Thomas Durieux
1d326e7c32
fix: repair private repository access from the edit page ( #892 )
...
* fix: repair private repository access from the edit page
* fix: respect App rollout and reload renamed sources after repair
* fix: gate access repair by status and update response tests
2026-10-11 12:13:02 +01:00
Thomas Durieux
444e5ab248
fix: save verified email addresses during GitHub registration
2026-10-09 13:24:21 +00:00
Thomas Durieux
37d10eed20
fix: contain upstream failures and back off repeated retries
2026-10-09 03:48:05 +00:00
Thomas Durieux
eb4fbb6b15
Merge commit 'refs/security-review/pr849' into HEAD
...
# Conflicts:
# src/server/service/review-consent-http.ts
2026-10-08 16:26:12 +00:00
Thomas Durieux
7fc0a79a7a
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
89d7a92072
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
c1d192cb7f
Merge commit 'refs/security-review/pr846' into HEAD
...
# Conflicts:
# public/script/main.js
2026-10-08 16:25:32 +00:00
Thomas Durieux
5e84a7e1a3
Merge commit 'refs/security-review/pr845' into HEAD
2026-10-08 16:25:01 +00:00
Thomas Durieux
243396515e
Merge commit 'refs/security-review/pr844' into HEAD
2026-10-08 16:25:00 +00:00
Thomas Durieux
37a87a0fba
Merge commit 'refs/security-review/pr843' into HEAD
2026-10-08 16:25:00 +00:00
Thomas Durieux
9fa9838dea
Merge remote-tracking branch 'origin/main' into HEAD
2026-10-08 16:24:40 +00:00
Thomas Durieux
a9760eab39
perf: avoid needless downloads and track request latency ( #876 )
...
* perf: avoid needless downloads and track request latency
* fix: correct request timing and monitoring revalidation
2026-10-08 10:38:33 +01:00
Thomas Durieux
db966356ec
fix: support gists through GitHub App login ( #875 )
...
* fix: prompt OAuth reconnection when gist credentials are rejected
* fix: support gist reads through GitHub App user grants
* test: adapt truncated gist regression to provider selection
* fix: address gist reconnect visibility and token renewal review
* fix: verify App authorization before revoking OAuth
2026-10-08 10:26:13 +01:00
Thomas Durieux
4fd31a59c8
fix: avoid timeouts for safe ZIP anonymization ( #873 )
2026-10-08 08:20:26 +01:00
Thomas Durieux
40c369641b
fix: keep ZIP downloads flowing through compression ( #872 )
2026-10-08 04:31:52 +01:00
Thomas Durieux
6434337923
perf: bound request work and resource usage ( #866 )
...
* perf: bound request work and resource usage
* fix: address performance review regressions
* fix: guard content expiration and dashboard state
* fix: tolerate cache outages and retire derived paths
* fix: revalidate expiration claims and status pagination
* fix: retry interrupted repository metadata cleanup
* fix: retire obsolete content cache storage
* fix: activate tree metadata and recheck expiration claims
* fix: fence cache publication across expiration
* fix: recover staged trees and enforce cache lifecycle cleanup
* fix: prune expired transforms during database outages
* fix: finish conference removals and reload expiration candidates
2026-10-08 03:38:19 +01:00
Thomas Durieux
d3a8b4a8a7
Return artifact consent through registered POST callbacks
2026-09-27 15:59:36 +00:00
Thomas Durieux
09f94137cd
Give the disposable MongoDB fixture room for its journal
2026-09-27 15:24:22 +00:00
Thomas Durieux
7fe60a89aa
Add scoped completion exchange service transport
2026-09-27 15:18:49 +00:00
Thomas Durieux
d909bf281b
Exchange owner consent codes for immutable pending bindings
2026-09-27 15:06:14 +00:00
Thomas Durieux
e4334bc9a7
Add isolated artifact owner consent page
2026-09-27 14:56:06 +00:00
Thomas Durieux
7b60979c96
Protect artifact consent HTTP requests with current sessions and CSRF
2026-09-27 14:36:46 +00:00
Thomas Durieux
5485f57e02
Retain session-bound artifact owner consent under current authority
2026-09-27 14:16:57 +00:00
Thomas Durieux
b776ff7e5a
Add bounded authenticated review intent HTTPS consumer
2026-09-27 13:50:20 +00:00
Thomas Durieux
83e8d45192
fix: close rejected artifact service requests before body draining
2026-09-27 13:13:04 +00:00
Thomas Durieux
31dfe0f604
Record clean-install upstream build and full test results
2026-09-27 13:03:02 +00:00
Thomas Durieux
eaa84e3af5
Add optional authenticated review-service capabilities endpoint
2026-09-27 12:51:28 +00:00
Thomas Durieux
dc026e2ee8
fix: revalidate scoped public tokens throughout repository reads
2026-09-13 15:16:45 +00:00
Thomas Durieux
5e5cc6e0c2
fix: renew public grants and verify source identity and visibility
2026-09-13 15:05:43 +00:00
Thomas Durieux
8efb9bd506
fix: allow GitHub App access to public repositories without installation
2026-09-13 08:42:55 +00:00
tdurieux
99a50cad7b
feat: unify GitHub sign-in and connect OAuth for gists
2026-09-10 18:20:56 +02:00
Thomas Durieux
a60ad6a921
feat: add read-only GitHub App access alongside OAuth
2026-09-09 22:08:12 +02:00
tdurieux
c7eed1a6b4
perf: parallelize credential migration owner analysis
2026-09-08 14:28:46 +02:00
tdurieux
0c808a8675
fix: recover conflicting credentials by verifying the recorded owner
2026-09-08 14:21:16 +02:00
Thomas Durieux
530e388e46
fix: archive ownerless repositories without assigning ownership ( #800 )
2026-09-08 14:03:09 +02:00
Thomas Durieux
8de4a536cc
fix: recover legacy repository owners through GitHub ( #799 )
2026-09-08 13:39:39 +02:00
Thomas Durieux
3fb376dd53
fix: encrypt stored GitHub credentials ( #797 )
2026-09-08 13:04:28 +02:00
Thomas Durieux
e54b78c7e6
Add a reliable MongoDB replica setup runbook ( #766 )
...
* docs: clarify MongoDB Tailscale bind addresses
* fix: make MongoDB replica host mapping deterministic
* docs: add complete MongoDB replica runbook
* docs: support different replica server paths
2026-07-30 03:10:13 +02:00
Thomas Durieux
debd83c079
feat: add optional MongoDB replica deployment ( #765 )
2026-07-30 02:28:19 +02:00
Thomas Durieux