 Thomas Durieux
|
d909bf281b
|
Exchange owner consent codes for immutable pending bindings
|
2026-09-27 15:06:14 +00:00 |
|
|
Thomas Durieux
|
e4334bc9a7
|
Add isolated artifact owner consent page
|
2026-09-27 14:56:06 +00:00 |
|
|
Thomas Durieux
|
7b60979c96
|
Protect artifact consent HTTP requests with current sessions and CSRF
|
2026-09-27 14:36:46 +00:00 |
|
|
Thomas Durieux
|
5485f57e02
|
Retain session-bound artifact owner consent under current authority
|
2026-09-27 14:16:57 +00:00 |
|
|
Thomas Durieux
|
b776ff7e5a
|
Add bounded authenticated review intent HTTPS consumer
|
2026-09-27 13:50:20 +00:00 |
|
|
Thomas Durieux
|
83e8d45192
|
fix: close rejected artifact service requests before body draining
|
2026-09-27 13:13:04 +00:00 |
|
|
Thomas Durieux
|
eaa84e3af5
|
Add optional authenticated review-service capabilities endpoint
|
2026-09-27 12:51:28 +00:00 |
|
|
Thomas Durieux
|
083544bf68
|
fix: preserve active downloads and atomically prepare refreshed snapshots
|
2026-09-27 06:41:39 +00:00 |
|
|
Thomas Durieux
|
0002e8d1a1
|
fix: serialize repository refreshes and recover stale downloads
|
2026-09-27 06:34:05 +00:00 |
|
|
Thomas Durieux
|
7ada28f9e3
|
fix: report repository refresh failures and reject busy updates
|
2026-09-27 06:09:19 +00:00 |
|
|
tdurieux
|
0e7a8899b5
|
fix: prevent large notebook download timeouts
|
2026-09-23 11:27:17 +08:00 |
|
|
Thomas Durieux
|
383dad7e20
|
fix: prevent path traversal through hashed asset routes
|
2026-09-15 20:26:42 +00:00 |
|
|
Thomas Durieux
|
2e6b79b30d
|
fix: address streamer review edge cases
|
2026-09-14 15:23:13 +00:00 |
|
|
Thomas Durieux
|
c9c729c2c5
|
fix: restore public file streaming and contain ZIP failures
|
2026-09-14 15:06:29 +00:00 |
|
|
tdurieux
|
2d153dd353
|
fix: read public repositories without scoped App token minting
|
2026-09-14 16:50:18 +02:00 |
|
|
Thomas Durieux
|
8abdaf7119
|
Merge pull request #828 from tdurieux/fix/public-repository-app-access
fix: allow GitHub App access to public repositories without installation
|
2026-09-13 19:06:25 +02:00 |
|
|
Thomas Durieux
|
dc026e2ee8
|
fix: revalidate scoped public tokens throughout repository reads
|
2026-09-13 15:16:45 +00:00 |
|
|
Thomas Durieux
|
5e5cc6e0c2
|
fix: renew public grants and verify source identity and visibility
|
2026-09-13 15:05:43 +00:00 |
|
|
Thomas Durieux
|
8efb9bd506
|
fix: allow GitHub App access to public repositories without installation
|
2026-09-13 08:42:55 +00:00 |
|
|
Thomas Durieux
|
7cdf0f5e8d
|
fix: distinguish repository publication and settings dates
|
2026-09-13 08:42:54 +00:00 |
|
|
tdurieux
|
99a50cad7b
|
feat: unify GitHub sign-in and connect OAuth for gists
|
2026-09-10 18:20:56 +02:00 |
|
|
tdurieux
|
3667e8e3cd
|
fix: preserve anonymous sessions during GitHub sign-in
|
2026-09-10 16:15:39 +02:00 |
|
|
Thomas Durieux
|
4e52f42009
|
Merge pull request #814 from tdurieux/feat/github-app-dual-auth
Add read-only GitHub App access alongside OAuth
|
2026-09-10 06:27:36 -07:00 |
|
|
tdurieux
|
19f819949e
|
perf: avoid anonymization timeouts for absent literal terms
|
2026-09-10 14:49:01 +02:00 |
|
|
Thomas Durieux
|
a60ad6a921
|
feat: add read-only GitHub App access alongside OAuth
|
2026-09-09 22:08:12 +02:00 |
|
|
tdurieux
|
74bd6bb779
|
fix: restore scripts and video playback on project pages
|
2026-09-08 18:01:32 +02:00 |
|
|
tdurieux
|
8ad0ec65f0
|
chore: upgrade Express to 5.2.1
|
2026-09-08 16:22:23 +02:00 |
|
|
Thomas Durieux
|
a05f42ad9f
|
Merge pull request #801 from tdurieux/t3code/archive-legacy-spaced-ids
fix: archive legacy repository IDs containing spaces
|
2026-09-08 02:46:38 -10:00 |
|
|
tdurieux
|
c7eed1a6b4
|
perf: parallelize credential migration owner analysis
|
2026-09-08 14:28:46 +02:00 |
|
|
tdurieux
|
0c808a8675
|
fix: recover conflicting credentials by verifying the recorded owner
|
2026-09-08 14:21:16 +02:00 |
|
|
tdurieux
|
90f14b19b7
|
fix: archive legacy repository IDs containing spaces
|
2026-09-08 14:08:48 +02:00 |
|
|
Thomas Durieux
|
530e388e46
|
fix: archive ownerless repositories without assigning ownership (#800)
|
2026-09-08 14:03:09 +02:00 |
|
|
Thomas Durieux
|
8de4a536cc
|
fix: recover legacy repository owners through GitHub (#799)
|
2026-09-08 13:39:39 +02:00 |
|
|
Thomas Durieux
|
3fb376dd53
|
fix: encrypt stored GitHub credentials (#797)
|
2026-09-08 13:04:28 +02:00 |
|
|
tdurieux
|
b070d7e281
|
fix: evaluate document creation timestamps per instance
|
2026-09-06 09:19:33 +02:00 |
|
|
tdurieux
|
f312105ec3
|
fix: fetch private pull request diffs through authenticated API
|
2026-09-06 09:19:28 +02:00 |
|
|
tdurieux
|
4aecc1d92f
|
fix: fetch complete content for truncated Gist files
|
2026-09-06 09:19:23 +02:00 |
|
|
tdurieux
|
b1cb9093bb
|
fix: close streaming responses after upstream errors
|
2026-09-06 09:19:18 +02:00 |
|
|
tdurieux
|
38a09188ad
|
fix: expire conference repositories before completing expiration
|
2026-09-06 09:18:42 +02:00 |
|
|
tdurieux
|
6777537d44
|
fix: restrict S3 deletion to exact keys and descendants
|
2026-09-06 09:18:37 +02:00 |
|
|
tdurieux
|
5e84bfaa5b
|
fix: surface partial S3 object deletion failures
|
2026-09-06 09:18:32 +02:00 |
|
|
tdurieux
|
4643e9f838
|
fix: preserve and anonymize truncated folder warnings
|
2026-09-06 09:18:28 +02:00 |
|
|
tdurieux
|
8d2921b406
|
fix: respect backpressure when resolving Git LFS pointers
|
2026-09-06 09:18:24 +02:00 |
|
|
tdurieux
|
9c18526d52
|
fix: decode and validate webview file paths
|
2026-09-06 09:17:56 +02:00 |
|
|
tdurieux
|
67eb83674c
|
fix: sandbox repository webview documents
|
2026-09-06 09:17:52 +02:00 |
|
|
tdurieux
|
3e275311f1
|
fix: derive file ETags from current source content
|
2026-09-06 09:17:47 +02:00 |
|
|
tdurieux
|
c14a548cb9
|
fix: enforce content policies using original file types
|
2026-09-06 09:17:42 +02:00 |
|
|
tdurieux
|
7210db2b61
|
fix: catch authentication failures in async route handlers
|
2026-09-06 09:17:37 +02:00 |
|
|
tdurieux
|
11eb160d2b
|
fix: prevent stale downloads from reviving removed repositories
|
2026-09-06 09:17:33 +02:00 |
|
|
tdurieux
|
2af66cd1b6
|
fix: authorize coauthors by stable GitHub identity
|
2026-09-06 09:17:01 +02:00 |
|