295 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	b580f7d06e	Rename the plugin-API permission gate to role	2026-08-03 17:41:40 +02:00
lilleman	f0662cbd0f	Reflow the security-model prose to the file's wrap width	2026-08-03 17:41:40 +02:00
lilleman	4b4ac178ab	Record the open CSRF token-binding decision as a todo item	2026-08-03 17:41:40 +02:00
lilleman	73a78d4404	Add the seeded admin login to the production secrets checklist	2026-08-03 17:41:40 +02:00
lilleman	5a5803b265	Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test	2026-08-03 17:41:40 +02:00
lilleman	a2204782fa	Review fixes: re-mint path, real session lifetime, full secret checklist	2026-08-03 17:41:40 +02:00
lilleman	eb5aafdfaa	Document the auth security model in README	2026-08-03 17:41:40 +02:00
lilleman	5c3af63847	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-03 12:10:24 +02:00
renovate-bot	21cd878447	Update renovate/renovate Docker tag to v44.7.2 ... Release-Bump: minor	2026-08-03 04:17:57 +00:00
renovate-bot	1abaa22a97	Update actions/checkout action to v4.4.0 ... Release-Bump: minor	2026-08-03 04:17:55 +00:00
lilleman	0919adf4ef	Review fixes: plain depends_on merge, positive secret assertion	2026-08-02 16:10:35 +02:00
lilleman	f5f4455b81	Browser E2E for the admin OAuth2-clients screen	2026-08-02 16:03:30 +02:00
lilleman	3f30f889c3	README: note GITHUB_ secret-name prefix is rejected too	2026-08-02 15:48:04 +02:00
lilleman	ae1479f55b	Renovate: set GITHUB_COM_TOKEN for authenticated github.com lookups	2026-08-02 15:43:38 +02:00
lilleman	bb6021adf7	Update lockfile for typescript 7.0.2	2026-08-02 15:29:13 +02:00
renovate-bot	c4e6212189	chore(deps): update dependency typescript to v7 ... Release-Bump: major	2026-08-02 15:29:03 +02:00
lilleman	6f6aafad39	Import ejs as default export — the v6 ESM build exports only default	2026-08-02 15:25:51 +02:00
lilleman	4aada6eed9	Update lockfile for ejs 6.0.1	2026-08-02 15:25:51 +02:00
renovate-bot	a574effb37	fix(deps): update dependency ejs to v6 ... Release-Bump: major	2026-08-02 15:25:51 +02:00
lilleman	c259497627	Update lockfile for @types/node 24.13.3	2026-08-02 15:22:25 +02:00
renovate-bot	8e74532a77	chore(deps): update node.js to v24.18.1 ... Release-Bump: minor	2026-08-02 15:22:25 +02:00
lilleman	62f95afe63	Merge branch 'main' into remove-stability-auto-review	2026-08-02 15:19:13 +02:00
lilleman	ffeec70f8f	Update lockfile and regenerate icons.ejs for lucide-static 1.28.0	2026-08-02 15:15:12 +02:00
renovate-bot	62d4c8b7cd	fix(deps): update dependency lucide-static to v1.28.0 ... Release-Bump: minor	2026-08-02 15:15:12 +02:00
lilleman	12cc2d54c2	Clarify todo.md reference and record manual review policy	2026-08-02 15:12:22 +02:00
lilleman	bb6adc40af	Remove stability reviewer auto-run from AGENTS.md	2026-08-02 15:06:48 +02:00
lilleman	c64156a9d5	Update e2e-tests lockfile for @playwright/test 1.62.1	2026-08-02 15:06:47 +02:00
renovate-bot	de2ad42f5a	chore(deps): update playwright to v1.62.1 ... Release-Bump: minor	2026-08-02 15:06:47 +02:00
lilleman	9213e5a0de	Make the CI web-image rebuild its own step; note the shared-workspace image-tag race	2026-08-02 15:06:21 +02:00
lilleman	45054db5e6	Build the web image in ci.sh so typecheck and tests run the branch's own deps	2026-08-02 15:06:21 +02:00
lilleman	23bafd247d	Fix typos in the AGENTS.md comment rules	2026-08-02 15:00:56 +02:00
lilleman	7c66599f35	Todo and agents updates	2026-08-02 14:11:33 +02:00
lilleman	6db0f57bf4	Trim README and workflow prose that restates the code	2026-08-02 13:55:50 +02:00
lilleman	175717f04d	Move the docs-only decision into ci.sh so it runs locally	2026-08-02 13:38:32 +02:00
lilleman	6c850b8923	Skip the test gate on docs-only branches	2026-08-02 13:31:07 +02:00
renovate-bot	af4a70d904	chore(deps): update renovate/renovate docker tag to v44.6.0 ... Release-Bump: minor	2026-08-02 04:18:00 +00:00
renovate-bot	a0244a32cd	chore(deps): update renovate/renovate docker tag to v44.5.3 ... Release-Bump: minor	2026-08-01 04:18:15 +00:00
renovate-bot	6559f40142	chore(deps): update renovate/renovate docker tag to v44 ... Release-Bump: major	2026-07-31 04:18:12 +00:00
renovate-bot	d3154819f8	chore(deps): update renovate/renovate docker tag to v43.288.0 ... Release-Bump: minor	2026-07-30 04:17:51 +00:00
renovate-bot	1cba6d470c	chore(deps): update axllent/mailpit docker tag to v1.30.6 ... Release-Bump: patch	2026-07-29 04:18:24 +00:00
renovate-bot	194c090bd1	chore(deps): update renovate/renovate docker tag to v43.285.3 ... Release-Bump: minor	2026-07-28 04:17:59 +00:00
renovate-bot	ff5094f7e9	chore(deps): update renovate/renovate docker tag to v43.281.1 ... Release-Bump: minor	2026-07-27 04:18:12 +00:00
renovate-bot	419ee1750b	chore(deps): update renovate/renovate docker tag to v43.280.5 ... Release-Bump: patch	2026-07-26 04:18:07 +00:00
renovate-bot	cedac950be	chore(deps): update renovate/renovate docker tag to v43.280.4 ... Release-Bump: minor	2026-07-25 04:17:42 +00:00
renovate-bot	ff455f1ef2	chore(deps): update axllent/mailpit docker tag to v1.30.5 ... Release-Bump: patch	2026-07-25 01:02:53 +00:00
renovate-bot	5bd26d773d	chore(deps): update renovate/renovate docker tag to v43.270.0 ... Release-Bump: minor	2026-07-19 04:17:22 +00:00
renovate-bot	4f60bad119	chore(deps): update axllent/mailpit docker tag to v1.30.4 ... Release-Bump: patch	2026-07-18 21:13:02 +00:00
renovate-bot	aea568ea1c	chore(deps): update renovate/renovate docker tag to v43.252.1 ... Release-Bump: minor	2026-07-06 04:17:39 +00:00
lilleman	145db5b4cd	CI: auto-release a version tag when Renovate merges a dependency update	2026-07-05 20:49:49 +02:00
renovate-bot	7c39056188	chore(deps): update node.js to v24.18.0	2026-07-05 07:02:10 +00:00