akanealw
eec8c28fb3
changed perms
Go Benchmark / Performance Regression Check (push) Has been cancelled
Cerberus Integration / Cerberus Security Stack Integration (push) Has been cancelled
Upload Coverage to Codecov / Backend Codecov Upload (push) Has been cancelled
Upload Coverage to Codecov / Frontend Codecov Upload (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (go) (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Has been cancelled
CrowdSec Integration / CrowdSec Bouncer Integration (push) Has been cancelled
Docker Build, Publish & Test / build-and-push (push) Has been cancelled
Quality Checks / Auth Route Protection Contract (push) Has been cancelled
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Has been cancelled
Quality Checks / Backend (Go) (push) Has been cancelled
Quality Checks / Frontend (React) (push) Has been cancelled
Rate Limit integration / Rate Limiting Integration (push) Has been cancelled
Security Scan (PR) / Trivy Binary Scan (push) Has been cancelled
Supply Chain Verification (PR) / Verify Supply Chain (push) Has been cancelled
WAF integration / Coraza WAF Integration (push) Has been cancelled
Docker Build, Publish & Test / Security Scan PR Image (push) Has been cancelled
Repo Health Check / Repo health (push) Has been cancelled
History Rewrite Dry-Run / Dry-run preview for history rewrite (push) Has been cancelled
Prune Renovate Branches / prune (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Nightly Build & Package / sync-development-to-nightly (push) Has been cancelled
Nightly Build & Package / Trigger Nightly Validation Workflows (push) Has been cancelled
Nightly Build & Package / build-and-push-nightly (push) Has been cancelled
Nightly Build & Package / test-nightly-image (push) Has been cancelled
Nightly Build & Package / verify-nightly-supply-chain (push) Has been cancelled
Update GeoLite2 Checksum / update-checksum (push) Has been cancelled
Container Registry Prune / prune-ghcr (push) Has been cancelled
Container Registry Prune / prune-dockerhub (push) Has been cancelled
Container Registry Prune / summarize (push) Has been cancelled
Supply Chain Verification / Verify SBOM (push) Has been cancelled
Supply Chain Verification / Verify Release Artifacts (push) Has been cancelled
Supply Chain Verification / Verify Docker Image Supply Chain (push) Has been cancelled
Monitor Caddy Major Release / check-caddy-major (push) Has been cancelled
Weekly Nightly to Main Promotion / Verify Nightly Branch Health (push) Has been cancelled
Weekly Nightly to Main Promotion / Create Promotion PR (push) Has been cancelled
Weekly Nightly to Main Promotion / Trigger Missing Required Checks (push) Has been cancelled
Weekly Nightly to Main Promotion / Notify on Failure (push) Has been cancelled
Weekly Nightly to Main Promotion / Workflow Summary (push) Has been cancelled
Weekly Security Rebuild / Security Rebuild & Scan (push) Has been cancelled
2026-04-22 18:19:14 +00:00
0859ab31ab
fix(deps): update modernc.org/sqlite to version 1.49.1 for improved functionality
2026-04-18 01:36:58 +00:00
557b33dc73
fix: update docker/go-connections dependency to v0.7.0
2026-04-16 13:34:36 +00:00
813985a903
fix(dependencies): update mongo-driver to v2.5.1
2026-04-15 11:38:35 +00:00
e49ea7061a
fix: add go-pkcs12 v0.7.1 for PKCS#12 support
2026-04-13 04:01:31 +00:00
4b925418f2
feat: Add certificate validation service with parsing and metadata extraction
...
- Implemented certificate parsing for PEM, DER, and PFX formats.
- Added functions to validate key matches and certificate chains.
- Introduced metadata extraction for certificates including common name, domains, and issuer organization.
- Created unit tests for all new functionalities to ensure reliability and correctness.
2026-04-11 07:17:45 +00:00
a5724aecf9
fix: update indirect dependencies for golang.org/x/arch, modernc.org/libc, and modernc.org/sqlite to latest versions
2026-04-10 19:22:04 +00:00
ed9d6fe5d8
fix(deps): update non-major-updates
2026-04-10 15:11:47 +00:00
64465e1cd9
fix(deps): update non-major-updates
2026-04-09 17:27:46 +00:00
580e20d573
fix: resolve 5 HIGH-severity CVEs blocking nightly container image scan
...
Patch vulnerable transitive dependencies across all three compiled
binaries in the Docker image (backend, Caddy, CrowdSec):
- go-jose/v3 and v4: JOSE/JWT validation bypass (CVE-2026-34986)
- otel/sdk: resource leak in OpenTelemetry SDK (CVE-2026-39883)
- pgproto3/v2: buffer overflow via pgx/v4 bump (CVE-2026-32286)
- AWS SDK v2: event stream injection in CrowdSec deps (GHSA-xmrv-pmrh-hhx2)
- OTel HTTP exporters: request smuggling (CVE-2026-39882)
- gRPC: bumped to v1.80.0 for transitive go-jose/v4 resolution
All Dockerfile patches include Renovate annotations for automated
future tracking. Renovate config extended to cover Go version and
GitHub Action refs in skill example workflows, preventing version
drift in non-CI files. SECURITY.md updated with pre-existing Alpine
base image CVE (no upstream fix available).
Nightly Go stdlib CVEs (1.26.1) self-heal on next development sync;
example workflow pinned to 1.26.2 for correctness.
2026-04-09 17:24:25 +00:00
efd70cd651
fix(deps): update golang.org/x/text to v0.36.0 and other dependencies
2026-04-09 14:01:05 +00:00
73565e0e0d
fix(deps): update non-major-updates
2026-04-09 09:20:57 +00:00
ef90d1c0d7
fix(deps): update non-major-updates
2026-04-06 21:48:29 +00:00
e06a8cb676
fix: update go-sqlite3 and other dependencies for compatibility and improvements
2026-04-03 22:57:25 +00:00
543388b5a4
fix(deps): update non-major-updates
2026-03-31 01:08:59 +00:00
d90dc5af98
fix(deps): update go-toml to v2.3.0 for improved compatibility
2026-03-24 20:10:02 +00:00
7b34e2ecea
fix: update google.golang.org/grpc to version 1.79.3 for improved compatibility
2026-03-19 13:10:18 +00:00
fcc9309f2e
chore(deps): update indirect dependencies for improved compatibility and performance
2026-03-18 17:12:01 +00:00
0df1126aa9
fix(deps): update modernc.org/sqlite to version 1.47.0 for improved functionality
2026-03-17 14:31:42 +00:00
bb1e59ea93
fix(deps): update bytedance/gopkg to version 0.1.4 for improved functionality
2026-03-17 12:38:43 +00:00
b5bf505ab9
fix: update go-sqlite3 to version 1.14.37 and modernc.org/sqlite to version 1.46.2 for improved stability
2026-03-16 18:20:35 +00:00
593694a4b4
fix(deps): update goccy/go-json to version 0.10.6
2026-03-12 17:49:05 +00:00
7932188dae
fix(deps): update non-major-updates
2026-03-12 09:30:08 +00:00
065ac87815
fix(deps): update non-major-updates
2026-03-11 14:53:49 +00:00
3414c7c941
fix: update modernc.org/libc to v1.70.0 and golang.org/x/mod to v0.33.0
2026-03-09 13:10:46 +00:00
3201830405
chore: update dependencies for golang.org/x/time, golang.org/x/arch, and golang.org/x/sys
2026-03-08 15:52:44 +00:00
81497beb4b
fix: update opentelemetry dependencies to latest versions for improved performance
2026-03-07 02:06:15 +00:00
b527470e75
fix: update opentelemetry dependencies to v1.42.0 for improved functionality and performance
2026-03-06 19:58:19 +00:00
834907cb5d
chore(deps): update non-major-updates
2026-03-06 02:02:10 +00:00
27c252600a
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
c32cce2a88
chore: git cache cleanup
2026-03-04 18:34:39 +00:00
a570a3327f
fix: update opentelemetry http instrumentation to v0.66.0
2026-03-03 09:16:34 +00:00
18d0c235fa
fix(deps): update OpenTelemetry dependencies to v1.41.0
2026-03-02 20:31:45 +00:00
871adca270
fix(deps): update modernc.org/libc to v1.69.0 for improved compatibility
2026-03-01 14:08:13 +00:00
b78798b877
chore: Update dependencies in go.sum
...
- Bump github.com/bytedance/sonic from v1.14.1 to v1.15.0
- Bump github.com/gabriel-vasile/mimetype from v1.4.12 to v1.4.13
- Bump github.com/glebarez/go-sqlite from v1.21.2 to v1.22.0
- Bump github.com/gin-gonic/gin from v1.11.0 to v1.12.0
- Bump github.com/google/pprof to v0.0.0-20250317173921-a4b03ec1a45e
- Bump go.opentelemetry.io/auto/sdk to v1.2.1
- Bump go.opentelemetry.io/otel to v1.40.0
- Update various other dependencies to their latest versions
2026-03-01 01:34:37 +00:00
25443d3319
fix(deps): update module github.com/gin-gonic/gin to v1.12.0
2026-02-28 13:42:23 +00:00
ccdc719501
fix(deps): update non-major-updates
2026-02-26 03:31:33 +00:00
c68804d37e
feat: migrate from shoutrr to notfy
2026-02-19 22:50:05 +00:00
23a394f23f
fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.34
2026-02-14 00:08:24 +00:00
496d22fb63
fix: update go.mod to include go-sqlite3 as a direct dependency
2026-02-13 19:59:45 +00:00
27c9a81c0a
chore(deps): require Go 1.26 across workspace
...
Bump workspace and backend module to Go 1.26 to satisfy module toolchain requirements and allow dependency tooling (Renovate) to run. Regenerated backend module checksums.
2026-02-11 20:11:33 +00:00
b02fb15ce9
fix(deps): update weekly-non-major-updates
2026-02-11 19:49:42 +00:00
9ef8a1ce21
fix: add system permissions handler for diagnostics and repair
...
- Implemented SystemPermissionsHandler to check and repair file permissions.
- Added endpoints for retrieving and repairing permissions.
- Introduced utility functions for permission checks and error mapping.
- Created tests for the new handler and utility functions.
- Updated routes to include the new permissions endpoints.
- Enhanced configuration to support new logging and plugin directories.
2026-02-11 05:33:19 +00:00
257d42e922
chore(deps): update weekly-non-major-updates
2026-02-10 21:49:41 +00:00
f6b3cc3cef
chore(deps): update github.com/quic-go/quic-go to v0.59.0
...
- Updated quic-go from v0.57.1 to v0.59.0 for QUIC protocol improvements
- Ran go mod tidy to ensure consistency
- Dependencies verified for integrity
2026-02-10 00:05:23 +00:00
3169b05156
fix: skip incomplete system log viewer tests
...
- Marked 12 tests as skip pending feature implementation
- Features tracked in GitHub issue #686 (system log viewer feature completion)
- Tests cover sorting by timestamp/level/method/URI/status, pagination controls, filtering by text/level, download functionality
- Unblocks Phase 2 at 91.7% pass rate to proceed to Phase 3 security enforcement validation
- TODO comments in code reference GitHub #686 for feature completion tracking
- Tests skipped: Pagination (3), Search/Filter (2), Download (2), Sorting (1), Log Display (4)
2026-02-09 21:55:55 +00:00
74a51ee151
chore: clean git cache
2026-02-09 21:42:54 +00:00
5efaa98873
fix(deps): update weekly-non-major-updates
2026-02-09 20:24:57 +00:00
7bf2059a94
fix: update google.golang.org/protobuf to v1.36.11 in go.mod and go.sum
2026-02-08 09:23:54 +00:00
56aabca37a
fix: update go.mod to include golang.org/x/time and clean up indirect dependencies
2026-02-07 06:33:53 +00:00
akanealw
GitHub Actions
renovate[bot]