 Thomas Durieux
|
5e84a7e1a3
|
Merge commit 'refs/security-review/pr845' into HEAD
|
2026-10-08 16:25:01 +00:00 |
|
|
Thomas Durieux
|
243396515e
|
Merge commit 'refs/security-review/pr844' into HEAD
|
2026-10-08 16:25:00 +00:00 |
|
|
Thomas Durieux
|
37a87a0fba
|
Merge commit 'refs/security-review/pr843' into HEAD
|
2026-10-08 16:25:00 +00:00 |
|
|
Thomas Durieux
|
9fa9838dea
|
Merge remote-tracking branch 'origin/main' into HEAD
|
2026-10-08 16:24:40 +00:00 |
|
|
Thomas Durieux
|
a9760eab39
|
perf: avoid needless downloads and track request latency (#876)
* perf: avoid needless downloads and track request latency
* fix: correct request timing and monitoring revalidation
|
2026-10-08 10:38:33 +01:00 |
|
|
Thomas Durieux
|
db966356ec
|
fix: support gists through GitHub App login (#875)
* fix: prompt OAuth reconnection when gist credentials are rejected
* fix: support gist reads through GitHub App user grants
* test: adapt truncated gist regression to provider selection
* fix: address gist reconnect visibility and token renewal review
* fix: verify App authorization before revoking OAuth
|
2026-10-08 10:26:13 +01:00 |
|
|
Thomas Durieux
|
4fd31a59c8
|
fix: avoid timeouts for safe ZIP anonymization (#873)
|
2026-10-08 08:20:26 +01:00 |
|
|
Thomas Durieux
|
40c369641b
|
fix: keep ZIP downloads flowing through compression (#872)
|
2026-10-08 04:31:52 +01:00 |
|
|
Thomas Durieux
|
6434337923
|
perf: bound request work and resource usage (#866)
* perf: bound request work and resource usage
* fix: address performance review regressions
* fix: guard content expiration and dashboard state
* fix: tolerate cache outages and retire derived paths
* fix: revalidate expiration claims and status pagination
* fix: retry interrupted repository metadata cleanup
* fix: retire obsolete content cache storage
* fix: activate tree metadata and recheck expiration claims
* fix: fence cache publication across expiration
* fix: recover staged trees and enforce cache lifecycle cleanup
* fix: prune expired transforms during database outages
* fix: finish conference removals and reload expiration candidates
|
2026-10-08 03:38:19 +01:00 |
|
|
Thomas Durieux
|
7b60979c96
|
Protect artifact consent HTTP requests with current sessions and CSRF
|
2026-09-27 14:36:46 +00:00 |
|
|
Thomas Durieux
|
5485f57e02
|
Retain session-bound artifact owner consent under current authority
|
2026-09-27 14:16:57 +00:00 |
|
|
Thomas Durieux
|
b776ff7e5a
|
Add bounded authenticated review intent HTTPS consumer
|
2026-09-27 13:50:20 +00:00 |
|
|
Thomas Durieux
|
83e8d45192
|
fix: close rejected artifact service requests before body draining
|
2026-09-27 13:13:04 +00:00 |
|
|
Thomas Durieux
|
31dfe0f604
|
Record clean-install upstream build and full test results
|
2026-09-27 13:03:02 +00:00 |
|
|
Thomas Durieux
|
eaa84e3af5
|
Add optional authenticated review-service capabilities endpoint
|
2026-09-27 12:51:28 +00:00 |
|
|
Thomas Durieux
|
dc026e2ee8
|
fix: revalidate scoped public tokens throughout repository reads
|
2026-09-13 15:16:45 +00:00 |
|
|
Thomas Durieux
|
5e5cc6e0c2
|
fix: renew public grants and verify source identity and visibility
|
2026-09-13 15:05:43 +00:00 |
|
|
Thomas Durieux
|
8efb9bd506
|
fix: allow GitHub App access to public repositories without installation
|
2026-09-13 08:42:55 +00:00 |
|
|
tdurieux
|
99a50cad7b
|
feat: unify GitHub sign-in and connect OAuth for gists
|
2026-09-10 18:20:56 +02:00 |
|
|
Thomas Durieux
|
a60ad6a921
|
feat: add read-only GitHub App access alongside OAuth
|
2026-09-09 22:08:12 +02:00 |
|
|
tdurieux
|
c7eed1a6b4
|
perf: parallelize credential migration owner analysis
|
2026-09-08 14:28:46 +02:00 |
|
|
tdurieux
|
0c808a8675
|
fix: recover conflicting credentials by verifying the recorded owner
|
2026-09-08 14:21:16 +02:00 |
|
|
Thomas Durieux
|
530e388e46
|
fix: archive ownerless repositories without assigning ownership (#800)
|
2026-09-08 14:03:09 +02:00 |
|
|
Thomas Durieux
|
8de4a536cc
|
fix: recover legacy repository owners through GitHub (#799)
|
2026-09-08 13:39:39 +02:00 |
|
|
Thomas Durieux
|
3fb376dd53
|
fix: encrypt stored GitHub credentials (#797)
|
2026-09-08 13:04:28 +02:00 |
|
|
Thomas Durieux
|
e54b78c7e6
|
Add a reliable MongoDB replica setup runbook (#766)
* docs: clarify MongoDB Tailscale bind addresses
* fix: make MongoDB replica host mapping deterministic
* docs: add complete MongoDB replica runbook
* docs: support different replica server paths
|
2026-07-30 03:10:13 +02:00 |
|
|
Thomas Durieux
|
debd83c079
|
feat: add optional MongoDB replica deployment (#765)
|
2026-07-30 02:28:19 +02:00 |
|