This website requires JavaScript.
19d90c6323
Update renovate/renovate Docker tag to v44.11.7
renovate-bot
2026-08-05 04:17:57 +00:00
9cf6c05325
Name the chrome's language menu and guard anchor positioning in the fallback
lilleman
2026-08-05 02:23:50 +02:00
cfeee10fa8
Wrap each popover menu and give it a caller-named id
lilleman
2026-08-05 01:58:11 +02:00
5d9bdebf59
Close the popup menus on an outside click, via the popover API
lilleman
2026-08-05 01:37:58 +02:00
64d1387df2
Scope the profile-menu assertion to the menu itself
lilleman
2026-08-05 01:08:09 +02:00
3c64621515
Remove the dead Profile link from the sidebar profile menu
lilleman
2026-08-05 01:01:14 +02:00
2b09635ed5
Hold the one-verb rule in AGENTS.md instead of a unit test
lilleman
2026-08-05 00:52:09 +02:00
9a9c63e625
Widen the one-verb guard to inflections and drop the last competing English string
lilleman
2026-08-05 00:43:05 +02:00
34b668d49f
Use one verb per action in the English UI: sign in, sign out, create account
lilleman
2026-08-05 00:34:05 +02:00
46548ae758
Narrow the settings-cog test assertions and record the icon-registry contract
lilleman
2026-08-05 00:20:34 +02:00
8f7ab55267
Remove the Settings cog and its Preferences menu from the sidebar footer
lilleman
2026-08-05 00:08:35 +02:00
7948596105
New todos
lilleman
2026-08-04 23:48:26 +02:00
38f4cffa43
Merge branch 'main' into i18n
lilleman
2026-08-04 19:55:50 +02:00
1dc5892290
Merge branch 'main' into renovate/renovate-renovate-44.x
lilleman
2026-08-04 10:43:13 +02:00
c063b71d19
Merge branch 'main' into i18n
lilleman
2026-08-04 10:43:05 +02:00
89a234b841
Add a todo for guarding the double-clicked submit without client JS
lilleman
2026-08-04 10:40:37 +02:00
e03c1d1a2f
Let an operator mount plugin catalogs; document the end-user personas
lilleman
2026-08-04 10:31:08 +02:00
bd76c981ee
Carry the language through sign-in; warn when switching leaves the page; product-review copy fixes
lilleman
2026-08-04 09:59:00 +02:00
37b88b2fe6
Show the language picker on every page, targeting the nearest page that answers GET
lilleman
2026-08-04 09:37:03 +02:00
bc659d7d49
Update renovate/renovate Docker tag to v44.11.0
renovate-bot
2026-08-04 04:18:10 +00:00
01abb2f99c
Update Node.js to v24.19.0
renovate-bot
2026-08-04 04:17:55 +00:00
7e4c6940c9
Escape the values interpolated into the one markup-carrying message
lilleman
2026-08-04 00:42:54 +02:00
18e1a8d29d
Keep the chrome lazy for error pages, guard the guard-error render, split the recovery link
lilleman
2026-08-04 00:31:19 +02:00
93139ea058
Stability round two: no language links on POST-rendered pages, scoped observers, Vary only where it varies
lilleman
2026-08-04 00:10:31 +02:00
be3bc2bdbb
Stability fixes: plugin-scoped contexts for owned pages, absent-href guard, checked locale mounts
lilleman
2026-08-03 23:51:40 +02:00
2b20497785
Pin the chrome's locale carrying in unit tests; keep one carrier list
lilleman
2026-08-03 23:25:54 +02:00
b3df7084c4
Reserve the locale param, carry it on breadcrumbs, translate the permissions detail view
lilleman
2026-08-03 23:21:38 +02:00
6440c543e5
Architecture review fixes: partials carry the locale, mountable locales/, shared core words
lilleman
2026-08-03 23:12:18 +02:00
245d1ad5b5
Add i18n support: per-locale catalogs, URL-driven locale, translated core and examples
lilleman
2026-08-03 22:37:27 +02:00
c30cd95ebd
Fix a stale ctx.identity reference in the file map
lilleman
2026-08-03 17:16:19 +02:00
f38b5373bd
Say user throughout, noting Ory's identity naming in the docs
lilleman
2026-08-03 17:13:20 +02:00
9966b6bd46
Record the authorization vocabulary decision in AGENTS.md
lilleman
2026-08-03 17:04:17 +02:00
096720904e
Rename the coarse gate from role to permission, matching RBAC
lilleman
2026-08-03 17:02:47 +02:00
04fe5b1e06
Cut the security-model threat table down to what the code cannot show
lilleman
2026-08-03 13:28:56 +02:00
3486e0ad00
Rename the Keto User namespace to Identity, matching Kratos
lilleman
2026-08-03 12:19:12 +02:00
8f9f79ac30
Document the users, groups and roles model in README
lilleman
2026-08-03 11:39:26 +02:00
b580f7d06e
Rename the plugin-API permission gate to role
lilleman
2026-08-03 11:31:04 +02:00
f0662cbd0f
Reflow the security-model prose to the file's wrap width
lilleman
2026-08-02 17:34:57 +02:00
4b4ac178ab
Record the open CSRF token-binding decision as a todo item
lilleman
2026-08-02 17:33:44 +02:00
73a78d4404
Add the seeded admin login to the production secrets checklist
lilleman
2026-08-02 17:33:04 +02:00
5a5803b265
Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test
lilleman
2026-08-02 17:25:07 +02:00
a2204782fa
Review fixes: re-mint path, real session lifetime, full secret checklist
lilleman
2026-08-02 17:14:20 +02:00
eb5aafdfaa
Document the auth security model in README
lilleman
2026-08-02 17:03:09 +02:00
5c3af63847
Merge branch 'main' into renovate/renovate-renovate-44.x
lilleman
2026-08-03 12:10:24 +02:00
21cd878447
Update renovate/renovate Docker tag to v44.7.2
renovate-bot
2026-08-03 04:17:57 +00:00
1abaa22a97
Update actions/checkout action to v4.4.0
renovate-bot
2026-08-03 04:17:55 +00:00
702e42de09
Reflow the security-model prose to the file's wrap width
auth-security-model
lilleman
2026-08-02 17:34:57 +02:00
98bdd2c1b5
Record the open CSRF token-binding decision as a todo item
lilleman
2026-08-02 17:33:44 +02:00
12913402a6
Add the seeded admin login to the production secrets checklist
lilleman
2026-08-02 17:33:04 +02:00
7dee80a976
Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test
lilleman
2026-08-02 17:25:07 +02:00
c0fe8b0a82
Review fixes: re-mint path, real session lifetime, full secret checklist
lilleman
2026-08-02 17:14:20 +02:00
fb7d20a7db
Document the auth security model in README
lilleman
2026-08-02 17:03:09 +02:00
0919adf4ef
Review fixes: plain depends_on merge, positive secret assertion
lilleman
2026-08-02 16:10:35 +02:00
f5f4455b81
Browser E2E for the admin OAuth2-clients screen
lilleman
2026-08-02 16:03:30 +02:00
3f30f889c3
README: note GITHUB_ secret-name prefix is rejected too
lilleman
2026-08-02 15:48:04 +02:00
ae1479f55b
Renovate: set GITHUB_COM_TOKEN for authenticated github.com lookups
lilleman
2026-08-02 15:43:38 +02:00
bb6021adf7
Update lockfile for typescript 7.0.2
lilleman
2026-08-02 14:57:19 +02:00
c4e6212189
chore(deps): update dependency typescript to v7
renovate-bot
2026-08-02 04:18:03 +00:00
6f6aafad39
Import ejs as default export — the v6 ESM build exports only default
lilleman
2026-08-02 14:57:07 +02:00
4aada6eed9
Update lockfile for ejs 6.0.1
lilleman
2026-08-02 14:40:13 +02:00
a574effb37
fix(deps): update dependency ejs to v6
renovate-bot
2026-08-02 04:18:05 +00:00
c259497627
Update lockfile for @types/node 24.13.3
lilleman
2026-08-02 14:39:37 +02:00
8e74532a77
chore(deps): update node.js to v24.18.1
renovate-bot
2026-08-02 04:17:57 +00:00
62f95afe63
Merge branch 'main' into remove-stability-auto-review
lilleman
2026-08-02 15:19:13 +02:00
ffeec70f8f
Update lockfile and regenerate icons.ejs for lucide-static 1.28.0
lilleman
2026-08-02 14:34:45 +02:00
62d4c8b7cd
fix(deps): update dependency lucide-static to v1.28.0
renovate-bot
2026-08-02 04:18:02 +00:00
12cc2d54c2
Clarify todo.md reference and record manual review policy
lilleman
2026-08-02 15:12:22 +02:00
bb6adc40af
Remove stability reviewer auto-run from AGENTS.md
lilleman
2026-08-02 15:06:48 +02:00
c64156a9d5
Update e2e-tests lockfile for @playwright/test 1.62.1
lilleman
2026-08-02 14:38:06 +02:00
de2ad42f5a
chore(deps): update playwright to v1.62.1
renovate-bot
2026-08-02 04:17:58 +00:00
9213e5a0de
Make the CI web-image rebuild its own step; note the shared-workspace image-tag race
lilleman
2026-08-02 15:02:33 +02:00
45054db5e6
Build the web image in ci.sh so typecheck and tests run the branch's own deps
lilleman
2026-08-02 14:37:12 +02:00
23bafd247d
Fix typos in the AGENTS.md comment rules
lilleman
2026-08-02 15:00:56 +02:00
7c66599f35
Todo and agents updates
lilleman
2026-08-02 13:24:20 +02:00
6db0f57bf4
Trim README and workflow prose that restates the code
lilleman
2026-08-02 13:55:50 +02:00
175717f04d
Move the docs-only decision into ci.sh so it runs locally
lilleman
2026-08-02 13:38:32 +02:00
6c850b8923
Skip the test gate on docs-only branches
lilleman
2026-08-02 13:31:07 +02:00
af4a70d904
chore(deps): update renovate/renovate docker tag to v44.6.0
renovate-bot
2026-08-02 04:18:00 +00:00
a0244a32cd
chore(deps): update renovate/renovate docker tag to v44.5.3
renovate-bot
2026-08-01 04:18:15 +00:00
6559f40142
chore(deps): update renovate/renovate docker tag to v44
renovate-bot
2026-07-31 04:18:12 +00:00
d3154819f8
chore(deps): update renovate/renovate docker tag to v43.288.0
renovate-bot
2026-07-30 04:17:51 +00:00
1cba6d470c
chore(deps): update axllent/mailpit docker tag to v1.30.6
renovate-bot
2026-07-29 04:18:24 +00:00
194c090bd1
chore(deps): update renovate/renovate docker tag to v43.285.3
renovate-bot
2026-07-28 04:17:59 +00:00
ff5094f7e9
chore(deps): update renovate/renovate docker tag to v43.281.1
renovate-bot
2026-07-27 04:18:12 +00:00
419ee1750b
chore(deps): update renovate/renovate docker tag to v43.280.5
renovate-bot
2026-07-26 04:18:07 +00:00
cedac950be
chore(deps): update renovate/renovate docker tag to v43.280.4
renovate-bot
2026-07-25 04:17:42 +00:00
ff455f1ef2
chore(deps): update axllent/mailpit docker tag to v1.30.5
renovate-bot
2026-07-25 01:02:53 +00:00
5bd26d773d
chore(deps): update renovate/renovate docker tag to v43.270.0
renovate-bot
2026-07-19 04:17:22 +00:00
4f60bad119
chore(deps): update axllent/mailpit docker tag to v1.30.4
renovate-bot
2026-07-18 21:13:02 +00:00
aea568ea1c
chore(deps): update renovate/renovate docker tag to v43.252.1
renovate-bot
2026-07-06 04:17:39 +00:00
145db5b4cd
CI: auto-release a version tag when Renovate merges a dependency update
lilleman
2026-07-05 20:49:49 +02:00
7c39056188
chore(deps): update node.js to v24.18.0
renovate-bot
2026-07-05 07:02:10 +00:00
9719586f51
chore(deps): update axllent/mailpit docker tag to v1.30.3
renovate-bot
2026-07-05 06:56:22 +00:00
67d8a095a5
CI: Renovate for gated, self-hosted dependency updates
lilleman
2026-07-04 21:51:04 +02:00
476ef6fce2
README-dockerhub: clone-free quick start - self-contained compose, Ory config extracted from the image
lilleman
2026-07-04 17:45:44 +02:00
93fa751d6d
Add README-dockerhub.md - the hand-maintained Docker Hub repo description
lilleman
2026-07-04 17:37:02 +02:00
cc886936ed
CI: sync release images to Docker Hub on vX.Y.Z tag push
lilleman
2026-07-04 17:08:31 +02:00
e3e582afef
README: document the one-time org-package-to-repo link for the Packages tab
lilleman
2026-07-04 09:39:10 +02:00
0644ec8f5a
CI: nightly registry cleanup - prune hash images not release-tagged nor a branch head
lilleman
2026-07-04 09:18:07 +02:00
058280934b
CI: re-tag the gated image as semver + latest on vX.Y.Z tag push
lilleman
2026-07-04 08:35:48 +02:00