Commit Graph

2880 Commits

Author SHA1 Message Date
GitHub Actions
fc7d43390f fix: Remove unnecessary entries from .dockerignore for cleaner build context 2026-02-18 16:28:57 +00:00
GitHub Actions
1e6805fa83 fix: Update .gitignore to specify CodeQL SARIF result files and clean up ignored files 2026-02-18 16:28:49 +00:00
Jeremy
5fa91b4488 Merge pull request #722 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
fix(deps): update weekly-non-major-updates (feature/beta-release)
2026-02-18 11:26:43 -05:00
renovate[bot]
42155c3b95 fix(deps): update weekly-non-major-updates 2026-02-18 16:13:03 +00:00
GitHub Actions
849d95ca84 fix: Enhance Dockerfile and scripts for improved dependency management and coverage reporting 2026-02-18 14:31:14 +00:00
GitHub Actions
0369eb1c12 fix: Enhance logging sanitization across various handlers and services
- Removed unnecessary fields from logs where applicable to reduce clutter and focus on essential information.
- Ensured consistent logging practices to enhance security and prevent log injection vulnerabilities.
2026-02-18 13:06:26 +00:00
GitHub Actions
d8f0a9be86 fix: update regex patterns for example.com in various test files 2026-02-18 13:00:41 +00:00
GitHub Actions
a9f8e0a79a fix: remove minimum release age for auto-merging non-major updates in feature branches 2026-02-18 09:34:18 +00:00
GitHub Actions
2e5c13b90e fix: update CodeQL JavaScript scan script to set correct source root for database creation 2026-02-18 08:36:30 +00:00
GitHub Actions
d66101a349 chore: update CodeQL workflow to verify Go toolchain version and improve SARIF file handling 2026-02-18 08:28:01 +00:00
GitHub Actions
26a19e58a6 choret: add manual security scans for Semgrep and Gitleaks in pre-commit hooks 2026-02-18 08:26:13 +00:00
GitHub Actions
fd95611a25 chore: update CodeQL workflow to include feature and fix branches and enhance JS scan script 2026-02-18 08:13:55 +00:00
GitHub Actions
24509dc84f fix: add allowlist normalization and validation in permissions repair process 2026-02-18 06:31:19 +00:00
Jeremy
a7e081da0b Merge pull request #719 from Wikid82/renovate/feature/beta-release-pin-dependencies
chore(deps): pin peter-evans/find-comment action to b30e6a3 (feature/beta-release)
2026-02-18 01:05:18 -05:00
renovate[bot]
f87a468748 chore(deps): pin peter-evans/find-comment action to b30e6a3 2026-02-18 06:05:04 +00:00
GitHub Actions
0a8106aed4 chore: update nightly build workflow to use CHARON_CI_TRIGGER_TOKEN and remove quality-checks workflow dispatch trigger 2026-02-18 04:12:31 +00:00
GitHub Actions
cbe2a39f0b chore: add workflow_dispatch trigger to quality-checks and update reference in weekly-nightly-promotion 2026-02-18 03:19:37 +00:00
Jeremy
d3ad772c83 Merge branch 'development' into feature/beta-release 2026-02-17 21:54:33 -05:00
GitHub Actions
a5c4a3e36c chore: add quality-checks workflow to nightly build process 2026-02-18 02:53:41 +00:00
Jeremy
be7ceb2457 Merge pull request #714 from Wikid82/feature/beta-release
Nightly > Main CI Fix
2026-02-17 21:22:57 -05:00
Jeremy
6ca420c82c Merge branch 'development' into feature/beta-release 2026-02-17 21:12:31 -05:00
GitHub Actions
bb79550c33 chore: rename supply chain workflow files for consistency and clarity 2026-02-18 02:11:24 +00:00
GitHub Actions
88553a6fe3 chore: update create-pull-request action to v8.1.0 for GeoLite2 checksum update 2026-02-18 02:00:19 +00:00
GitHub Actions
37a68d8768 chore: update find-comment action to v4.0.0 for improved functionality 2026-02-18 02:00:19 +00:00
Jeremy
6b686306aa Merge pull request #713 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
chore(deps): update github/codeql-action digest to 9e907b5 (feature/beta-release)
2026-02-17 20:57:57 -05:00
renovate[bot]
abd9dc2f70 chore(deps): update github/codeql-action digest to 9e907b5 2026-02-18 01:51:24 +00:00
Jeremy
3c757eccf5 Merge pull request #712 from Wikid82/feature/beta-release
Nightly > Main CI Remediation
2026-02-17 20:19:13 -05:00
GitHub Actions
a421a348ca chore: remove quality-checks workflow from nightly build and weekly promotion jobs 2026-02-18 00:55:53 +00:00
Jeremy
b60f305928 Merge branch 'development' into feature/beta-release 2026-02-17 19:51:32 -05:00
GitHub Actions
97dab1ccf4 ---
fix: enforce fresh nightly promotion quality gates

Ensure promotion decisions are based on current nightly HEAD evidence instead of stale workflow history.
Add native CodeQL branch triggers so security analysis runs on nightly/main promotion paths.
Convert nightly and weekly automation to dispatch required checks only when missing for the exact HEAD commit, preventing duplicate/racing runs while guaranteeing check presence.
Harden weekly health verification with retry polling so transient scheduling delays do not produce false negatives.
This reduces false blocking and ensures nightly-to-main promotion uses current, deterministic CI state.
Refs: #712
2026-02-18 00:51:15 +00:00
Jeremy
372e11bae9 Merge pull request #711 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
chore(deps): update github/codeql-action digest to 015d8c7 (feature/beta-release)
2026-02-17 19:27:09 -05:00
renovate[bot]
9772f1dbe4 chore(deps): update github/codeql-action digest to 015d8c7 2026-02-17 23:56:23 +00:00
Jeremy
d3b19f936d Merge pull request #708 from Wikid82/feature/beta-release
Renovator Update
2026-02-17 18:51:35 -05:00
GitHub Actions
0520ce4dc3 chore: enhance test stability by managing SecurityService lifecycle and updating database migrations 2026-02-17 22:57:25 +00:00
GitHub Actions
f59244d00e chore: add push event detection to workflow trust evaluation 2026-02-17 21:18:54 +00:00
GitHub Actions
ff015cdeff chore: enhance planning and management instructions with PR slicing strategies and multi-PR protocols 2026-02-17 21:04:26 +00:00
GitHub Actions
837e75af10 chore: remove deprecated @types/tar dependency from package.json and package-lock.json 2026-02-17 20:59:02 +00:00
GitHub Actions
538f56bcb9 chore: update minimum release age for dependency updates from 30 days to 14 days 2026-02-17 20:58:43 +00:00
GitHub Actions
7ffd19fe50 chore: update workflows to trigger on push events instead of pull requests 2026-02-17 20:38:51 +00:00
GitHub Actions
72ccd5b4a5 chore: clean up package-lock.json by removing redundant minipass entries 2026-02-17 20:16:34 +00:00
Jeremy
442c2ef1ba Merge pull request #709 from Wikid82/renovate/feature/beta-release-tar-7.x
chore(deps): update dependency @types/tar to v7 (feature/beta-release)
2026-02-17 15:13:09 -05:00
renovate[bot]
7306250243 chore(deps): update dependency @types/tar to v7 2026-02-17 20:12:09 +00:00
Jeremy
50afd9ab21 Merge pull request #707 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
fix(deps): update weekly-non-major-updates (feature/beta-release)
2026-02-17 15:12:00 -05:00
Jeremy
5a2f5eba22 Merge branch 'development' into feature/beta-release 2026-02-17 15:11:39 -05:00
Jeremy
c2bf9d803c Merge pull request #666 from Wikid82/feature/beta-release
Security and Testing infrastructure Remediation
2026-02-17 15:09:07 -05:00
GitHub Actions
84a225da0f chore: Update Renovate configuration for dependency approval and Docker image tracking 2026-02-17 20:08:18 +00:00
renovate[bot]
603b6ef1f8 fix(deps): update weekly-non-major-updates 2026-02-17 19:46:58 +00:00
GitHub Actions
ff78b3c330 chore: Add gopls server configuration to MCP settings 2026-02-17 19:44:22 +00:00
GitHub Actions
2cad49de85 chore: Add tests for backup service, crowdsec startup, log service, and security headers
- Implement tests for BackupService to handle database extraction from backup archives with SHM and WAL entries.
- Add tests for BackupService to validate behavior when creating backups for non-SQLite databases and handling oversized database entries.
- Introduce tests for CrowdSec startup to ensure proper error handling during configuration creation.
- Enhance LogService tests to cover scenarios for skipping dot and empty directories and handling read directory errors.
- Add tests for SecurityHeadersService to ensure proper error handling during preset creation and updates.
- Update ProxyHostForm tests to include HSTS subdomains toggle and validation for port input handling.
- Enhance DNSProviders tests to validate manual challenge completion and error handling when no providers are available.
- Extend UsersPage tests to ensure fallback mechanisms for clipboard operations when the clipboard API fails.
2026-02-17 19:13:28 +00:00
GitHub Actions
9713908887 fix: format JSON threshold and warnings for consistency in test output 2026-02-17 15:14:17 +00:00