Commit Graph

2947 Commits

Author SHA1 Message Date
GitHub Actions
1e14dcd59c fix: Prevent exposure of GotifyToken in JSON response for enhanced security 2026-02-20 14:07:21 +00:00
GitHub Actions
1d909afe41 fix: Update GotifyToken field to prevent exposure in JSON response 2026-02-20 14:06:46 +00:00
GitHub Actions
0d9ca68a94 chore: Update eslint and rollup dependencies to latest versions 2026-02-20 14:05:25 +00:00
GitHub Actions
105338ef67 fix: Sanitize event type logging in EnhancedSecurityNotificationService 2026-02-20 13:56:56 +00:00
GitHub Actions
8e88d9feae chore: Update CodeQL scan scripts and documentation for CI alignment and deprecate old suites 2026-02-20 13:55:28 +00:00
GitHub Actions
1309189523 feat: Enhance security notifications with new event types and provider integration 2026-02-20 13:03:40 +00:00
GitHub Actions
a278ae1287 chore: Enhance governance and security guidelines in documentation for GORM and token protection 2026-02-20 12:38:37 +00:00
GitHub Actions
12dd09b32b choret: Add governance guidelines for agent files and conditional GORM security scanning 2026-02-20 12:37:37 +00:00
GitHub Actions
0dfbb74c3c feat: Update security notification settings and enhance compatibility for legacy configurations 2026-02-20 05:09:03 +00:00
GitHub Actions
5429d85e8a feat: Implement enhanced security notification service with compatibility layer
- Introduced EnhancedSecurityNotificationService for provider-based notifications.
- Added migration logic from legacy notification configuration to managed providers.
- Updated NotificationConfig model to reflect API surface changes and maintain legacy fields.
- Enhanced Cerberus middleware to dispatch security events based on feature flags.
- Updated routes to utilize the new enhanced service and handle migration at startup.
- Added feature flag for security provider events to control behavior in production.
- Updated tests to cover new functionality and ensure compatibility with existing behavior.
2026-02-20 05:01:38 +00:00
GitHub Actions
82c1737d4b fix: run container as non-root user for improved security 2026-02-20 05:00:03 +00:00
GitHub Actions
1a477f90f4 chore: enhance Trivy scan script with Docker image pull and cleanup options 2026-02-20 03:12:02 +00:00
GitHub Actions
efbbf46a7a chore: update tools list in agent configurations for consistency and clarity 2026-02-20 03:11:33 +00:00
GitHub Actions
6b03ffc4bc fix: update AI model to GPT-5.3-Codex across multiple agent configurations 2026-02-20 01:49:27 +00:00
GitHub Actions
7f53c27344 chore: update .gitignore to reflect new report path and remove obsolete codecove_patch_report.md 2026-02-20 00:05:22 +00:00
GitHub Actions
127a81a748 chore: add unit test for DeprecatedUpdateSettings to verify JSON response fields 2026-02-20 00:02:48 +00:00
GitHub Actions
8f4298951a docs: update README with to make it cleaner and easier to read 2026-02-19 23:56:44 +00:00
GitHub Actions
c68804d37e feat: migrate from shoutrr to notfy 2026-02-19 22:50:05 +00:00
GitHub Actions
1189fa59b6 docs: update tools list and model versions in agent configurations 2026-02-19 16:43:08 +00:00
GitHub Actions
7070ea6f44 docs: update AI model references in agent configurations to Claude Sonnet 4.5 and 4.6 2026-02-19 16:40:53 +00:00
GitHub Actions
a3cdc70453 docs: update QA/Security Validation Report for PR1 remediation branch 2026-02-19 16:34:10 +00:00
GitHub Actions
3e2df57fd1 docs: add mandatory documentation requirements for identifying security vulnerabilities 2026-02-19 16:34:10 +00:00
GitHub Actions
2944cd6bed docs(security): add remediation options for GHSA-69x3-g4r3-p962 vulnerability 2026-02-19 16:34:10 +00:00
GitHub Actions
72c4dee12f docs(security): archive documentation for outdated supply chain vulnerability remediation strategies 2026-02-19 16:34:10 +00:00
GitHub Actions
2e85325d08 chore: update version to v0.19.0 2026-02-19 16:34:10 +00:00
GitHub Actions
e2e3cc3dcf fix: update tools list and enhance context for code review lead agent 2026-02-19 16:34:10 +00:00
GitHub Actions
5ee3ce8b0d chore: remove legacy E2E tests for security dashboard and login 2026-02-19 16:34:10 +00:00
GitHub Actions
f4ef79def3 chore: repo cleanup by archiving plans / reports 2026-02-19 16:34:10 +00:00
Jeremy
745d3afab5 Merge pull request #731 from Wikid82/renovate/feature/beta-release-non-major-updates
fix(deps): update dependency lucide-react to ^0.575.0 (feature/beta-release)
2026-02-19 11:33:07 -05:00
renovate[bot]
9a4b4632c0 fix(deps): update dependency lucide-react to ^0.575.0 2026-02-19 16:12:32 +00:00
Jeremy
28e32d5aee Merge pull request #730 from Wikid82/development
Propagate changes from development into feature/beta-release
2026-02-19 02:25:44 -05:00
Jeremy
c484e7d6d3 Merge pull request #726 from Wikid82/main
Propagate changes from main into development
2026-02-19 02:09:29 -05:00
Jeremy
508af8eca9 Merge pull request #718 from Wikid82/nightly
Weekly: Promote nightly to main (2026-02-18)
v0.19.0
2026-02-18 21:43:03 -05:00
Jeremy
7845602907 Merge pull request #725 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
fix(deps): update weekly-non-major-updates (feature/beta-release)
2026-02-18 20:26:33 -05:00
renovate[bot]
b9c1a106d5 fix(deps): update weekly-non-major-updates 2026-02-19 01:25:50 +00:00
Jeremy
06dd5101a7 Merge pull request #724 from Wikid82/feature/beta-release
flaky test hotfix
2026-02-18 20:25:21 -05:00
GitHub Actions
813236e017 fix: specify target branch for push events in workflow configurations 2026-02-19 01:24:24 +00:00
Jeremy
979e464b0c Merge branch 'development' into feature/beta-release 2026-02-18 19:51:15 -05:00
GitHub Actions
0c2e2f7214 fix: stabilize certificate test execution under CI concurrency
This change hardens certificate handler test execution so repeated CI runs are deterministic and no longer fail intermittently under concurrent scheduling and race-mode pressure.

It was necessary because initialization timing and test setup ordering created nondeterministic behavior that produced sporadic failures in the backend test suite.

The result is a stable certificate list test path with explicit validation gates and reproducible test artifacts for auditing.

Known container vulnerability findings remain documented and are treated as an accepted exception for this hotfix scope, with remediation deferred to the dedicated security track.
2026-02-19 00:44:44 +00:00
GitHub Actions
d9e1119ed0 fix: Correct description for Caddy patch labels to clarify PR grouping 2026-02-18 23:11:48 +00:00
GitHub Actions
07a4569380 fix: Refine descriptions in package rules for clarity in Renovate configuration 2026-02-18 22:24:35 +00:00
Jeremy
e521e627e1 Merge pull request #723 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
chore(deps): update dependency knip to ^5.84.1 (feature/beta-release)
2026-02-18 17:16:02 -05:00
Jeremy
6f00dc7f8f Merge pull request #721 from Wikid82/feature/beta-release
CodeQL Findings Remediation Hotfix
2026-02-18 17:15:22 -05:00
renovate[bot]
7f73dd7d61 chore(deps): update dependency knip to ^5.84.1 2026-02-18 21:29:55 +00:00
GitHub Actions
03e9698186 fix: Enhance error handling for missing SARIF output directory in CodeQL analysis 2026-02-18 21:26:39 +00:00
GitHub Actions
6b249bc178 fix: Improve error handling for missing SARIF files in CodeQL checks 2026-02-18 21:26:22 +00:00
GitHub Actions
00b12dd9a7 fix: Update markdown link syntax to include URL format for clarity 2026-02-18 21:24:57 +00:00
GitHub Actions
9570bdb027 fix: Update tools list in Management and Playwright Dev agents for improved functionality 2026-02-18 21:24:40 +00:00
GitHub Actions
12d3a9fe75 chore: clean repo root 2026-02-18 21:24:02 +00:00
GitHub Actions
2a792b7e61 fix: Update delete confirmation dialog behavior in CredentialManager component 2026-02-18 18:41:07 +00:00