Commit Graph

2963 Commits

Author SHA1 Message Date
GitHub Actions
7497cbecd0 chore: Implement manual test plan for SMTP mock server flakiness fix
- Added a new documentation file outlining the manual test plan to validate the SMTP mock server flakiness fix, ensuring improved mail test reliability without affecting production behavior.
- Updated the current specification document to reflect the focus on stabilizing flaky SMTP STARTTLS+AUTH unit tests, including detailed research findings and requirements for the implementation.
- Created a QA/Security validation report for the SMTP flaky test fix, confirming that changes are test-only, stable under repeated runs, and do not introduce new security risks.
2026-02-22 06:29:37 +00:00
GitHub Actions
b14f6f040f chore: Add tests for feature flags and notification providers
- Implement tests for feature flags coverage in `feature_flags_coverage_v2_test.go` to validate behavior with invalid persisted and environment values, as well as default settings.
- Create tests in `notification_provider_patch_coverage_test.go` to ensure correct handling of notification provider updates, including blocking type mutations for non-Discord providers.
- Add tests in `security_notifications_patch_coverage_test.go` to verify deprecated headers, handle invalid CIDR warnings, and ensure correct severity handling for security events.
- Introduce migration error handling tests in `routes_coverage_test.go` to ensure graceful handling of migration errors during registration.
- Enhance `cerberus_blockers_test.go` with tests for disabled security event notifications and error handling for dispatch failures.
- Update `router_test.go` to validate notify routing based on feature flags.
- Refactor `mail_service.go` to normalize base URLs for invites, ensuring proper handling of trailing slashes.
- Modify `notification_service_json_test.go` and `notification_service_test.go` to mock Discord validation and improve webhook testing.
- Update `proxyhost_service.go` to enhance hostname validation by parsing URLs.
- Refine `uptime_service.go` to extract ports correctly from URLs, including handling edge cases.
- Enhance frontend tests in `notifications.test.ts` and `Notifications.test.tsx` to ensure correct behavior for Discord notification providers and enforce type constraints.
2026-02-21 20:55:01 +00:00
GitHub Actions
89a1768496 chore: add npm update script for managing project dependencies 2026-02-21 18:06:08 +00:00
GitHub Actions
57e7aa3e81 chore(deps): update @csstools/color-helpers, @csstools/css-color-parser, and oxc-resolver to latest versions 2026-02-21 17:49:39 +00:00
Jeremy
ff88ae9fd8 Merge pull request #736 from Wikid82/renovate/feature/beta-release-goreleaser-goreleaser-action-7.x
chore(deps): update goreleaser/goreleaser-action action to v7 (feature/beta-release)
2026-02-21 12:46:37 -05:00
renovate[bot]
cddec19862 chore(deps): update goreleaser/goreleaser-action action to v7 2026-02-21 17:46:14 +00:00
Jeremy
1bbd71cac3 Merge pull request #735 from Wikid82/renovate/feature/beta-release-non-major-updates
fix(deps): update non-major-updates (feature/beta-release)
2026-02-21 12:43:41 -05:00
GitHub Actions
a21351cd0f chore: add CHARON_ENCRYPTION_KEY management for backend tests 2026-02-21 17:39:50 +00:00
renovate[bot]
783956cb78 fix(deps): update non-major-updates 2026-02-21 16:43:51 +00:00
GitHub Actions
9094d3b99b choret: enforce discord-only provider type across notifications API and UI
- Added validation to reject non-discord provider types in create, update, test, and preview operations.
- Updated the notifications form to automatically normalize non-discord types to discord.
- Modified UI to display explicit messaging for deprecated and non-dispatch statuses for non-discord providers.
- Enhanced tests to cover new validation logic and UI changes for provider types.
2026-02-21 14:28:06 +00:00
GitHub Actions
718358314f chore: Update notification provider to support Discord only
- Refactored notification provider tests to use Discord webhook URLs.
- Updated frontend forms and API interactions to restrict provider type to Discord.
- Modified translations to reflect the change in supported provider types.
- Enhanced UI to indicate deprecated status for non-Discord providers.
- Adjusted documentation to align with the new provider structure.
2026-02-21 06:23:46 +00:00
GitHub Actions
f11cd689a5 fix: remove legacy security notification settings and related UI components 2026-02-20 19:28:13 +00:00
Jeremy
3a3c06a5ff Merge pull request #734 from Wikid82/renovate/feature/beta-release-non-major-updates
fix(deps): update non-major-updates (feature/beta-release)
2026-02-20 14:27:50 -05:00
renovate[bot]
c48ced8c03 fix(deps): update non-major-updates 2026-02-20 19:26:28 +00:00
GitHub Actions
4ea22c11b3 fix: package version missmatch 2026-02-20 14:21:06 +00:00
GitHub Actions
a558c36853 fix: Remove redundant entries from tools list in agent markdown files 2026-02-20 14:16:00 +00:00
GitHub Actions
1e14dcd59c fix: Prevent exposure of GotifyToken in JSON response for enhanced security 2026-02-20 14:07:21 +00:00
GitHub Actions
1d909afe41 fix: Update GotifyToken field to prevent exposure in JSON response 2026-02-20 14:06:46 +00:00
GitHub Actions
0d9ca68a94 chore: Update eslint and rollup dependencies to latest versions 2026-02-20 14:05:25 +00:00
GitHub Actions
105338ef67 fix: Sanitize event type logging in EnhancedSecurityNotificationService 2026-02-20 13:56:56 +00:00
GitHub Actions
8e88d9feae chore: Update CodeQL scan scripts and documentation for CI alignment and deprecate old suites 2026-02-20 13:55:28 +00:00
GitHub Actions
1309189523 feat: Enhance security notifications with new event types and provider integration 2026-02-20 13:03:40 +00:00
GitHub Actions
a278ae1287 chore: Enhance governance and security guidelines in documentation for GORM and token protection 2026-02-20 12:38:37 +00:00
GitHub Actions
12dd09b32b choret: Add governance guidelines for agent files and conditional GORM security scanning 2026-02-20 12:37:37 +00:00
GitHub Actions
0dfbb74c3c feat: Update security notification settings and enhance compatibility for legacy configurations 2026-02-20 05:09:03 +00:00
GitHub Actions
5429d85e8a feat: Implement enhanced security notification service with compatibility layer
- Introduced EnhancedSecurityNotificationService for provider-based notifications.
- Added migration logic from legacy notification configuration to managed providers.
- Updated NotificationConfig model to reflect API surface changes and maintain legacy fields.
- Enhanced Cerberus middleware to dispatch security events based on feature flags.
- Updated routes to utilize the new enhanced service and handle migration at startup.
- Added feature flag for security provider events to control behavior in production.
- Updated tests to cover new functionality and ensure compatibility with existing behavior.
2026-02-20 05:01:38 +00:00
GitHub Actions
82c1737d4b fix: run container as non-root user for improved security 2026-02-20 05:00:03 +00:00
GitHub Actions
1a477f90f4 chore: enhance Trivy scan script with Docker image pull and cleanup options 2026-02-20 03:12:02 +00:00
GitHub Actions
efbbf46a7a chore: update tools list in agent configurations for consistency and clarity 2026-02-20 03:11:33 +00:00
GitHub Actions
6b03ffc4bc fix: update AI model to GPT-5.3-Codex across multiple agent configurations 2026-02-20 01:49:27 +00:00
GitHub Actions
7f53c27344 chore: update .gitignore to reflect new report path and remove obsolete codecove_patch_report.md 2026-02-20 00:05:22 +00:00
GitHub Actions
127a81a748 chore: add unit test for DeprecatedUpdateSettings to verify JSON response fields 2026-02-20 00:02:48 +00:00
GitHub Actions
8f4298951a docs: update README with to make it cleaner and easier to read 2026-02-19 23:56:44 +00:00
GitHub Actions
c68804d37e feat: migrate from shoutrr to notfy 2026-02-19 22:50:05 +00:00
GitHub Actions
1189fa59b6 docs: update tools list and model versions in agent configurations 2026-02-19 16:43:08 +00:00
GitHub Actions
7070ea6f44 docs: update AI model references in agent configurations to Claude Sonnet 4.5 and 4.6 2026-02-19 16:40:53 +00:00
GitHub Actions
a3cdc70453 docs: update QA/Security Validation Report for PR1 remediation branch 2026-02-19 16:34:10 +00:00
GitHub Actions
3e2df57fd1 docs: add mandatory documentation requirements for identifying security vulnerabilities 2026-02-19 16:34:10 +00:00
GitHub Actions
2944cd6bed docs(security): add remediation options for GHSA-69x3-g4r3-p962 vulnerability 2026-02-19 16:34:10 +00:00
GitHub Actions
72c4dee12f docs(security): archive documentation for outdated supply chain vulnerability remediation strategies 2026-02-19 16:34:10 +00:00
GitHub Actions
2e85325d08 chore: update version to v0.19.0 2026-02-19 16:34:10 +00:00
GitHub Actions
e2e3cc3dcf fix: update tools list and enhance context for code review lead agent 2026-02-19 16:34:10 +00:00
GitHub Actions
5ee3ce8b0d chore: remove legacy E2E tests for security dashboard and login 2026-02-19 16:34:10 +00:00
GitHub Actions
f4ef79def3 chore: repo cleanup by archiving plans / reports 2026-02-19 16:34:10 +00:00
Jeremy
745d3afab5 Merge pull request #731 from Wikid82/renovate/feature/beta-release-non-major-updates
fix(deps): update dependency lucide-react to ^0.575.0 (feature/beta-release)
2026-02-19 11:33:07 -05:00
renovate[bot]
9a4b4632c0 fix(deps): update dependency lucide-react to ^0.575.0 2026-02-19 16:12:32 +00:00
Jeremy
28e32d5aee Merge pull request #730 from Wikid82/development
Propagate changes from development into feature/beta-release
2026-02-19 02:25:44 -05:00
Jeremy
c484e7d6d3 Merge pull request #726 from Wikid82/main
Propagate changes from main into development
2026-02-19 02:09:29 -05:00
Jeremy
508af8eca9 Merge pull request #718 from Wikid82/nightly
Weekly: Promote nightly to main (2026-02-18)
v0.19.0
2026-02-18 21:43:03 -05:00
Jeremy
7845602907 Merge pull request #725 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
fix(deps): update weekly-non-major-updates (feature/beta-release)
2026-02-18 20:26:33 -05:00