[aramprice]

The read-only jumpbox Git source will follow its repository's default branch. APT and RPM signing-key URLs use HEAD, which works before and after the APT repository rename.

Validation: git diff --check passed. Parsed before/after comparisons confirm only the intended Git branch selectors changed. Modern local strict pipeline validation reports the same pre-existing template/legacy-schema errors before and after this patch; it does not establish runtime compatibility. HTTP downloads of both APT/RPM key URLs through HEAD returned HTTP 200 and matched the corresponding master bytes.

Default-following consumer changes can be merged and, where deployed, applied by their operators before the target rename.

Concourse Git resource contract: a read-only source can omit branch; a source used for put needs an explicit branch.

This PR changes checked-in files only. Deployed pipeline reconfiguration and runtime checks remain operator-owned; no Concourse pipelines or jobs were modified, paused, unpaused, or triggered for this work.

Cutover plans:

• bosh-apt-resources: steps and related PRs
• jumpbox-deployment: steps and related PRs

Shared community configuration (draft): cloudfoundry/community#1682

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The Ubuntu APT and Fedora/RHEL YUM signing-key URLs in the README now use HEAD instead of master. The jumpbox-deployment Git resource no longer specifies a branch; its repository URI remains configured.

Merge Risk: Minimal · up to 59a75

The branch-neutral Git and signing-key references introduce no identified merge-blocking risk.

Pre-merge checks: 4

Check name	Status	Explanation
Title check		The title clearly and concisely describes both main changes: following the jumpbox repository default branch and using branch-neutral APT key URLs.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.
Description check		The description directly matches the changes. It explains the jumpbox Git source branch change and the APT/RPM signing-key URL updates. It also documents validation results and deployment scope.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 831b76e9-2d15-4b5e-9a89-ea828cda7fac

Commits

Reviewing files that changed from the base of the PR and between 4174de6 and 59a75f7.

Files selected for processing: 2

• README.md
• ci/pipelines/bosh-bootloader.yml

Files with no reviewable changes: 1

• ci/pipelines/bosh-bootloader.yml

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.