Commit Graph
785 Commits
Author SHA1 Message Date
Thomas Durieux 7ada28f9e3 fix: report repository refresh failures and reject busy updates 2026-09-27 06:09:19 +00:00
Thomas Durieux c65dccd837 Merge pull request #835 from tdurieux/codex/fix-large-notebook-downloads
fix: prevent large notebook download timeouts
2026-09-23 06:00:09 +02:00
tdurieux 0e7a8899b5 fix: prevent large notebook download timeouts 2026-09-23 11:27:17 +08:00
Thomas Durieux 4eba5072ca Merge pull request #833 from tdurieux/fix/hashed-asset-path-traversal
fix: prevent path traversal through hashed asset routes
2026-09-15 22:29:58 +02:00
Thomas Durieux 383dad7e20 fix: prevent path traversal through hashed asset routes 2026-09-15 20:26:42 +00:00
Thomas Durieux 48af564ed5 Merge pull request #832 from tdurieux/fix/streamer-public-repository-context
fix: restore public file streaming and contain ZIP failures
2026-09-14 17:37:51 +02:00
Thomas Durieux 2e6b79b30d fix: address streamer review edge cases 2026-09-14 15:23:13 +00:00
Thomas Durieux c9c729c2c5 fix: restore public file streaming and contain ZIP failures 2026-09-14 15:06:29 +00:00
Thomas Durieux ecba15ce2e Merge pull request #831 from tdurieux/codex/test-repository-pages-access
fix: read public repositories without scoped App token minting
2026-09-14 16:55:12 +02:00
tdurieux 2d153dd353 fix: read public repositories without scoped App token minting 2026-09-14 16:50:18 +02:00
tdurieux 8b9f79502b test: cover repository loading with restricted Pages settings 2026-09-14 16:44:53 +02:00
Thomas Durieux cfb49002ae Merge pull request #830 from tdurieux/fix/legacy-hashbang-repository-urls
fix: restore legacy hashbang repository links
2026-09-14 16:37:19 +02:00
Thomas Durieux 5f44cad855 ci: build frontend assets before running tests 2026-09-14 14:35:17 +00:00
Thomas Durieux 878dda1d37 fix: restore legacy hashbang repository links 2026-09-14 14:32:00 +00:00
Thomas Durieux 8abdaf7119 Merge pull request #828 from tdurieux/fix/public-repository-app-access
fix: allow GitHub App access to public repositories without installation
2026-09-13 19:06:25 +02:00
Thomas Durieux 0ea5f778af Merge pull request #827 from tdurieux/fix/repository-activity-dates
fix: distinguish repository publication and settings dates
2026-09-13 19:06:23 +02:00
Thomas Durieux dc026e2ee8 fix: revalidate scoped public tokens throughout repository reads 2026-09-13 15:16:45 +00:00
Thomas Durieux 5e5cc6e0c2 fix: renew public grants and verify source identity and visibility 2026-09-13 15:05:43 +00:00
Thomas Durieux 8efb9bd506 fix: allow GitHub App access to public repositories without installation 2026-09-13 08:42:55 +00:00
Thomas Durieux 7cdf0f5e8d fix: distinguish repository publication and settings dates 2026-09-13 08:42:54 +00:00
Thomas Durieux 22096a8346 Merge pull request #815 from tdurieux/dependabot/npm_and_yarn/smol-toml-1.8.0
chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0
2026-09-10 19:31:24 +02:00
Thomas Durieux be41136ea0 Merge pull request #824 from tdurieux/codex/unified-github-signin
feat: unify GitHub sign-in and connect OAuth for gists
2026-09-10 09:22:28 -07:00
tdurieux 99a50cad7b feat: unify GitHub sign-in and connect OAuth for gists 2026-09-10 18:20:56 +02:00
Thomas Durieux 82510628f7 Merge pull request #823 from tdurieux/codex/fix-anonymize-access-height
fix: keep GitHub access controls beside the source URL
2026-09-10 09:06:25 -07:00
tdurieux 68d9c54fcf fix: keep GitHub access controls beside the source URL 2026-09-10 18:04:56 +02:00
Thomas Durieux 271ca9fd80 Merge pull request #821 from tdurieux/codex/fix-oauth-session
fix: preserve anonymous sessions during GitHub sign-in
2026-09-10 07:17:05 -07:00
tdurieux 3667e8e3cd fix: preserve anonymous sessions during GitHub sign-in 2026-09-10 16:15:39 +02:00
Thomas Durieux 5458dedac9 Merge pull request #820 from tdurieux/codex/github-dashboard-actions
style: clarify GitHub sign-in and connection management
2026-09-10 07:08:15 -07:00
tdurieux df81d7db56 style: restore mobile sign-in and compact access controls 2026-09-10 16:07:02 +02:00
tdurieux bcc7abc975 style: clarify GitHub connections and account navigation 2026-09-10 16:04:44 +02:00
Thomas Durieux 2ffd051bbe Merge pull request #819 from tdurieux/codex/signin-legacy-warning
fix: guide existing accounts to legacy GitHub sign-in
2026-09-10 07:01:56 -07:00
tdurieux b80a15bb69 fix: guide existing accounts to legacy GitHub sign-in 2026-09-10 16:00:28 +02:00
Thomas Durieux 4e52f42009 Merge pull request #814 from tdurieux/feat/github-app-dual-auth
Add read-only GitHub App access alongside OAuth
2026-09-10 06:27:36 -07:00
Thomas Durieux b3a371aa5f Merge pull request #818 from tdurieux/fix/anonymizer-literal-performance
perf: avoid anonymization timeouts for absent literal terms
2026-09-10 05:58:56 -07:00
tdurieux 19f819949e perf: avoid anonymization timeouts for absent literal terms 2026-09-10 14:49:01 +02:00
dependabot[bot] 1e3a019757 chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0
Bumps [smol-toml](https://github.com/squirrelchat/smol-toml) from 1.6.1 to 1.8.0.
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](https://github.com/squirrelchat/smol-toml/compare/v1.6.1...v1.8.0)

---
updated-dependencies:
- dependency-name: smol-toml
  dependency-version: 1.8.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-10 02:55:51 +00:00
Thomas Durieux a60ad6a921 feat: add read-only GitHub App access alongside OAuth 2026-09-09 22:08:12 +02:00
Thomas Durieux e5c44845f0 Merge pull request #813 from tdurieux/fix/saved-options-and-folder-icons
fix: preserve saved auto-update settings and clarify file tree icons
2026-09-09 14:10:32 +02:00
tdurieux a8a03de4bc fix: preserve saved auto-update settings and clarify file tree icons 2026-09-09 13:57:07 +02:00
Thomas Durieux e81b04c6e7 Merge pull request #812 from tdurieux/fix/anonymization-submit-validation
fix: unblock gist and pull request form submissions
2026-09-09 13:43:11 +02:00
tdurieux 8e85458b05 fix: unblock gist and pull request form submissions 2026-09-09 13:41:20 +02:00
Thomas Durieux 3b5d008fef Merge pull request #811 from tdurieux/t3code/migrate-to-vue-3
refactor: migrate the frontend from AngularJS to Vue 3
2026-09-09 13:33:06 +02:00
tdurieux e68ab037eb perf: load document libraries only when needed 2026-09-09 13:28:44 +02:00
tdurieux 984906a89a fix: use public package URLs for clean CI installs 2026-09-09 13:25:36 +02:00
tdurieux 4a18f94631 refactor: migrate the frontend from AngularJS to Vue 3 2026-09-09 13:19:53 +02:00
Thomas Durieux dc0ef022fb Merge pull request #810 from tdurieux/feat/landing-redesign
feat: rebuild the landing page around the product
2026-09-09 12:24:47 +02:00
tdurieuxandClaude Fable 5.1 88d8225f00 feat: rebuild the landing page around the product
The home page led with a text hero, a boxed stats strip, a numbered
how-it-works list, a trust card and three Bootstrap featurettes with
postage-stamp screenshots. It now shows the product first and stays
flat:

- Hero: copy on the left, the anonymize form in a browser frame on the
  right, one primary CTA plus a link to a real anonymized repository,
  and three reassurance points (free, read-only, expires).
- Proof and live stats collapse into hairline strips with no cards;
  the stat bars keep their daily-delta charts and the "+N today" line.
- Before/after example gets a section head and shows the actual XXXX-n
  masks, each labelled for screen readers.
- "What you get" is one large screenshot with three vertical tabs
  (Anonymize, Review, Manage) instead of three columns. Tabs are real
  buttons with tablist/tab/tabpanel roles, roving tabindex and arrow-key
  navigation; the description and link sit outside the button. Signed-out
  visitors are sent to sign in rather than to a dashboard that redirects.
- FAQ teaser with the three questions that come up most, linking into
  the FAQ anchors.
- Phone layout: tabs become a strip above the screenshot with the
  selected description below it, stats go two-up, panes stack, the CTA
  fills the width, and horizontal overflow is clipped so the hero bleed
  can never cause sideways scrolling.

Removes the dead how-it-works, trust, featurette and metrics styles and
the legacy mobile hero font overrides that fought the new sizes.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-09-09 12:21:02 +02:00
Thomas Durieux da247de018 Merge pull request #808 from tdurieux/fix/webview-script-playback
fix: restore scripts and video playback on project pages
2026-09-09 10:23:45 +02:00
Thomas Durieux f27e9ca9a0 Merge pull request #809 from tdurieux/feat/dashboard-redesign
feat: make the dashboard, menus and settings readable at a glance
2026-09-08 21:07:30 +02:00
tdurieuxandClaude Fable 5.1 b9189953d3 test: drop unused timer globals from the dashboard sandbox
ESLint's test config does not declare setTimeout and friends, so passing
them into the vm sandbox failed the Lint job. Nothing the test exercises
uses them.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-09-08 21:02:52 +02:00