-
265b0398e4
Update renovate/renovate Docker tag to v44.39.2
main
renovate-bot
2026-08-23 04:18:02 +00:00
-
ba4503b4d1
Merge branch 'main' into auto-release-only-when-affected
v0.1.0
lilleman
2026-08-22 22:16:22 +02:00
-
-
4849a7a3c5
Follow mailpit to v1.31.0 in the published quick start
lilleman
2026-08-22 21:58:14 +02:00
-
5b73ec6fb7
Merge branch 'main' into renovate/renovate-renovate-44.x
lilleman
2026-08-22 21:54:19 +02:00
-
-
8932392ab8
Merge branch 'main' into auto-release-only-when-affected
lilleman
2026-08-22 21:53:53 +02:00
-
-
-
-
42af07c255
Use one Docker Hub credential for images and the overview
lilleman
2026-08-22 14:27:31 +02:00
-
734cdf6892
Name the scope the overview actually needs
lilleman
2026-08-22 14:21:14 +02:00
-
716e0f50a7
Give each version mismatch its own remedy, and stop publishing a moving bare-major tag
lilleman
2026-08-22 12:27:43 +02:00
-
2d62553a10
Refuse a 0.x minor mismatch, and republish the overview from the named release's tree
lilleman
2026-08-22 12:13:41 +02:00
-
d8b7a2d64a
Keep the proven always() guard on the overview job
lilleman
2026-08-22 12:03:18 +02:00
-
d62c7faabd
Scope the sidecar trailer by package so a mixed branch cannot lose it
lilleman
2026-08-22 12:01:35 +02:00
-
6c07856159
Accept the README-only gate skip, and say why it is safe
lilleman
2026-08-22 11:58:28 +02:00
-
41084441ff
Manage the published quick start's pins, and fail closed on every release-tooling edge
lilleman
2026-08-22 11:45:46 +02:00
-
08d4f6271d
Gate the overview's manual trigger on the same contract check as a tag
lilleman
2026-08-22 11:27:35 +02:00
-
5820264885
Trim the prose to what is true now
lilleman
2026-08-22 11:24:16 +02:00
-
b708aab981
Keep the release at v0.1.0 — nothing consumed the old contract
lilleman
2026-08-22 11:21:42 +02:00
-
86c9e8e4ca
Update renovate/renovate Docker tag to v44.39.1
renovate-bot
2026-08-22 04:18:35 +00:00
-
33c42b2c65
Update axllent/mailpit Docker tag to v1.31.0
renovate-bot
2026-08-22 04:18:30 +00:00
-
-
452beeb0e1
Update renovate/renovate Docker tag to v44.37.1
renovate-bot
2026-08-21 04:18:10 +00:00
-
99e77ebabf
Release this as v0.2.0, and give the Hub overview its own job, token and template
lilleman
2026-08-20 23:32:10 +02:00
-
2148822dad
Make the plugin contract version the release version, and publish the Docker Hub overview from CI
lilleman
2026-08-20 23:16:11 +02:00
-
7f839afb32
Release nothing when no Renovate commit reached the app
lilleman
2026-08-20 23:02:21 +02:00
-
-
1f61235e88
Scope Release-Bump to the surfaces that ship, and drop the inert package.json versions
lilleman
2026-08-20 22:43:36 +02:00
-
24007b15f3
Rewrap the auto-release paragraph
lilleman
2026-08-20 22:04:23 +02:00
-
3eceee0cf1
Lift the pre-release freeze — releases resume and the plugin contract goes live
lilleman
2026-08-20 22:02:29 +02:00
-
9fa0f60f79
Merge branch 'main' into renovate/renovate-renovate-44.x
lilleman
2026-08-20 21:52:27 +02:00
-
-
4f791d8f11
Merge remote-tracking branch 'origin/main' into plugin-storage
lilleman
2026-08-20 21:47:22 +02:00
-
-
94e9e8bc60
Update dependency lucide-static to v1.33.0
renovate-bot
2026-08-20 04:17:56 +00:00
-
03d14b1a20
Merge remote-tracking branch 'origin/main' into plugin-storage
lilleman
2026-08-19 20:34:30 +02:00
-
-
3552b85d63
Merge branch 'main' into renovate/renovate-renovate-44.x
lilleman
2026-08-19 20:29:09 +02:00
-
-
-
-
dde6fccb35
Update renovate/renovate Docker tag to v44.33.2
renovate-bot
2026-08-19 04:18:20 +00:00
-
19b3fbc802
Update dependency lucide-static to v1.32.0
renovate-bot
2026-08-19 04:18:11 +00:00
-
-
47541ae97b
Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery
lilleman
2026-08-19 01:03:40 +02:00
-
c5c9cce2b6
Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot
lilleman
2026-08-19 00:44:49 +02:00
-
6db14a2205
Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery
lilleman
2026-08-19 00:20:17 +02:00
-
ae8f105360
Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL
lilleman
2026-08-19 00:08:35 +02:00
-
bba048e38f
Refuse a throwaway plugin storage secret in bootstrap, before any role is created
lilleman
2026-08-18 23:24:34 +02:00
-
bf638dfb19
Give a plugin a Postgres database of its own
lilleman
2026-08-18 23:12:13 +02:00
-
-
5cc6c3d93e
Todo: note the code-field hint landed, the paste fix did not
lilleman
2026-08-18 22:07:21 +02:00
-
04af61a5e5
Hint the code field's digits-only rule, so the browser's refusal isn't bare
lilleman
2026-08-18 22:07:12 +02:00
-
a64a60644d
Todo: record the flow-POST proxy findings for the verification-code fix
lilleman
2026-08-18 22:00:31 +02:00
-
950eb5a911
Todo: record the manifest-over-.env decision for plugin config
lilleman
2026-08-18 21:55:35 +02:00
-
091011cfe5
Let Renovate reach the example plugins' manifests
lilleman
2026-08-18 21:55:35 +02:00
-
d55898eb8c
Refuse a stray package.json or node_modules in config/ by name
lilleman
2026-08-18 21:55:22 +02:00
-
f992cb6b2c
Merge branch 'main' into plugin-dependencies
lilleman
2026-08-18 18:33:24 +02:00
-
-
7d1f7750d3
Refuse a node_modules at the plugins/ root, where it outranks the host's
lilleman
2026-08-18 08:14:21 +02:00
-
3f9787df48
Follow symlinked plugin folders, and keep a plugin .npmrc out of the image
lilleman
2026-08-18 07:49:51 +02:00
-
a261570796
Update renovate/renovate Docker tag to v44.32.6
renovate-bot
2026-08-18 04:18:04 +00:00
-
77343e859a
Fail loud on a null package.json and a stray plugins/package.json
lilleman
2026-08-17 22:50:29 +02:00
-
616040fda6
Refuse a shadowing barrel copy, and record the packaging contract
lilleman
2026-08-17 22:34:56 +02:00
-
fee4fe632b
Let a plugin carry its own package.json and npm dependencies
lilleman
2026-08-17 22:23:53 +02:00
-
-
1ba6dbdc51
Merge branch 'main' into prose-diet
lilleman
2026-08-17 21:05:29 +02:00
-
-
09ab2fcb85
Update renovate/renovate Docker tag to v44.31.0
renovate-bot
2026-08-17 04:17:51 +00:00
-
a977ecf1c7
Update renovate/renovate Docker tag to v44.30.3
renovate-bot
2026-08-15 04:18:17 +00:00
-
04a508c169
Update postgres Docker tag to v18.6
renovate-bot
2026-08-14 04:18:05 +00:00
-
d74989c4e0
Update renovate/renovate Docker tag to v44.27.0
renovate-bot
2026-08-13 04:18:02 +00:00
-
43d7062d9e
Update renovate/renovate Docker tag to v44.24.3
renovate-bot
2026-08-12 04:18:15 +00:00
-
d5ee0353d4
Update renovate/renovate Docker tag to v44.23.0
renovate-bot
2026-08-11 04:17:48 +00:00
-
137c35478d
Update dependency lucide-static to v1.31.0
renovate-bot
2026-08-10 04:17:44 +00:00
-
352f2f2794
Update axllent/mailpit Docker tag to v1.30.7
renovate-bot
2026-08-09 04:18:09 +00:00
-
3b6f2c1ed3
Update renovate/renovate Docker tag to v44.14.10
renovate-bot
2026-08-08 04:18:02 +00:00
-
f99a029bc5
Update renovate/renovate Docker tag to v44.14.3
renovate-bot
2026-08-07 04:18:27 +00:00
-
1daa2b1777
Update renovate/renovate Docker tag to v44.13.3
renovate-bot
2026-08-06 04:18:26 +00:00
-
8a5d2dfd6c
Make the two persona references self-contained now that the section is gone
lilleman
2026-08-05 23:42:58 +02:00
-
a005acb93d
Cut non-essential prose from docs and comments, and require the same of every future change
lilleman
2026-08-05 23:41:12 +02:00
-
-
f5240ef7f6
Record macOS as a supported dev host and the commands still unverified there
lilleman
2026-08-05 22:55:48 +02:00
-
78f5f72151
Correct the artifacts upgrade runbook and the bootstrap exception's stated reason
lilleman
2026-08-05 22:46:05 +02:00
-
1cf34a0d45
Harden the artifact-ownership guards and document the root-owned upgrade trap
lilleman
2026-08-05 22:40:36 +02:00
-
073ec294e9
Run the E2E runner as the invoking user so its artifacts aren't root-owned
lilleman
2026-08-05 22:25:17 +02:00
-
e8b91ecd09
Compress AGENTS.md and add a standing rule to trim it on every edit
lilleman
2026-08-05 21:52:56 +02:00
-
ab5c24deb7
Cut the node_modules prose to one home each; drop a stray tracked file
lilleman
2026-08-05 19:52:09 +02:00
-
3d3313c0ee
Document the shadowing risk and the leftover dir; close two holes in the mount guard
lilleman
2026-08-05 19:17:07 +02:00
-
bcf4d7fb1f
Install deps above WORKDIR so no root-owned node_modules lands in the checkout
lilleman
2026-08-05 18:18:49 +02:00
-
2852722873
Record the stale-copy trap as accepted until the apiVersion freeze lifts
lilleman
2026-08-05 18:00:38 +02:00
-
45b16824f1
Point a failed discovery at the stale plugins/ copy, and document upgrading
lilleman
2026-08-05 17:52:34 +02:00
-
f76cd2a267
Todo updates
lilleman
2026-08-05 17:48:55 +02:00
-
38ebe40398
Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning
lilleman
2026-08-05 17:36:04 +02:00
-
1f0956dd58
Keep the group-delete confirm in user terms, not tuple mechanics
lilleman
2026-08-05 15:30:54 +02:00
-
edcd9fefc8
Deleting a group revokes the permissions it granted
lilleman
2026-08-05 15:26:25 +02:00
-
1787754781
Extend the read-only treatment to OAuth2 clients and write-intent GETs
lilleman
2026-08-05 15:08:31 +02:00
-
765f349007
Model the read/write split in the UI: read-only views, self-revoke and inherited-grant guards
lilleman
2026-08-05 14:47:51 +02:00
-
29d654c012
Permissions are a fixed list from plugin code; grant them on Users and Groups
lilleman
2026-08-05 14:29:15 +02:00
-
fb4382be9d
Enforce the permission-name rule at discovery, for every plugin
lilleman
2026-08-05 13:00:23 +02:00
-
90cbc47607
Seed the demo admin from the mounted plugins, not the image's empty copy
lilleman
2026-08-05 12:55:12 +02:00
-
27fee5f8a3
Permission names are <resource>:<action>, replacing the catch-all admin permission
lilleman
2026-08-05 12:45:06 +02:00
-
9412b90946
More todos
lilleman
2026-08-05 14:18:09 +02:00
-
225569b08a
More todos
lilleman
2026-08-05 12:08:09 +02:00
-
32154fbbc0
Record the unpinned Playwright worker pool as an open decision
lilleman
2026-08-05 11:21:57 +02:00
-
690d67728b
Watch what a beforeAll logs, and record where each message came from
lilleman
2026-08-05 11:15:37 +02:00
-
e808f87fbd
Fail an E2E test on anything the browser logs, in all three engines
lilleman
2026-08-05 11:00:25 +02:00
-
e5bdc15262
Prune deleted tags on the GitHub mirror so it stops advertising dropped versions
lilleman
2026-08-05 10:42:39 +02:00
-
2fb5e695e1
Record the docs-skip and no-release decisions, and blind the guard to comments
lilleman
2026-08-05 10:34:46 +02:00
-
3ebd1fa507
Gate the auto-release tag job behind an AUTO_RELEASE variable
lilleman
2026-08-05 10:15:09 +02:00
-
81043edfc6
Count both paths of a rename in the docs-only CI skip
lilleman
2026-08-05 10:15:09 +02:00
-
6df90f3746
Merge branch 'main' into todo-yo
lilleman
2026-08-05 08:39:26 +02:00
-
-
b1b01f8bdc
More todos
lilleman
2026-08-05 08:35:08 +02:00
-
c54f5e2c51
New todos
lilleman
2026-08-05 08:33:49 +02:00
-
a8217a4ff8
Merge branch 'main' into renovate/actions-checkout-7.x
lilleman
2026-08-05 08:31:53 +02:00
-
-
-
-
ea1596eabd
Merge branch 'main' into renovate/actions-checkout-7.x
lilleman
2026-08-05 08:28:47 +02:00
-
-
1d4c7c88c4
Merge branch 'main' into menu-outside-click
lilleman
2026-08-05 08:28:33 +02:00
-
-
-