Thomas Durieux
7ada28f9e3
fix: report repository refresh failures and reject busy updates
2026-09-27 06:09:19 +00:00
Thomas Durieux
c65dccd837
Merge pull request #835 from tdurieux/codex/fix-large-notebook-downloads
...
fix: prevent large notebook download timeouts
2026-09-23 06:00:09 +02:00
tdurieux
0e7a8899b5
fix: prevent large notebook download timeouts
2026-09-23 11:27:17 +08:00
Thomas Durieux
4eba5072ca
Merge pull request #833 from tdurieux/fix/hashed-asset-path-traversal
...
fix: prevent path traversal through hashed asset routes
2026-09-15 22:29:58 +02:00
Thomas Durieux
383dad7e20
fix: prevent path traversal through hashed asset routes
2026-09-15 20:26:42 +00:00
Thomas Durieux
48af564ed5
Merge pull request #832 from tdurieux/fix/streamer-public-repository-context
...
fix: restore public file streaming and contain ZIP failures
2026-09-14 17:37:51 +02:00
Thomas Durieux
2e6b79b30d
fix: address streamer review edge cases
2026-09-14 15:23:13 +00:00
Thomas Durieux
c9c729c2c5
fix: restore public file streaming and contain ZIP failures
2026-09-14 15:06:29 +00:00
Thomas Durieux
ecba15ce2e
Merge pull request #831 from tdurieux/codex/test-repository-pages-access
...
fix: read public repositories without scoped App token minting
2026-09-14 16:55:12 +02:00
tdurieux
2d153dd353
fix: read public repositories without scoped App token minting
2026-09-14 16:50:18 +02:00
tdurieux
8b9f79502b
test: cover repository loading with restricted Pages settings
2026-09-14 16:44:53 +02:00
Thomas Durieux
cfb49002ae
Merge pull request #830 from tdurieux/fix/legacy-hashbang-repository-urls
...
fix: restore legacy hashbang repository links
2026-09-14 16:37:19 +02:00
Thomas Durieux
5f44cad855
ci: build frontend assets before running tests
2026-09-14 14:35:17 +00:00
Thomas Durieux
878dda1d37
fix: restore legacy hashbang repository links
2026-09-14 14:32:00 +00:00
Thomas Durieux
8abdaf7119
Merge pull request #828 from tdurieux/fix/public-repository-app-access
...
fix: allow GitHub App access to public repositories without installation
2026-09-13 19:06:25 +02:00
Thomas Durieux
0ea5f778af
Merge pull request #827 from tdurieux/fix/repository-activity-dates
...
fix: distinguish repository publication and settings dates
2026-09-13 19:06:23 +02:00
Thomas Durieux
dc026e2ee8
fix: revalidate scoped public tokens throughout repository reads
2026-09-13 15:16:45 +00:00
Thomas Durieux
5e5cc6e0c2
fix: renew public grants and verify source identity and visibility
2026-09-13 15:05:43 +00:00
Thomas Durieux
8efb9bd506
fix: allow GitHub App access to public repositories without installation
2026-09-13 08:42:55 +00:00
Thomas Durieux
7cdf0f5e8d
fix: distinguish repository publication and settings dates
2026-09-13 08:42:54 +00:00
Thomas Durieux
22096a8346
Merge pull request #815 from tdurieux/dependabot/npm_and_yarn/smol-toml-1.8.0
...
chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0
2026-09-10 19:31:24 +02:00
Thomas Durieux
be41136ea0
Merge pull request #824 from tdurieux/codex/unified-github-signin
...
feat: unify GitHub sign-in and connect OAuth for gists
2026-09-10 09:22:28 -07:00
tdurieux
99a50cad7b
feat: unify GitHub sign-in and connect OAuth for gists
2026-09-10 18:20:56 +02:00
Thomas Durieux
82510628f7
Merge pull request #823 from tdurieux/codex/fix-anonymize-access-height
...
fix: keep GitHub access controls beside the source URL
2026-09-10 09:06:25 -07:00
tdurieux
68d9c54fcf
fix: keep GitHub access controls beside the source URL
2026-09-10 18:04:56 +02:00
Thomas Durieux
271ca9fd80
Merge pull request #821 from tdurieux/codex/fix-oauth-session
...
fix: preserve anonymous sessions during GitHub sign-in
2026-09-10 07:17:05 -07:00
tdurieux
3667e8e3cd
fix: preserve anonymous sessions during GitHub sign-in
2026-09-10 16:15:39 +02:00
Thomas Durieux
5458dedac9
Merge pull request #820 from tdurieux/codex/github-dashboard-actions
...
style: clarify GitHub sign-in and connection management
2026-09-10 07:08:15 -07:00
tdurieux
df81d7db56
style: restore mobile sign-in and compact access controls
2026-09-10 16:07:02 +02:00
tdurieux
bcc7abc975
style: clarify GitHub connections and account navigation
2026-09-10 16:04:44 +02:00
Thomas Durieux
2ffd051bbe
Merge pull request #819 from tdurieux/codex/signin-legacy-warning
...
fix: guide existing accounts to legacy GitHub sign-in
2026-09-10 07:01:56 -07:00
tdurieux
b80a15bb69
fix: guide existing accounts to legacy GitHub sign-in
2026-09-10 16:00:28 +02:00
Thomas Durieux
4e52f42009
Merge pull request #814 from tdurieux/feat/github-app-dual-auth
...
Add read-only GitHub App access alongside OAuth
2026-09-10 06:27:36 -07:00
Thomas Durieux
b3a371aa5f
Merge pull request #818 from tdurieux/fix/anonymizer-literal-performance
...
perf: avoid anonymization timeouts for absent literal terms
2026-09-10 05:58:56 -07:00
tdurieux
19f819949e
perf: avoid anonymization timeouts for absent literal terms
2026-09-10 14:49:01 +02:00
dependabot[bot]
1e3a019757
chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0
...
Bumps [smol-toml](https://github.com/squirrelchat/smol-toml ) from 1.6.1 to 1.8.0.
- [Release notes](https://github.com/squirrelchat/smol-toml/releases )
- [Commits](https://github.com/squirrelchat/smol-toml/compare/v1.6.1...v1.8.0 )
---
updated-dependencies:
- dependency-name: smol-toml
dependency-version: 1.8.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-10 02:55:51 +00:00
Thomas Durieux
a60ad6a921
feat: add read-only GitHub App access alongside OAuth
2026-09-09 22:08:12 +02:00
Thomas Durieux
e5c44845f0
Merge pull request #813 from tdurieux/fix/saved-options-and-folder-icons
...
fix: preserve saved auto-update settings and clarify file tree icons
2026-09-09 14:10:32 +02:00
tdurieux
a8a03de4bc
fix: preserve saved auto-update settings and clarify file tree icons
2026-09-09 13:57:07 +02:00
Thomas Durieux
e81b04c6e7
Merge pull request #812 from tdurieux/fix/anonymization-submit-validation
...
fix: unblock gist and pull request form submissions
2026-09-09 13:43:11 +02:00
tdurieux
8e85458b05
fix: unblock gist and pull request form submissions
2026-09-09 13:41:20 +02:00
Thomas Durieux
3b5d008fef
Merge pull request #811 from tdurieux/t3code/migrate-to-vue-3
...
refactor: migrate the frontend from AngularJS to Vue 3
2026-09-09 13:33:06 +02:00
tdurieux
e68ab037eb
perf: load document libraries only when needed
2026-09-09 13:28:44 +02:00
tdurieux
984906a89a
fix: use public package URLs for clean CI installs
2026-09-09 13:25:36 +02:00
tdurieux
4a18f94631
refactor: migrate the frontend from AngularJS to Vue 3
2026-09-09 13:19:53 +02:00
Thomas Durieux
dc0ef022fb
Merge pull request #810 from tdurieux/feat/landing-redesign
...
feat: rebuild the landing page around the product
2026-09-09 12:24:47 +02:00
tdurieux and Claude Fable 5.1
88d8225f00
feat: rebuild the landing page around the product
...
The home page led with a text hero, a boxed stats strip, a numbered
how-it-works list, a trust card and three Bootstrap featurettes with
postage-stamp screenshots. It now shows the product first and stays
flat:
- Hero: copy on the left, the anonymize form in a browser frame on the
right, one primary CTA plus a link to a real anonymized repository,
and three reassurance points (free, read-only, expires).
- Proof and live stats collapse into hairline strips with no cards;
the stat bars keep their daily-delta charts and the "+N today" line.
- Before/after example gets a section head and shows the actual XXXX-n
masks, each labelled for screen readers.
- "What you get" is one large screenshot with three vertical tabs
(Anonymize, Review, Manage) instead of three columns. Tabs are real
buttons with tablist/tab/tabpanel roles, roving tabindex and arrow-key
navigation; the description and link sit outside the button. Signed-out
visitors are sent to sign in rather than to a dashboard that redirects.
- FAQ teaser with the three questions that come up most, linking into
the FAQ anchors.
- Phone layout: tabs become a strip above the screenshot with the
selected description below it, stats go two-up, panes stack, the CTA
fills the width, and horizontal overflow is clipped so the hero bleed
can never cause sideways scrolling.
Removes the dead how-it-works, trust, featurette and metrics styles and
the legacy mobile hero font overrides that fought the new sizes.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-09-09 12:21:02 +02:00
Thomas Durieux
da247de018
Merge pull request #808 from tdurieux/fix/webview-script-playback
...
fix: restore scripts and video playback on project pages
2026-09-09 10:23:45 +02:00
Thomas Durieux
f27e9ca9a0
Merge pull request #809 from tdurieux/feat/dashboard-redesign
...
feat: make the dashboard, menus and settings readable at a glance
2026-09-08 21:07:30 +02:00
tdurieux and Claude Fable 5.1
b9189953d3
test: drop unused timer globals from the dashboard sandbox
...
ESLint's test config does not declare setTimeout and friends, so passing
them into the vm sandbox failed the Lint job. Nothing the test exercises
uses them.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com >
2026-09-08 21:02:52 +02:00