Thomas Durieux
772e40debd
fix: retain recipient suppression after access recovery ( #897 )
...
* fix: retain recipient suppression after access recovery
* fix: migrate cold starts and fence resource deactivation
* docs: stop every writer before alert reconciliation
2026-10-14 19:23:12 +01:00
Thomas Durieux
445a479339
fix: deduplicate owner access alerts per recipient ( #896 )
...
* fix: prevent duplicate access alerts to the same recipient
* fix: address recipient alert recovery review findings
* fix: reconcile unsent alerts and wait for startup migration
* fix: preserve legacy recipient alerts through upgrades
* fix: reconcile alert results and legacy recovery races
* fix: fence dispatch and clean cancelled alert metadata
* fix: fence alert preparation and retain in-flight recovery
* fix: atomically commit alert dispatch and retry deferred recovery
* fix: keep recovery lookups from blocking upstream file reads
2026-10-13 13:55:10 +01:00
Thomas Durieux
eb9ac7e13d
fix: avoid rebuilding candidate regexes during anonymization ( #895 )
2026-10-12 21:27:36 +01:00
Thomas Durieux
8ce670a613
fix: show repository authorization controls for App-only users ( #894 )
2026-10-12 19:47:04 +01:00
Thomas Durieux
1d326e7c32
fix: repair private repository access from the edit page ( #892 )
...
* fix: repair private repository access from the edit page
* fix: respect App rollout and reload renamed sources after repair
* fix: gate access repair by status and update response tests
2026-10-11 12:13:02 +01:00
KozakLordOfMatrix and Thomas Durieux
4a06aa9888
fix: rebuild ready snapshots on an explicit refresh ( #890 )
...
* fix repository refresh failing to reflect new public GitHub commits
* test: cover forced snapshot rebuilds and unchanged background refresh
* fix: serialize missing-tree recovery with owner refreshes
---------
Co-authored-by: Thomas Durieux <5577568+tdurieux@users.noreply.github.com >
2026-10-11 11:53:45 +01:00
Thomas Durieux
bee729e0ee
Merge pull request #889 from tdurieux/fix/registration-email
...
fix: save verified email addresses during GitHub registration
2026-10-09 15:29:42 +02:00
Thomas Durieux
444e5ab248
fix: save verified email addresses during GitHub registration
2026-10-09 13:24:21 +00:00
Thomas Durieux
2d21448a77
Merge pull request #888 from tdurieux/fix/profile-email-button
...
fix: balance profile email button padding
2026-10-09 14:51:45 +02:00
Thomas Durieux
167257f781
fix: balance profile email button padding
2026-10-09 12:47:38 +00:00
Thomas Durieux
7319a5a744
fix: keep settings links on profile and fill the project table ( #887 )
2026-10-09 13:20:27 +01:00
Thomas Durieux
c67d8ec3b2
Merge pull request #886 from tdurieux/fix/production-followup-errors
...
fix: handle production source failures and reduce ZIP work
2026-10-09 12:44:26 +02:00
Thomas Durieux
bfcea3e2b7
fix: cancel token-gate waits and detect complete LFS prefixes
2026-10-09 10:08:49 +00:00
Thomas Durieux
705f7c428a
fix: handle production source failures and reduce ZIP work
2026-10-09 09:40:54 +00:00
Thomas Durieux
bd7d6f0bef
Merge pull request #885 from tdurieux/t3/one-access-alert-per-resource
...
fix: send one access alert per repository until owner action
2026-10-09 09:54:09 +02:00
Thomas Durieux
633e5ddcae
fix: rearm owner alerts across recovery actions safely
2026-10-09 07:47:51 +00:00
Thomas Durieux
d519a0a9bb
fix: send one access alert per repository until owner action
2026-10-09 07:38:52 +00:00
Thomas Durieux
c55efd14ed
Merge pull request #884 from tdurieux/t3/notify-owners-on-repo-errors
...
feat: notify owners when GitHub access needs attention
2026-10-09 08:50:05 +02:00
Thomas Durieux
9a2707d4b8
fix: preserve probe errors and complete refresh alerts
2026-10-09 06:17:40 +00:00
Thomas Durieux
2b20abe0a5
fix: cover streamed access errors without alerting on outages
2026-10-09 06:00:16 +00:00
Thomas Durieux
85b9a50d4d
fix: address owner notification review findings
2026-10-09 05:42:19 +00:00
Thomas Durieux
95f8aef30a
feat: notify owners when GitHub access needs attention
2026-10-09 05:22:41 +00:00
Thomas Durieux
f92cfbe795
Merge pull request #883 from tdurieux/fix/production-stream-failures
...
fix: contain upstream failures and back off repeated retries
2026-10-09 07:13:08 +02:00
Thomas Durieux
66b71583d4
fix: count native resets and test deferred public downloads
2026-10-09 04:07:31 +00:00
Thomas Durieux
37d10eed20
fix: contain upstream failures and back off repeated retries
2026-10-09 03:48:05 +00:00
Thomas Durieux
74fe405e1b
Merge pull request #850 from tdurieux/codex/review-callback-handoff
...
Return artifact consent through registered POST callbacks
2026-10-08 18:33:51 +02:00
Thomas Durieux
8cfe7f33e2
Merge pull request #849 from tdurieux/codex/review-completion-http
...
Add scoped completion exchange service transport
2026-10-08 18:33:44 +02:00
Thomas Durieux
8b0588a8fa
Merge pull request #848 from tdurieux/codex/review-completion-exchange
...
Exchange owner consent codes for immutable pending bindings
2026-10-08 18:33:38 +02:00
Thomas Durieux
1d20b91024
Merge pull request #847 from tdurieux/codex/review-consent-ui
...
Add isolated artifact owner consent page
2026-10-08 18:33:32 +02:00
Thomas Durieux
0fb4a031c1
Merge pull request #846 from tdurieux/codex/review-consent-http
...
Protect artifact consent HTTP requests with current sessions and CSRF
2026-10-08 18:33:27 +02:00
Thomas Durieux
e5ef807159
Merge pull request #845 from tdurieux/codex/review-owner-consent
...
Record artifact owner consent under current account and repository authority
2026-10-08 18:32:49 +02:00
Thomas Durieux
c0596d4637
Merge pull request #844 from tdurieux/codex/review-intent-client
...
Consume saved review intents through bounded authenticated HTTPS
2026-10-08 18:29:45 +02:00
Thomas Durieux
58fc9f4c16
Merge pull request #843 from tdurieux/codex/review-service-capabilities
...
feat: expose authenticated review-service capabilities
2026-10-08 18:29:31 +02:00
Thomas Durieux
5a52cc5f3b
Merge commit 'refs/security-review/pr849' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
e0fa4d37c1
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
851f91222c
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
6c8aae6ca5
Merge commit 'refs/security-review/pr846' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
a269348bbb
Merge commit 'refs/security-review/pr845' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
1ea077bd77
Give the disposable MongoDB fixture room for its journal
2026-10-08 16:28:53 +00:00
Thomas Durieux
eb4fbb6b15
Merge commit 'refs/security-review/pr849' into HEAD
...
# Conflicts:
# src/server/service/review-consent-http.ts
2026-10-08 16:26:12 +00:00
Thomas Durieux
7fc0a79a7a
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
89d7a92072
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
c1d192cb7f
Merge commit 'refs/security-review/pr846' into HEAD
...
# Conflicts:
# public/script/main.js
2026-10-08 16:25:32 +00:00
Thomas Durieux
5e84a7e1a3
Merge commit 'refs/security-review/pr845' into HEAD
2026-10-08 16:25:01 +00:00
Thomas Durieux
37a87a0fba
Merge commit 'refs/security-review/pr843' into HEAD
2026-10-08 16:25:00 +00:00
Thomas Durieux
243396515e
Merge commit 'refs/security-review/pr844' into HEAD
2026-10-08 16:25:00 +00:00
Thomas Durieux
9fa9838dea
Merge remote-tracking branch 'origin/main' into HEAD
2026-10-08 16:24:40 +00:00
Thomas Durieux
c24f6d4e94
Revalidate consent sessions after request body upload
2026-10-08 16:24:40 +00:00
Thomas Durieux
51c779dffa
fix: install native dependencies for the Docker runtime ( #881 )
2026-10-08 14:12:57 +01:00
Thomas Durieux
8b54456558
Merge pull request #879 from tdurieux/fix/ui-polish
...
fix: make the reviewer explorer readable and its errors legible
2026-10-08 14:55:13 +02:00
Thomas Durieux