#277](https://github.com/kagenti/agent-examples/pull/277) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#276](https://github.com/kagenti/agent-examples/pull/276) | chore(deps): Bump crewai from 1.14.1 to 1.14.2 in ... | @app/dependabot | 5 | SECURITY |
| [#275](https://github.com/kagenti/agent-examples/pull/275) | chore(deps): Bump crewai-tools from 1.14.1 to 1.14... | @app/dependabot | 5 | SECURITY |
| [#274](https://github.com/kagenti/agent-examples/pull/274) | chore(deps): Update openinference-instrumentation-... | @app/dependabot | 5 |  |
| [#273](https://github.com/kagenti/agent-examples/pull/273) | chore(deps): Update cryptography requirement from ... | @app/dependabot | 5 | SECURITY |
| [#272](https://github.com/kagenti/agent-examples/pull/272) | chore(deps): Update langchain-openai requirement f... | @app/dependabot | 5 |  |
| [#271](https://github.com/kagenti/agent-examples/pull/271) | chore(deps): Update opentelemetry-instrumentation-... | @app/dependabot | 5 | SECURITY |
| [#270](https://github.com/kagenti/agent-examples/pull/270) | chore(deps): Update a2a-sdk requirement from >=0.2... | @app/dependabot | 5 |  |
| ... | +13 more | | | |

#### Draft PRs (6)
6 drafts from @Ladas, @yoavkatz

### CI Health
- 23/30 (77%) passed
- **Failing**: "CI" — 3 failure(s)
- **Failing**: "PR Verifier" — 2 failure(s)

## openshell-credentials-keycloak

### Open PRs (1)

#### Needs Review (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#1](https://github.com/kagenti/openshell-credentials-keycloak/pull/1) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |

## ecosystem-guide

### Open PRs (2)

#### Needs Review (2)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#6](https://github.com/kagenti/ecosystem-guide/pull/6) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |
| [#5](https://github.com/kagenti/ecosystem-guide/pull/5) | build(deps): bump the minor-and-patch group across... | @app/dependabot | 7 |  |

### CI Health
- 28/30 (93%) passed
- **Failing**: "PR Verifier" — 2 failure(s)

## capture-the-flag

### Open PRs (1)

#### Needs Review (1)
| # | Title | Author | Days | Notes |
|---|-------|--------|------|-------|
| [#3](https://github.com/kagenti/capture-the-flag/pull/3) | CI: Add PR title verifier workflow | @rubambiza | 0 |  |

### CI Health
- 2/4 (50%) passed
- **Failing**: "PR Verifier" — 2 failure(s)

## Action Items

| # | Action | Repo | Owner | Priority |
|---|--------|------|-------|----------|
| 1 | Fix **Weekly Docker Build and Test** workflow (0/6 pass rate — totally broken) | adk-starter | maintainers | P0 |
| 2 | Review SECURITY-flagged [humr#257](https://github.com/kagenti/humr/pull/257) (skills marketplace) — open 7 days in Needs Review | humr | reviewers | P0 |
| 3 | Investigate persistent **Check links in site** failure (.github at 37% pass rate) | .github | @rubambiza | P0 |
| 4 | Investigate persistent **Docs Check** failure (adk at 30% pass rate) | adk | maintainers | P0 |
| 5 | Merge approved [humr#254](https://github.com/kagenti/humr/pull/254) (SECURITY-flagged, agents manage own schedules via MCP) | humr | @xjacka | P1 |
| 6 | Merge approved [kagenti#1379](https://github.com/kagenti/kagenti/pull/1379) (otel — RHOAI MLflow gateway URL) | kagenti | @ChristianZaccaria | P1 |
| 7 | Merge approved [kagenti#1378](https://github.com/kagenti/kagenti/pull/1378) (SECURITY — OpenShell Kind /run-e2e trigger) | kagenti | @Ladas | P1 |
| 8 | Merge approved [kagenti#1364](https://github.com/kagenti/kagenti/pull/1364) (OpenShell MVP plan + PoC alignment) | kagenti | @pdettori | P1 |
| 9 | Review fresh SECURITY PR [kagenti#1390](https://github.com/kagenti/kagenti/pull/1390) (deploy-shared.sh — cert-manager CA, sandbox) | kagenti | reviewers | P1 |
| 10 | Address **Kagenti CI** failures dragging OpenShell to 43% pass rate | OpenShell | @pdettori | P1 |
| 11 | Resolve [kagenti#1078](https://github.com/kagenti/kagenti/pull/1078) — 39 days in CHANGES_REQUESTED, no author response (zombie cleanup workflow) | kagenti | @RyanJenkins99 | P2 |
| 12 | Resolve stale CHANGES_REQUESTED [kagenti#1172](https://github.com/kagenti/kagenti/pull/1172) (DNS_PING for Keycloak JGroups) — 20 days | kagenti | @Ladas | P2 |
| 13 | Batch-review 38 open dependabot PRs across the org (kagenti-operator: 6, kagenti: 4, kagenti-extensions: 3 in Needs Review) | (org-wide) | maintainers | P2 |
| 14 | Triage **agent-examples** — 28 open PRs vs. 1 merged this week, repo is accumulating | agent-examples | maintainers | P3 |
| 15 | Close or merge ancient PRs [kagenti#965](https://github.com/kagenti/kagenti/pull/965) (43d, OpenShift bump) and [kagenti#938](https://github.com/kagenti/kagenti/pull/938) (46d, TOC docs) | kagenti | maintainers | P3 |


Repo	Merged PRs	Open PRs	Open Issues	New Issues	CI Pass Rate	Status
humr	67	11	50	16	22/30 (73%)	active
kagenti	33	33	125	36	22/30 (73%)	active
kagenti-extensions	8	7	25	3	22/30 (73%)	active
kagenti-operator	6	10	10	0	24/30 (80%)	active
plugins-adapter	5	2	14	0	24/30 (80%)	active
onecli	5	2	1	0	21/30 (70%)	active
workload-harness	3	1	1	0	28/30 (93%)	active
.github	3	1	4	0	11/30 (37%)	active
agentic-control-plane	3	6	1	0	28/30 (93%)	active
adk	3	9	15	1	9/30 (30%)	active
OpenShell	2	0	0	0	13/30 (43%)	active
openshell-driver-openshift	1	0	0	0	3/4 (75%)	active
agent-examples	1	28	5	0	23/30 (77%)	active
openshell-credentials-keycloak	0	1	0	0	--	quiet
ecosystem-guide	0	2	0	0	28/30 (93%)	quiet
adk-starter	0	0	0	0	0/6 (0%)	quiet
capture-the-flag	0	1	0	0	2/4 (50%)	quiet
TOTAL	140	114	251	56

#	Title	Author	Merged
#364	docs(arch): note Envoy track in security-and-credentials	@pilartomas	2026-04-29
#362	fix(channels): resolve workspace paths and use canonical ...	@jezekra1	2026-04-28
#360	refactor(ui/chat): apply UI engineering rules	@kapetr	2026-04-28
#359	feat(channels): attach files by workspace path	@jezekra1	2026-04-28
#358	fix(api-server): write SDS DiscoveryResponse YAML for Env...	@pilartomas	2026-04-28
#357	fix(deploy): bump Envoy sidecar past stale-image gate, ex...	@pilartomas	2026-04-28
#355	feat(channels): optional file attachment on send_channel_...	@jezekra1	2026-04-28
#353	refactor(agent-runtime): adopt tseng — layered skills, pr...	@tomkis	2026-04-28
#346	feat(controller,ui): experimental Envoy credential inject...	@pilartomas	2026-04-28
#344	docs(skill): scope doc-drift to architecture docs, exclud...	@tomkis	2026-04-27
#343	docs(skill): scope doc-drift to architecture docs and cod...	@tomkis	2026-04-27
#342	docs(pi-agent): document configuring providers via OneCLI...	@Tomas2D	2026-04-28
#341	fix(ui): reload session log on unexpected WS reconnect	@jezekra1	2026-04-27
#334	docs: fix drift flagged in architecture audit	@tomkis	2026-04-27
#333	docs(adrs): draft unified HITL UX — live-consumer model	@jezekra1	2026-04-29
...	+52 more

#	Title	Author	Days	Notes
#361	CI: Add PR title verifier workflow	@rubambiza	0
#348	docs(adrs): draft ADR — agent template store	@tomkis	1
#347	docs(adrs): draft ADR — app-owned scheduling	@tomkis	1
#345	fix(cluster): bound dev cluster disk usage (#244)	@Tomas2D	1
#332	Feature: pod-files push for declarative agent-pod ...	@jjeliga	1
#257	feat(skills): marketplace — install, publish, MCP ...	@PetrBulanek	7	SECURITY

#	Title	Created
#354	Tune ADR skill to produce shorter, sharper records	2026-04-28
#351	Preview ports running inside agent pods (e.g. open :5173 ...	2026-04-28
#350	Share instances directly via the UI, not just through Slack	2026-04-28
#349	Make session loading and live streaming reliable across r...	2026-04-28
#340	feat(controller,api-server): ADR-027 fork pods on Envoy s...	2026-04-27
#339	chore(adr-033): remove OneCLI and the experimentalCredent...	2026-04-27
#338	feat(api-server,controller): OAuth credentials in K8s Sec...	2026-04-27
#336	Support invoking humr from Slack DMs and group DMs	2026-04-27
#335	feature: Per-instance GitHub repo: clone on create, refre...	2026-04-27
#309	Cloning a GitHub repo inside an agent requires manual git...	2026-04-24
#307	🐛 `gh auth status` fails for gh enterprise	2026-04-24
#306	Platform-level history pruning for long-running Telegram ...	2026-04-24
#290	🐛 Opening slack conversation stream will interrupt it	2026-04-23
#288	🐛 mobile-view screen height is off	2026-04-23
#283	PRD: Broken link detector agent	2026-04-22
#277	Policy-gated credential access with HiTL approval as the ...	2026-04-22

#	Title	Author	Merged
#1382	feat: switch sandbox to SandboxTemplate + SandboxClaim wo...	@cwiklik	2026-04-28
#1381	feat: add SandboxTemplate + SandboxClaim infrastructure	@cwiklik	2026-04-28
#1380	fix: replace misleading 'Agent CRD not found' error message	@cwiklik	2026-04-28
#1367	Feat: Provide API access to AuthBridge config and statistics	@esnible	2026-04-29
#1365	fix(ci): add pull_request trigger to OpenShell Kind workflow	@Ladas	2026-04-27
#1350	fix: Add authbridge template ConfigMaps for operator prop...	@huang195	2026-04-28
#1347	fix(ci): pass LLM and GitHub secrets to OpenShell E2E wor...	@Ladas	2026-04-27
#1345	chore(skills): pin image tags for all release types	@mrsabath	2026-04-27
#1333	chore(deps): Bump aquasecurity/trivy-action from 0.35.0 t...	@app/dependabot	2026-04-27
#1332	chore(deps): Bump the minor-and-patch group in /kagenti/u...	@app/dependabot	2026-04-27
#1331	chore(deps): Bump ubi9/ubi-minimal from `fe688da` to `7d4...	@app/dependabot	2026-04-27
#1330	feat: add agent-sandbox to UI types and feature flags	@cwiklik	2026-04-27
#1328	fix: address upgrade issues from v0.6.0-alpha.4 to alpha.5	@pdettori	2026-04-25
#1327	feat: add Sandbox to build reconciliation workload check	@cwiklik	2026-04-25
#1326	feat: add agent-sandbox Helm flag and Kind installer support	@cwiklik	2026-04-24
...	+18 more

#	Title	Author	Notes
#1379	fix(otel): use RHOAI MLflow gateway URL (status.ur...	@ChristianZaccaria
#1378	feat(ci): trigger OpenShell Kind with /run-e2e-ope...	@Ladas	SECURITY
#1364	docs: OpenShell MVP implementation plan and PoC al...	@pdettori

#	Title	Author	Days	Notes
#1344	feat: Add initial skill management UI and backend ...	@eranra	2
#1236	feat: add remaining sandbox, integration, and anal...	@Ladas	15	stale (15d)
#1172	fix: use DNS_PING for Keycloak JGroups cluster dis...	@Ladas	20	stale (20d)
#1078	feat: Add automated zombie cleanup workflow for CI...	@RyanJenkins99	39	stale (39d)

#	Title	Author	Days	Notes
#1390	feat: deploy-shared.sh — cert-manager CA, sandbox ...	@pdettori	0	SECURITY
#1383	CI: Add PR title verifier workflow	@rubambiza	0
#1319	docs: OpenShell integration architecture — sandbox...	@Ladas	5	SECURITY
#1271	docs: Link health dashboard (auto-updated)	@clawgenti	11
#965	chore: Bump OpenShift version from 4.20.11 to 4.20.13	@RyanJenkins99	43	stale (43d)
#938	Update table of contents for components documentation	@Romrom54	46	stale (46d)

#	Title	Created
#1386	:chore: Clean up log injection errors reported by CodeQL	2026-04-28
#1385	Propose upstream PR for compute-driver-socket and credent...	2026-04-28
#1377	feat: agent versioning, upgrade path, and rollback model	2026-04-28
#1376	feat: dynamic Keycloak role management per team/project	2026-04-28
#1375	feat: namespace-scoped RBAC and team isolation model	2026-04-28
#1374	feat: automate ClusterBuildStrategy and in-cluster regist...	2026-04-28
#1373	feat(admin-ui): platform health & configuration dashboard	2026-04-28
#1372	feat(admin-ui): team/namespace lifecycle management	2026-04-28
#1371	feat: gate route/service exposure on backend readiness	2026-04-28
#1370	feat: preflight validation — Istio, networking, registry,...	2026-04-28
#1369	feat: make installer warnings/errors actionable with reme...	2026-04-28
#1368	epic: Platform Operator Experience — Install, Admin & Lif...	2026-04-28
#1366	feature: AuthBridge API in support of user interface	2026-04-27
#1363	epic: OpenShell MVP — Gateway-per-Tenant on Kind + OpenShift	2026-04-27
#1362	feat: E2E tests — multi-tenant OpenShell validation	2026-04-27
#1361	chore: update openshell-full-test.sh as thin orchestrator	2026-04-27
#1360	feat: scripts/openshell/configure-cli.sh — extract certs ...	2026-04-27
#1359	feat: scripts/openshell/deploy-tenant.sh — platform-aware...	2026-04-27
#1358	feat: charts/openshell/ Helm chart — per-tenant gateway s...	2026-04-27
#1357	feat: scripts/openshell/deploy-shared.sh — cert-manager C...	2026-04-27
#1356	chore: scripts/openshell/build-images.sh — build forked i...	2026-04-27
#1354	feat: compute driver — namespace flag, tenant labels, sco...	2026-04-27
#1349	release: add deterministic pin-validation script and manu...	2026-04-27
#1348	Weekly Report 2026-04-27	2026-04-27
#1342	Proposal: Skills Management for Kagenti	2026-04-26
#1338	bug: failurePolicy: Fail on MutatingWebhookConfiguration ...	2026-04-26
#1337	bug: keycloak-admin-secret in agent namespaces uses stale...	2026-04-26
#1335	bug: Helm upgrade does not install new CRDs from kagenti-...	2026-04-26
#1334	Proposal: Governed agent memory services via MemoryHub	2026-04-26
#1329	how to create a client in keycloak deployed on kind	2026-04-25
#1324	ci: Kind E2E — AuthBridge weather advanced (tracks PR #1313)	2026-04-24
#1316	epic: State Management experimentation	2026-04-23
#1310	feature: AuthBridge tab for Kagenti Agents	2026-04-22
#1309	feature: Simplify Import Agent AuthBridge UI	2026-04-22
#1305	feature: Show Kagenti release info	2026-04-22
#1304	feat(ocp): add --with-kiali, --with-builds, --with-kuadra...	2026-04-22

#	Title	Author	Merged
#349	Feat: Collect and serve Kagenti Authbridge statistics and...	@esnible	2026-04-27
#347	authbridge(weather): fix Kind E2E (Deployment progress de...	@mrsabath	2026-04-25
#346	fix(demos): Kind CI rollout timeouts for weather advanced...	@mrsabath	2026-04-24
#344	Feat: Support gRPC Reflection API	@esnible	2026-04-23
#343	feat(demos): Advanced Weather + AuthBridge demo (token ex...	@mrsabath	2026-04-24
#337	docs: Update weather demo — proxy-sidecar mode, debug log...	@huang195	2026-04-22
#329	build(deps): Bump golang from 1.24.5-alpine to 1.26.2-alp...	@app/dependabot	2026-04-22
#328	build(deps): Bump github/codeql-action from 4.35.1 to 4.35.2	@app/dependabot	2026-04-22

#	Title	Created
#348	🐛 "make lint" fails	2026-04-25
#341	feature: More metadata in created Keycloak client	2026-04-22
#340	Doc: Provide a developer doc for using CLI tools such as ...	2026-04-22

#	Title	Author	Merged
#314	feat(mlflow): add HTTP retry with exponential backoff	@Ygnas	2026-04-28
#308	fix: Auto-create authbridge ConfigMaps in agent namespace...	@huang195	2026-04-28
#306	test: Add combined AgentRuntime + AgentCard + Auth Bridge...	@r3v5	2026-04-24
#305	cve: Upgrade gRPC and otel packages to fix critical CVEs	@ChristianZaccaria	2026-04-23
#302	chore(deps): Bump github.com/onsi/ginkgo/v2 from 2.28.0 t...	@app/dependabot	2026-04-22
#301	chore(deps): Bump k8s.io/apiextensions-apiserver from 0.3...	@app/dependabot	2026-04-22

#	Title	Author	Days
#315	CI: Add PR title verifier workflow	@rubambiza	0
#313	chore(deps): Bump k8s.io/apiextensions-apiserver f...	@app/dependabot	1
#312	chore(deps): Bump k8s.io/client-go from 0.35.4 to ...	@app/dependabot	1
#311	chore(deps): Bump k8s.io/apimachinery from 0.35.4 ...	@app/dependabot	1
#310	chore(deps): Bump github.com/onsi/ginkgo/v2 from 2...	@app/dependabot	1
#309	chore(deps): Bump k8s.io/api from 0.35.4 to 0.36.0...	@app/dependabot	1
#304	chore(deps): Bump aquasecurity/trivy-action from 0...	@app/dependabot	6

#	Title	Author	Merged
#120	chore(deps): bump cpex from 0.1.0.dev11 to 0.1.0.dev12 in...	@app/dependabot	2026-04-28
#119	chore(deps): bump cpex from 0.1.0.dev11 to 0.1.0.dev12	@app/dependabot	2026-04-28
#118	chore(deps): bump aquasecurity/trivy-action from 0.35.0 t...	@app/dependabot	2026-04-27
#117	chore(deps): bump cpex from 0.1.0.dev10 to 0.1.0.dev11 in...	@app/dependabot	2026-04-23
#116	chore(deps): bump cpex from 0.1.0.dev10 to 0.1.0.dev11	@app/dependabot	2026-04-23

#	Title	Author	Merged
#22	remove GH_TOKEN env mapping for ghe	@jjeliga	2026-04-28
#21	chore: Remove project board automation workflow	@rubambiza	2026-04-27
#20	Fix/5 dynamic gh hostname matching	@jjeliga	2026-04-24
#19	chore(turbo): drop GITHUB_ENTERPRISE_* from globalPassThr...	@jjeliga	2026-04-23
#18	feat(apps): declare envMappings for every app; make field...	@Tomas2D	2026-04-22

#	Title	Author	Days	Notes
#24	CI: Add PR title verifier workflow	@rubambiza	0
#23	feat: add Microsoft Graph provider	@JanPokorny	0

#	Title	Author	Merged
#66	CI: Pin action-pr-title to SHA (v1.0.2)	@rubambiza	2026-04-28
#65	docs: Remove onecli entry from project list	@jenna-winkler	2026-04-22
#59	ci: Add org-wide project automation workflow	@rubambiza	2026-04-28

#	Title	Author	Merged
#29	build(deps): Bump python base image to 3.14-slim	@pdettori	2026-04-23
#27	ci: Add org-wide project automation workflow	@rubambiza	2026-04-22
#26	build(deps): Bump the minor-and-patch group across 1 dire...	@app/dependabot	2026-04-22

#	Title	Author	Days	Notes
#34	CI: Add PR title verifier workflow	@rubambiza	0
#33	build(deps): Bump aquasecurity/trivy-action from 0...	@app/dependabot	4
#32	build(deps): Update fastmcp requirement from >=0.2...	@app/dependabot	4	SECURITY
#31	build(deps): Update uvicorn requirement from >=0.2...	@app/dependabot	4
#30	build(deps): Update kubernetes requirement from >=...	@app/dependabot	4
#22	feat: bootstrap orchestrate skills for self-suffic...	@pdettori	46	stale (46d)

#	Title	Author	Merged
#215	chore(deps): bump the github-actions group with 7 updates	@app/dependabot	2026-04-22
#214	chore(deps): bump the uv group across 28 directories with...	@app/dependabot	2026-04-22
#202	chore(deps): bump the uv-security group across 3 director...	@app/dependabot	2026-04-22

Org Weekly Report 2026-04-22 -- 2026-04-29 (kagenti) #2

Description

Org Weekly Report: 2026-04-22 -- 2026-04-29

Org-Wide Summary

Cross-Repo Highlights

humr

Merged PRs (67)

Open PRs (11)

Ready to Merge (1)

Changes Requested (1)

Needs Review (6)

Draft PRs (3)

CI Health

New Issues (16)

kagenti

Merged PRs (33)

Open PRs (33)

Ready to Merge (3)

Changes Requested (4)

Needs Review (6)

Draft PRs (20)

CI Health

New Issues (36)

kagenti-extensions

Merged PRs (8)

Open PRs (7)

Needs Review (4)

Draft PRs (3)

CI Health

New Issues (3)

kagenti-operator

Merged PRs (6)

Open PRs (10)

Needs Review (7)

Draft PRs (3)

CI Health

plugins-adapter

Merged PRs (5)

Open PRs (2)

Needs Review (1)

Draft PRs (1)

CI Health

onecli

Merged PRs (5)

Open PRs (2)

Needs Review (2)

CI Health

workload-harness

Merged PRs (3)

Open PRs (1)

Needs Review (1)

CI Health

.github

Merged PRs (3)

Open PRs (1)

Ready to Merge (1)

CI Health

agentic-control-plane

Merged PRs (3)

Open PRs (6)

Needs Review (6)

CI Health

adk

Merged PRs (3)

Open PRs (9)

Changes Requested (1)

Needs Review (7)

Draft PRs (1)

CI Health

New Issues (1)

OpenShell

Merged PRs (2)

CI Health

openshell-driver-openshift

Merged PRs (1)

CI Health

agent-examples

Merged PRs (1)

Open PRs (28)

Changes Requested (1)

#	Title	Author	Days	Notes
#233	docs: Fix 2 broken internal link(s) in adk	@clawgenti	0
#232	CI: Add PR title verifier workflow	@rubambiza	0
#230	chore(deps): bump anthropics/claude-code-action fr...	@app/dependabot	5
#228	chore(deps): bump the uv group across 28 directori...	@app/dependabot	6	SECURITY
#227	chore(deps): bump the uv-security group across 3 d...	@app/dependabot	6	SECURITY
#226	chore(deps): bump uuid from 13.0.0 to 14.0.0 in /a...	@app/dependabot	6
#121	feat: replace custom ContextStore with A2A-native ...	@jezekra1	33	stale (33d)

#	Title	Author	Merged
#2	chore(ci): remove upstream branch-checks.yml with NVIDIA ...	@pdettori	2026-04-28
#1	feat: gateway fork — compute-driver-socket + credentials-...	@pdettori	2026-04-28

#	Action	Repo	Owner	Priority
1	Fix Weekly Docker Build and Test workflow (0/6 pass rate — totally broken)	adk-starter	maintainers	P0
2	Review SECURITY-flagged humr#257 (skills marketplace) — open 7 days in Needs Review	humr	reviewers	P0
3	Investigate persistent Check links in site failure (.github at 37% pass rate)	.github	@rubambiza	P0
4	Investigate persistent Docs Check failure (adk at 30% pass rate)	adk	maintainers	P0
5	Merge approved humr#254 (SECURITY-flagged, agents manage own schedules via MCP)	humr	@xjacka	P1
6	Merge approved kagenti#1379 (otel — RHOAI MLflow gateway URL)	kagenti	@ChristianZaccaria	P1
7	Merge approved kagenti#1378 (SECURITY — OpenShell Kind /run-e2e trigger)	kagenti	@Ladas	P1
8	Merge approved kagenti#1364 (OpenShell MVP plan + PoC alignment)	kagenti	@pdettori	P1
9	Review fresh SECURITY PR kagenti#1390 (deploy-shared.sh — cert-manager CA, sandbox)	kagenti	reviewers	P1
10	Address Kagenti CI failures dragging OpenShell to 43% pass rate	OpenShell	@pdettori	P1
11	Resolve kagenti#1078 — 39 days in CHANGES_REQUESTED, no author response (zombie cleanup workflow)	kagenti	@RyanJenkins99	P2
12	Resolve stale CHANGES_REQUESTED kagenti#1172 (DNS_PING for Keycloak JGroups) — 20 days	kagenti	@Ladas	P2
13	Batch-review 38 open dependabot PRs across the org (kagenti-operator: 6, kagenti: 4, kagenti-extensions: 3 in Needs Review)	(org-wide)	maintainers	P2
14	Triage agent-examples — 28 open PRs vs. 1 merged this week, repo is accumulating	agent-examples	maintainers	P3
15	Close or merge ancient PRs kagenti#965 (43d, OpenShift bump) and kagenti#938 (46d, TOC docs)	kagenti	maintainers	P3