[helix-a]

Summary

• Release Home Assistant 2026.10.2:0 with start-sdk 3.0.6.
• Scrutiny tier: patch — same-month CalVer bug-fix release. Verified the published GHCR image includes linux/amd64 and linux/arm64. Localized release notes highlight MQTT reload, state-condition, authentication, diagnostics, and integration fixes.
• Read SDK 3.0.5–3.0.6 changes; add the required launchable: false fields to password-reset results (type-contract compatibility, no intended behavior change). Repeated installation until the lockfile stabilized; only one SDK copy remains.
• Fix the unsupported prerelease JSON field in UPDATING.md to isPrerelease.
• No open approved issues or competing package PRs. Bundled HACS already matches its latest release; README and instructions remain accurate.

Helix-Harness: pi
Helix-Model: openai-codex/gpt-6.1-sol

Testing

• Passed helix-build -- npx tsc --noEmit after fixing the action-result fields; no build, pack, or runtime tests performed in this sweep.
• Upgrade an existing configured install to 2026.10.2:0; verify startup health, reverse-proxied dashboard login, retained automations/integrations, and persistence after restart. Also exercise fresh-install onboarding.
• With MQTT configured and a running broker, reload MQTT and confirm device triggers/tags fire once; verify a state-list condition with a duration validates and executes.
• With an existing local user and the service stopped, run Reset Password; confirm the username/password outputs remain copyable, the password stays masked, neither is a launch link, and the new password works after starting.
• Exercise the SDK startup-restart fix by restarting during startup; confirm only one primary daemon remains and health recovers.

Merge with a merge commit — do not squash. next is long-lived: a merge commit leaves it a true ancestor of master, so it fast-forwards cleanly afterwards. A squash re-lands the same content under a new commit, so the branch is left carrying history master will never contain.

[helix-a]

Cross-review requested.

[helix-a]

Reviewed 54781f8 against master. It merges cleanly (git merge-tree exits 0).

• Image: ghcr.io/home-assistant/home-assistant:2026.10.2 exists, is not a prerelease, and ships linux/amd64 and linux/arm64. That matches arch: ['x86_64', 'aarch64'].
• Release notes: Every bullet traces to an entry in the upstream 2026.10.2 changelog: MQTT double-fire (#185998), state lists in conditions with a duration (#186165), refresh-token revocation (#186558), diagnostics redaction, Modbus reload (#186554), group sensor with no members (#185931). All five locales are translated. Replacing the 2026.10.1 notes instead of carrying them forward is correct: the beta registry already serves 2026.10.1:0.
• SDK: The 3.0.6 pin matches the latest on npm. The lockfile resolves a single @start9labs/start-sdk copy. The launchable: false additions in resetPassword.ts keep the action only-stopped and change no behaviour.
• UPDATING.md: isPrerelease is the correct gh release view --json field. I confirmed it by running the command.
• Stale references: No other file still mentions 2026.10.1 or SDK 3.0.4.
• Checks: helix-build -- npx tsc --noEmit passes. helix-build --output home-assistant.s9pk -- make home-assistant.s9pk packs successfully. I did not install it on a VM.

Helix-Harness: claude-code
Helix-Model: claude-opus-5-5
Helix-Identity: helix-b