Thomas Durieux
6915aff6f1
Merge pull request #919 from tdurieux/fix/download-progress-fences
...
fix: preserve publication fences during download progress
2026-11-03 09:22:50 +01:00
Thomas Durieux
19b1d5b546
test: declare timer used by progress race regression
2026-11-02 21:55:05 +00:00
Thomas Durieux
807e38dfc7
fix: preserve publication fences during download progress
2026-11-02 21:52:30 +00:00
Thomas Durieux
d0b217a448
feat: include public GitHub submodules in shared repositories ( #914 )
...
* feat: include public GitHub submodules in shared repositories
* fix: preserve submodule access across token and document contexts
2026-11-02 09:00:02 +01:00
Thomas Durieux
6099356e0e
feat: add scoped repository maintenance access for LLM clients ( #913 )
...
* feat: add scoped repository maintenance access for LLM clients
* fix: translate maintenance API errors
2026-11-02 07:18:04 +00:00
Thomas Durieux
6cf5445972
fix: fill gaps in GitHub Markdown rendering ( #912 )
...
* fix: fill gaps in GitHub Markdown rendering
* fix: harden Markdown dependencies and address review findings
2026-11-02 07:56:32 +01:00
Thomas Durieux
075c3a4622
Suggest existing configurations for duplicate repository URLs ( #911 )
2026-11-02 06:31:57 +00:00
Thomas Durieux
a301c46a94
fix: harden repository content and improve access recovery
...
Sandbox executable MIME aliases, enforce strict Mermaid rendering, and add security regression coverage. Upgrade vulnerable dependencies with archive compatibility checks and Node 22/24 CI. Make repository restoration atomic and provide actionable viewer errors with retry controls.
2026-11-02 05:50:34 +00:00
Thomas Durieux
772e40debd
fix: retain recipient suppression after access recovery ( #897 )
...
* fix: retain recipient suppression after access recovery
* fix: migrate cold starts and fence resource deactivation
* docs: stop every writer before alert reconciliation
2026-10-14 19:23:12 +01:00
Thomas Durieux
445a479339
fix: deduplicate owner access alerts per recipient ( #896 )
...
* fix: prevent duplicate access alerts to the same recipient
* fix: address recipient alert recovery review findings
* fix: reconcile unsent alerts and wait for startup migration
* fix: preserve legacy recipient alerts through upgrades
* fix: reconcile alert results and legacy recovery races
* fix: fence dispatch and clean cancelled alert metadata
* fix: fence alert preparation and retain in-flight recovery
* fix: atomically commit alert dispatch and retry deferred recovery
* fix: keep recovery lookups from blocking upstream file reads
2026-10-13 13:55:10 +01:00
Thomas Durieux
eb9ac7e13d
fix: avoid rebuilding candidate regexes during anonymization ( #895 )
2026-10-12 21:27:36 +01:00
Thomas Durieux
8ce670a613
fix: show repository authorization controls for App-only users ( #894 )
2026-10-12 19:47:04 +01:00
Thomas Durieux
1d326e7c32
fix: repair private repository access from the edit page ( #892 )
...
* fix: repair private repository access from the edit page
* fix: respect App rollout and reload renamed sources after repair
* fix: gate access repair by status and update response tests
2026-10-11 12:13:02 +01:00
KozakLordOfMatrix and Thomas Durieux
4a06aa9888
fix: rebuild ready snapshots on an explicit refresh ( #890 )
...
* fix repository refresh failing to reflect new public GitHub commits
* test: cover forced snapshot rebuilds and unchanged background refresh
* fix: serialize missing-tree recovery with owner refreshes
---------
Co-authored-by: Thomas Durieux <5577568+tdurieux@users.noreply.github.com >
2026-10-11 11:53:45 +01:00
Thomas Durieux
bee729e0ee
Merge pull request #889 from tdurieux/fix/registration-email
...
fix: save verified email addresses during GitHub registration
2026-10-09 15:29:42 +02:00
Thomas Durieux
444e5ab248
fix: save verified email addresses during GitHub registration
2026-10-09 13:24:21 +00:00
Thomas Durieux
2d21448a77
Merge pull request #888 from tdurieux/fix/profile-email-button
...
fix: balance profile email button padding
2026-10-09 14:51:45 +02:00
Thomas Durieux
167257f781
fix: balance profile email button padding
2026-10-09 12:47:38 +00:00
Thomas Durieux
7319a5a744
fix: keep settings links on profile and fill the project table ( #887 )
2026-10-09 13:20:27 +01:00
Thomas Durieux
c67d8ec3b2
Merge pull request #886 from tdurieux/fix/production-followup-errors
...
fix: handle production source failures and reduce ZIP work
2026-10-09 12:44:26 +02:00
Thomas Durieux
bfcea3e2b7
fix: cancel token-gate waits and detect complete LFS prefixes
2026-10-09 10:08:49 +00:00
Thomas Durieux
705f7c428a
fix: handle production source failures and reduce ZIP work
2026-10-09 09:40:54 +00:00
Thomas Durieux
bd7d6f0bef
Merge pull request #885 from tdurieux/t3/one-access-alert-per-resource
...
fix: send one access alert per repository until owner action
2026-10-09 09:54:09 +02:00
Thomas Durieux
633e5ddcae
fix: rearm owner alerts across recovery actions safely
2026-10-09 07:47:51 +00:00
Thomas Durieux
d519a0a9bb
fix: send one access alert per repository until owner action
2026-10-09 07:38:52 +00:00
Thomas Durieux
c55efd14ed
Merge pull request #884 from tdurieux/t3/notify-owners-on-repo-errors
...
feat: notify owners when GitHub access needs attention
2026-10-09 08:50:05 +02:00
Thomas Durieux
9a2707d4b8
fix: preserve probe errors and complete refresh alerts
2026-10-09 06:17:40 +00:00
Thomas Durieux
2b20abe0a5
fix: cover streamed access errors without alerting on outages
2026-10-09 06:00:16 +00:00
Thomas Durieux
85b9a50d4d
fix: address owner notification review findings
2026-10-09 05:42:19 +00:00
Thomas Durieux
95f8aef30a
feat: notify owners when GitHub access needs attention
2026-10-09 05:22:41 +00:00
Thomas Durieux
f92cfbe795
Merge pull request #883 from tdurieux/fix/production-stream-failures
...
fix: contain upstream failures and back off repeated retries
2026-10-09 07:13:08 +02:00
Thomas Durieux
66b71583d4
fix: count native resets and test deferred public downloads
2026-10-09 04:07:31 +00:00
Thomas Durieux
37d10eed20
fix: contain upstream failures and back off repeated retries
2026-10-09 03:48:05 +00:00
Thomas Durieux
74fe405e1b
Merge pull request #850 from tdurieux/codex/review-callback-handoff
...
Return artifact consent through registered POST callbacks
2026-10-08 18:33:51 +02:00
Thomas Durieux
8cfe7f33e2
Merge pull request #849 from tdurieux/codex/review-completion-http
...
Add scoped completion exchange service transport
2026-10-08 18:33:44 +02:00
Thomas Durieux
8b0588a8fa
Merge pull request #848 from tdurieux/codex/review-completion-exchange
...
Exchange owner consent codes for immutable pending bindings
2026-10-08 18:33:38 +02:00
Thomas Durieux
1d20b91024
Merge pull request #847 from tdurieux/codex/review-consent-ui
...
Add isolated artifact owner consent page
2026-10-08 18:33:32 +02:00
Thomas Durieux
0fb4a031c1
Merge pull request #846 from tdurieux/codex/review-consent-http
...
Protect artifact consent HTTP requests with current sessions and CSRF
2026-10-08 18:33:27 +02:00
Thomas Durieux
e5ef807159
Merge pull request #845 from tdurieux/codex/review-owner-consent
...
Record artifact owner consent under current account and repository authority
2026-10-08 18:32:49 +02:00
Thomas Durieux
c0596d4637
Merge pull request #844 from tdurieux/codex/review-intent-client
...
Consume saved review intents through bounded authenticated HTTPS
2026-10-08 18:29:45 +02:00
Thomas Durieux
58fc9f4c16
Merge pull request #843 from tdurieux/codex/review-service-capabilities
...
feat: expose authenticated review-service capabilities
2026-10-08 18:29:31 +02:00
Thomas Durieux
5a52cc5f3b
Merge commit 'refs/security-review/pr849' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
e0fa4d37c1
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
851f91222c
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
6c8aae6ca5
Merge commit 'refs/security-review/pr846' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
a269348bbb
Merge commit 'refs/security-review/pr845' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
1ea077bd77
Give the disposable MongoDB fixture room for its journal
2026-10-08 16:28:53 +00:00
Thomas Durieux
eb4fbb6b15
Merge commit 'refs/security-review/pr849' into HEAD
...
# Conflicts:
# src/server/service/review-consent-http.ts
2026-10-08 16:26:12 +00:00
Thomas Durieux
7fc0a79a7a
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
89d7a92072
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:25:33 +00:00