Org Weekly Report: 2026-03-23 -- 2026-03-30

Generated for kagenti

Org-Wide Summary

Repo	Merged PRs	Open PRs	Open Issues	New Issues	CI Pass Rate	Status
adk	38	8	16	10	22/30 (73%)	active
kagenti	23	52	78	4	20/30 (67%)	active
agent-examples	8	13	6	3	20/30 (67%)	active
plugins-adapter	4	1	16	1	27/30 (90%)	active
kagenti-operator	4	19	13	4	18/30 (60%)	active
kagenti-extensions	3	10	17	0	26/30 (87%)	active
.github	2	0	2	0	15/30 (50%)	active
agentic-control-plane	0	6	1	0	30/30 (100%)	active
workload-harness	0	1	1	0	16/16 (100%)	quiet
TOTAL	82	110	150	22

Cross-Repo Highlights

@jezekra1 dominated adk with 7 merged PRs spanning governance (template merge), bulk dependency upgrades, streaming SDK extensions, CLI admin console, and documentation — the primary human driver of the most active repo (38 merges) this week.
@esnible contributed across kagenti (1 merged PR — MLFlow port fix) and agent-examples (7 merged PRs) — primary driver of agent-examples activity, covering Starlette middleware updates, library upgrades, lockfile fixes, deployment descriptors, and a2a-sdk refactoring.
@cooktheryan drove OpenShift SCC UBI image fixes across both kagenti (#1104) and kagenti-extensions (#261, #263), ensuring consistent container security context alignment.
@JanPokorny contributed 6 merged PRs to adk — CI pipeline fixes, integration test stabilization, dependency alignment, and self-registration startup fix.
@varshaprasad96 advanced the AgentRuntime CRD in kagenti-operator with a validating webhook for duplicate targetRef rejection (#242) and deployment-name-based resolution with trace env injection (#245).
Org CI pass rate: 76% overall (194/256 runs). .github drags the average down at 50% due to persistent "Check links in site" (6 failures) and "Check links in Hugo site" (5 failures). kagenti-operator at 60% with CI failures, and kagenti and agent-examples both at 67%. agentic-control-plane and workload-harness are at 100%.
Security concern: kagenti/agent-examples#188 (stop logging API keys and auth headers) has been open 11 days with no review — a straightforward security hardening fix that should not stall.
Security concern: kagenti/kagenti#966 (SPIFFE/Keycloak consolidation) has been stale for 15 days with CHANGES_REQUESTED, and kagenti/kagenti-extensions#119 (OTEL-enhanced ext_proc with security notes) is 41 days stale — both part of the broader auth hardening effort.
Shared patterns: Auth/SPIRE/Keycloak work spanned kagenti (#966, #1077, #1100), kagenti-extensions (#238), and kagenti-operator (#247, #248) this week. A2A protocol migration continued in adk (#121, #73 draft) and agent-examples (#194). OpenShift SCC fixes landed in both kagenti and kagenti-extensions.
Dependabot PRs piling up: 34 open across the org — kagenti (~14), kagenti-operator (9), kagenti-extensions (7), agentic-control-plane (4) — consider batch reviews, especially for the Go k8s.io bumps in kagenti-operator that can be landed together.

adk

Merged PRs (38)

Top contributors: @app/dependabot (18), @jezekra1 (7), @JanPokorny (6), @tomkis (2), @PetrBulanek (2)

#	Title	Author	Merged
#152	fix(agents): self-registration startup	@JanPokorny	2026-03-30
#151	chore: bump kagenti and kagenti-deps charts to 0.6.0-alpha.2	@jezekra1	2026-03-27
#150	fix: use specific env for autologin in UI	@tomkis	2026-03-27
#146	chore(deps): bulk upgrade all dependencies	@jezekra1	2026-03-27
#142	chore: group dependabot updates to reduce PR noise	@jezekra1	2026-03-27
#123	fix(ci): e2e examples	@JanPokorny	2026-03-27
#122	feat(adk-ui): auto-login for local dev (localtest.me)	@tomkis	2026-03-27
#119	chore: remove deprecated settings UI extension	@jjeliga	2026-03-26
#114	chore: Remove repo-specific issue templates	@rubambiza	2026-03-26
#113	docs: update CONTRIBUTING.md with current localtest.me URLs	@jezekra1	2026-03-25
#111	chore(deps-dev): bump pyrefly from 0.56.0 to 0.58.0 in /a...	@app/dependabot	2026-03-26
#110	chore(deps-dev): bump pyrefly from 0.56.0 to 0.58.0 in /a...	@app/dependabot	2026-03-26
#109	chore(deps): bump openai from 2.28.0 to 2.29.0 in /apps/a...	@app/dependabot	2026-03-26
#107	chore(deps-dev): bump ruff from 0.15.6 to 0.15.7 in /apps...	@app/dependabot	2026-03-26
#106	chore(deps): bump sse-starlette from 3.3.2 to 3.3.3 in /a...	@app/dependabot	2026-03-26
...	+23 more

Open PRs (8)

Needs Review (7)

#	Title	Author	Days	Notes
#160	docs: fix outdated development documentation	@jezekra1	0
#157	agent facing dev setup guidance	@jjeliga	0
#155	chore(deps): bump pygments from 2.19.2 to 2.20.0 i...	@app/dependabot	1	SECURITY
#154	chore(deps): bump pygments from 2.19.2 to 2.20.0 i...	@app/dependabot	1	SECURITY
#153	chore(deps): bump pygments from 2.19.2 to 2.20.0 i...	@app/dependabot	1	SECURITY
#149	chore: remove deprecated UI settings extension fro...	@PetrBulanek	4
#121	feat: replace custom ContextStore with A2A-native ...	@jezekra1	5

Draft PRs (1)

#73 — [DRAFT] feat(adk-ts): update A2A protocol schemas and types to v1 spec

CI Health

22/30 (73%) passed
Failing: "CI" — 1 failure(s)

New Issues (10)

#	Title	Created
#148	Remove deprecated UI settings extension (adk-ts, adk-ui)	2026-03-27
#147	bug(adk-ui): auto-login gets stuck on "Redirecting to log...	2026-03-27
#117	Review and merge open dependency update PRs	2026-03-26
#116	Replace custom ContextStore with A2A-native task history	2026-03-26
#115	Copy-to-clipboard button on 'no model selected' page does...	2026-03-26
#112	Experiment: docs-only vs skill-guided agent — compare out...	2026-03-25
#91	Simplify agent message and streaming management	2026-03-25
#85	Investigate augmenting coding agents for ADK development	2026-03-24
#81	EPIC: Consider AG-UI as client-to-agent protocol standard	2026-03-24
#80	EPIC: Support generative UI capabilities	2026-03-24

kagenti

Merged PRs (23)

Top contributors: @app/dependabot (7), @cwiklik (3), @Ladas (3), @pdettori (2), @ChristianZaccaria (2)

#	Title	Author	Merged
#1113	fix: bump all sidecar images to v0.4.0-alpha.10	@cwiklik	2026-03-30
#1112	chore: remove unused python12 Dockerfile and build workflow	@pdettori	2026-03-30
#1111	chore: remove unused postgres Dockerfile and dependabot c...	@pdettori	2026-03-30
#1109	fix(ci): bump Go to 1.24 for hcp CLI build in HyperShift E2E	@Ladas	2026-03-30
#1104	FIX: openshift scc ubi images	@cooktheryan	2026-03-30
#1102	🐛 Allow MLFlow to accept traffic on any port under Kagenti	@esnible	2026-03-28
#1100	fix: Set Keycloak token lifespans and add 401 retry with ...	@cwiklik	2026-03-25
#1098	fix: gate ztunnel ServiceMonitor behind kiali.enabled con...	@ChristianZaccaria	2026-03-25
#1097	fix: Prefix build args with --build-arg= for Shipwright b...	@cwiklik	2026-03-24
#1096	Feature/credential rotation automation	@RyanJenkins99	2026-03-25
#1093	fix(rbac): add list and watch permissions for otel-collec...	@ChristianZaccaria	2026-03-25
#1089	chore(deps): Bump github/codeql-action from 4.32.6 to 4.3...	@app/dependabot	2026-03-30
#1087	chore(deps): Bump python from `6a27522` to `fb83750` in /...	@app/dependabot	2026-03-30
#1086	chore(deps): Bump python from `6a27522` to `fb83750` in /...	@app/dependabot	2026-03-30
#1085	chore(deps): Bump python from `6a27522` to `fb83750` in /...	@app/dependabot	2026-03-30
...	+8 more

Open PRs (52)

Ready to Merge (1)

#	Title	Author	Notes
#936	fix: use JSON output for preflight container runti...	@pdettori	stale (18d)

Changes Requested (8)

#	Title	Author	Days	Notes
#1078	feat: Add automated zombie cleanup workflow for CI...	@RyanJenkins99	11
#1077	fix(auth): extend Keycloak session lifetimes for l...	@pdettori	11	SECURITY
#1038	✨ AgentCard signing and verification UI integration	@kevincogan	13
#998	🌱 Consolidate dependency updates (2026-03-17)	@Ladas	14
#966	Spiffe keycloak consolidation	@Alan-Cha	15	SECURITY, stale (15d)

Needs Review (21)

#	Title	Author	Days	Notes
#1119	chore(deps): Bump azure/setup-helm from 4.3.1 to 5...	@app/dependabot	0
#1118	chore(deps): Bump azure/setup-kubectl from 4.0.1 t...	@app/dependabot	0
#1117	chore(deps): Bump DavidAnson/markdownlint-cli2-act...	@app/dependabot	0
#1116	chore(deps): Bump reviewdog/action-actionlint from...	@app/dependabot	0
#1107	chore(deps): Bump the minor-and-patch group across...	@app/dependabot	2	SECURITY
#1106	chore(deps): Bump node from `5209bca` to `cf38e1f`...	@app/dependabot	2
#1105	chore(deps): Bump nginx from `f46cb72` to `e7257f1...	@app/dependabot	2
#1092	chore(deps-dev): Bump vite from 7.3.1 to 8.0.1 in ...	@app/dependabot	9
...	+13 more

Draft PRs (22)

22 drafts from @akram, @mrsabath, @Alan-Cha, @Ladas

CI Health

20/30 (67%) passed
Failing: "Cleanup Stale HyperShift Clusters" — 1 failure(s)

New Issues (4)

#	Title	Created
#1110	Org Weekly Report 2026-03-23 -- 2026-03-30	2026-03-30
#1108	feature: MLFlow link	2026-03-30
#1103	🐛 MLFlow does not show tool calls for weather example	2026-03-26
#1094	Org Weekly Report 2026-03-16 -- 2026-03-23	2026-03-23

agent-examples

Merged PRs (8)

Top contributors: @esnible (7), @huang195 (1)

#	Title	Author	Merged
#203	weather_service: forward inbound Authorization header to ...	@huang195	2026-03-26
#202	🐛 Use current Starlette middleware conventions	@esnible	2026-03-26
#201	Chore: Upgrade library versions	@esnible	2026-03-25
#200	Feature: Set log level to DEBUG early	@esnible	2026-03-25
#198	bug: Update Slack tool lockfile	@esnible	2026-03-23
#197	bug: Update reservation_tool lockfile	@esnible	2026-03-23
#195	Feature: Deployment descriptor and README for weather age...	@esnible	2026-03-24
#194	bug: Modify contact extractor example for a2a-sdk refactor	@esnible	2026-03-24

Open PRs (13)

Changes Requested (1)

#	Title	Author	Days	Notes
#185	fix: resolve Ollama function calling failures with...	@mrsabath	14

Needs Review (5)

#	Title	Author	Days	Notes
#209	Feat: Introduce targets to verify A2A and MCP serv...	@esnible	1
#206	chore(deps): Bump crewai from 1.10.1 to 1.12.2 in ...	@app/dependabot	4
#205	chore(deps): Bump crewai-tools from 1.10.1 to 1.12...	@app/dependabot	4
#204	chore(deps): Bump github/codeql-action from 4.32.6...	@app/dependabot	4
#188	fix(weather): stop logging API keys and auth headers	@pdettori	11	SECURITY

Draft PRs (7)

7 drafts from @Ladas, @evaline-ju, @yoavkatz

CI Health

20/30 (67%) passed
Failing: "CI" — 8 failure(s)

New Issues (3)

#	Title	Created
#208	🐛 git_issue_agent hard codes host and port	2026-03-30
#207	feature: CI for MCP and A2A examples	2026-03-30
#199	Unexpected OpenTelemetry logging from weather-service	2026-03-24

plugins-adapter

Merged PRs (4)

Top contributors: @app/dependabot (4)

#	Title	Author	Merged
#83	chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0	@app/dependabot	2026-03-30
#82	chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1	@app/dependabot	2026-03-30
#79	chore(deps): bump github/codeql-action from 4.33.0 to 4.34.1	@app/dependabot	2026-03-23
#76	⬆️ Bump astral-sh/setup-uv from 6.3.1 to 7.6.0	@app/dependabot	2026-03-23

Open PRs (1)

Draft PRs (1)

#81 — feat: prompt pre fetch plugin call

CI Health

27/30 (90%) passed
Failing: "CI" — 2 failure(s)
Failing: "docker in /. - Update #1299889025" — 1 failure(s)

New Issues (1)

#	Title	Created
#80	🐛 cleanup there are a few old unused plugin that stil...	2026-03-27

kagenti-operator

Merged PRs (4)

Top contributors: @varshaprasad96 (2), @r3v5 (1), @kevincogan (1)

#	Title	Author	Merged
#245	fix: resolve AgentRuntime by Deployment name and inject t...	@varshaprasad96	2026-03-30
#242	feat(AgentRuntime): add validating webhook for duplicate ...	@varshaprasad96	2026-03-25
#237	feat(AgentCard): add provider, documentation/icon URLs, a...	@r3v5	2026-03-23
#236	✨ Publish agentcard-signer image to GHCR via GoReleaser	@kevincogan	2026-03-23

Open PRs (19)

Ready to Merge (6)

#	Title	Author
#256	test: add trust bundle rotation integration test	@Schimuneck
#254	fix: add AgentRuntime CRD to config/crd/kustomizat...	@Schimuneck
#249	fix(rbac): align Helm ClusterRole with controller-...	@ChristianZaccaria
#248	🐛 Align configMapKey default to bundle.spiffe acro...	@ChristianZaccaria
#244	fix: update proactive restart demo defaults to mat...	@cwiklik

Changes Requested (1)

#	Title	Author	Days	Notes
#247	feat(operator): operator-managed Keycloak client r...	@akram	4	SECURITY

Needs Review (12)

#	Title	Author	Days
#255	chore(deps): Bump github/codeql-action from 4.32.6...	@app/dependabot	1
#253	fix(rbac): Add missing agentruntimes permissions t...	@Alan-Cha	3
#243	feat: create E2E tests for AgentCard	@r3v5	6
#241	chore(deps): Bump azure/setup-helm from 4 to 5	@app/dependabot	7
#233	chore(deps): Bump sigs.k8s.io/controller-runtime f...	@app/dependabot	14
#232	chore(deps): Bump github.com/prometheus/client_gol...	@app/dependabot	14
#231	chore(deps): Bump k8s.io/apimachinery from 0.32.0 ...	@app/dependabot	14
#230	chore(deps): Bump k8s.io/api from 0.32.0 to 0.35.2...	@app/dependabot	14
...	+4 more

CI Health

18/30 (60%) passed
Failing: "CI" — 2 failure(s)

New Issues (4)

#	Title	Created
#252	doc: OpenShift deployment guide for SPIRE signing demos	2026-03-27
#251	bug: ConfigMap cache scope prevents operator from reading...	2026-03-27
#250	bug: AgentRuntime CRD missing from config/crd/kustomizati...	2026-03-27
#246	🐛 AgentCard resign-trigger causes continuous pod rest...	2026-03-26

kagenti-extensions

Merged PRs (3)

Top contributors: @cooktheryan (2), @Alan-Cha (1)

#	Title	Author	Merged
#263	update of sha	@cooktheryan	2026-03-30
#261	FIX: openshift scc ubi images	@cooktheryan	2026-03-30
#238	Enable SPIRE in Keycloak	@Alan-Cha	2026-03-23

Open PRs (10)

Ready to Merge (1)

#	Title	Author	Notes
#252	fix: Use local Ollama as default in GitHub Issue A...	@rh-dnagornuks

Changes Requested (1)

#	Title	Author	Days	Notes
#119	feat: Add OTEL-enhanced ext_proc for zero-agent Ge...	@Ladas	41	SECURITY, stale (41d)

Needs Review (7)

#	Title	Author	Days
#265	build(deps): Bump github/codeql-action from 4.33.0...	@app/dependabot	0
#264	build(deps): Bump actions/setup-go from 6.3.0 to 6...	@app/dependabot	0
#260	build(deps): Bump google.golang.org/grpc from 1.79...	@app/dependabot	7
#259	build(deps): Bump azure/setup-helm from 4.3.1 to 5...	@app/dependabot	7
#257	build(deps): Bump k8s.io/api from 0.35.2 to 0.35.3...	@app/dependabot	7
#256	build(deps): Bump k8s.io/apimachinery from 0.35.2 ...	@app/dependabot	7
#255	build(deps): Bump k8s.io/client-go from 0.35.2 to ...	@app/dependabot	7

Draft PRs (1)

#61 — docs: Drafting AuthBridge Blog

CI Health

26/30 (87%) passed

.github

Merged PRs (2)

Top contributors: @justinmacnair (2)

#	Title	Author	Merged
#55	Feat Updated event messaging from KubeCon EU to Red Hat S...	@justinmacnair	2026-03-30
#54	Feat Added latest KubeCon talk, included Google Groups in...	@justinmacnair	2026-03-23

CI Health

15/30 (50%) passed
Failing: "Check links in site" — 6 failure(s)
Failing: "Check links in Hugo site" — 5 failure(s)
Failing: "Deploy Hugo site to Pages" — 1 failure(s)

agentic-control-plane

Open PRs (6)

Needs Review (6)

#	Title	Author	Days	Notes
#24	build(deps): Bump github/codeql-action from 4.32.6...	@app/dependabot	11
#23	ci: add org-wide stale issue/PR workflow	@rubambiza	15	stale (15d)
#22	feat: bootstrap orchestrate skills for self-suffic...	@pdettori	18	stale (18d)
#20	build(deps): Bump python from 3.12-slim to 3.14-sl...	@app/dependabot	18	stale (18d)
#19	build(deps): Bump python from 3.11-slim to 3.14-sl...	@app/dependabot	18	stale (18d)
#18	build(deps): Bump python from 3.12-slim to 3.14-sl...	@app/dependabot	18	stale (18d)

CI Health

30/30 (100%) passed

workload-harness

Open PRs (1)

Needs Review (1)

#	Title	Author	Days	Notes
#10	fix: Debug and enhance Exgentic A2A runner	@yoavkatz	12

CI Health

16/16 (100%) passed

Action Items

#	Action	Repo	Owner	Priority
1	Review and merge security fix #188 (stop logging API keys and auth headers) — 11 days open, no review	agent-examples	@pdettori	P0
2	Fix persistent "Check links in site" / "Check links in Hugo site" CI failures (11 failures total, dragging .github to 50% pass rate)	.github	@justinmacnair	P0
3	Merge approved #936 (preflight container runtime detection) — approved 18 days ago, still not merged	kagenti	@pdettori	P1
4	Merge 6 approved PRs in kagenti-operator: #256, #254, #249, #248, #244, #240 — all approved and waiting	kagenti-operator	operator team	P1
5	Merge approved #252 (use local Ollama as default) — approved 12 days ago	kagenti-extensions	@rh-dnagornuks	P1
6	Investigate AgentCard resign-trigger causing continuous pod restarts (#246) — operator stability regression	kagenti-operator	operator team	P1
7	Address CHANGES_REQUESTED on SPIFFE/Keycloak consolidation #966 — 15 days stale, blocks auth hardening track	kagenti	@Alan-Cha	P1
8	Investigate agent-examples CI failures (8 failures in "CI" workflow) — 67% pass rate	agent-examples	maintainers	P2
9	Batch-review 34 open dependabot PRs — kagenti (~14), kagenti-operator (9), kagenti-extensions (7), agentic-control-plane (4)	org-wide	maintainers	P2
10	Respond to CHANGES_REQUESTED on #185 (Ollama function calling fix) — 14 days with no author response	agent-examples	@mrsabath	P2
11	Address or close stale #119 (OTEL-enhanced ext_proc) — CHANGES_REQUESTED 41 days ago, SECURITY flagged	kagenti-extensions	@Ladas	P2
12	Triage agentic-control-plane — 5 stale PRs (15-18 days) including #22 (orchestrate skills bootstrap) with no review	agentic-control-plane	@pdettori	P3
13	Close or revive #137 (move CRDs to templates subdir) — 127 days old, no review	kagenti-operator	@usize	P3

jimcadden/kagenti-weekly-2026-03-23.md

Org Weekly Report: 2026-03-23 -- 2026-03-30

Org-Wide Summary

Cross-Repo Highlights

adk

Merged PRs (38)

Open PRs (8)

Needs Review (7)

Draft PRs (1)

CI Health

New Issues (10)

kagenti

Merged PRs (23)

Open PRs (52)

Ready to Merge (1)

Changes Requested (8)

Needs Review (21)

Draft PRs (22)

CI Health

New Issues (4)

agent-examples

Merged PRs (8)

Open PRs (13)

Changes Requested (1)

Needs Review (5)

Draft PRs (7)

CI Health

New Issues (3)

plugins-adapter

Merged PRs (4)

Open PRs (1)

Draft PRs (1)

CI Health

New Issues (1)

kagenti-operator

Merged PRs (4)

Open PRs (19)

Ready to Merge (6)

Changes Requested (1)

Needs Review (12)

CI Health

New Issues (4)

kagenti-extensions

Merged PRs (3)

Open PRs (10)

Ready to Merge (1)

Changes Requested (1)

Needs Review (7)

Draft PRs (1)

CI Health

.github

Merged PRs (2)

CI Health

agentic-control-plane

Open PRs (6)

Needs Review (6)

CI Health

workload-harness

Open PRs (1)

Needs Review (1)

CI Health

Action Items