Commit Graph

  • f8a91ed34e release: code security scanner (#552) jmiller 2026-06-28 19:00:33 +00:00
  • 87f92fe1ab Merge pull request 'feat: code security scanner with OWASP pattern detection (#552)' (#716) from feature/code-scanner into dev jmiller 2026-06-28 16:08:21 +00:00
  • 66aea89b40 docs: update README to reflect code security scanner jmiller 2026-06-28 08:20:23 -05:00
  • 7c75133ef1 feat: code security scanner with OWASP pattern detection (#552) jmiller 2026-06-28 08:15:34 -05:00
  • 108b19dcc8 chore: sync pr-check.yml from Template-Generic [skip ci] jmiller 2026-06-28 11:12:11 +00:00
  • 37a62b5ab7 Merge pull request 'fix: pr-check platform detection queries metadata API' (#715) from fix/pr-check-platform-detection into main jmiller 2026-06-28 11:10:36 +00:00
  • 35ebbef489 docs: update README with new features from latest release jmiller 2026-06-28 06:02:28 -05:00
  • 193c705c05 fix: branch policy allows fix/patch branches to target main jmiller 2026-06-28 06:00:56 -05:00
  • fa845164bb fix: pr-check platform detection queries metadata API instead of removed manifest.xml jmiller 2026-06-28 05:59:14 -05:00
  • fefdf1a1ec release: cascade merge, status presets, default teams, secret scanning jmiller 2026-06-28 09:41:22 +00:00
  • 23bb025700 merge: incorporate main into dev for release PR #714 jmiller 2026-06-28 04:35:52 -05:00
  • 7913a05285 feat: cascade merge — auto-create PRs to downstream branches after merge (#460) jmiller 2026-06-28 08:52:04 +00:00
  • 98301bc92b merge: incorporate latest dev (post status-presets merge) into cascade-merge jmiller 2026-06-28 03:51:37 -05:00
  • c618ec9f87 feat: issue status presets and cross-org migration (#507) jmiller 2026-06-28 08:49:23 +00:00
  • 5a25068d81 merge: incorporate dev changes into feature/cascade-merge jmiller 2026-06-28 03:48:52 -05:00
  • 57894e25fd merge: incorporate dev changes into feature/status-presets jmiller 2026-06-28 03:47:37 -05:00
  • 2857a1f6a1 feat: security scanning API + pre-receive hook blocking (#692) jmiller 2026-06-28 08:45:45 +00:00
  • b9c04e51b4 feat(orgs): auto-create default teams on org creation (#513) jmiller 2026-06-28 08:45:25 +00:00
  • 0b44e92369 fix: cherry-pick upstream security fixes from v1.26.3 and v1.26.4 jmiller 2026-06-28 08:45:03 +00:00
  • cf25eef480 fix: distinguish unknown preset from DB errors in ApplyIssueStatusPreset jmiller 2026-06-28 03:34:07 -05:00
  • 5da6a40f10 fix: resolve merge conflict marker and fix import paths in cherry-picked tests jmiller 2026-06-28 03:31:44 -05:00
  • 4e5aa5f3ce fix: revert accidental secret scanning code from security fix branch jmiller 2026-06-28 02:37:49 -05:00
  • 9a4aa0fafb fix: log error when pre-receive secret scan cannot read commit jmiller 2026-06-28 02:35:50 -05:00
  • e947600ea7 fix: log error when pre-receive secret scan cannot read commit jmiller 2026-06-28 02:35:11 -05:00
  • b0bbaab621 docs: add security section to changelog for upstream v1.26.3/v1.26.4 fixes jmiller 2026-06-28 02:35:07 -05:00
  • 84df5d7932 feat: register security scanning API routes in router jmiller 2026-06-28 02:33:29 -05:00
  • 7b334f94c0 feat: security scanning API endpoints + pre-receive hook blocking (#692) jmiller 2026-06-28 02:14:46 -05:00
  • 805c566615 fix: remove leaked security scanning routes from cascade-merge branch jmiller 2026-06-28 02:29:27 -05:00
  • f53bc895ba fix: prevent IDOR in CopyStatusesFromOrg endpoint jmiller 2026-06-28 02:26:23 -05:00
  • 2ff0e4aa21 fix: walk git log context error handling (#38182) (#38185) Giteabot 2026-06-21 05:54:31 -07:00
  • c0f89a373d fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) (#38183) bircni 2026-06-21 14:23:24 +02:00
  • 0dc858c15c fix(hostmacher): patch incorrect private list (#38170) (#38173) Giteabot 2026-06-19 14:50:01 -07:00
  • 94590bc834 fix: allow git clone of private repos with anonymous code access (#38074) (#38146) bircni 2026-06-17 23:21:05 +02:00
  • cbf34fb987 fix: Various security fixes (#38103) (#38151) bircni 2026-06-17 22:49:59 +02:00
  • 26ad4fd03f fix(auth): ignore stale OIDC external login links to organizations (#37875) (#38141) Lunny Xiao 2026-06-17 13:19:24 -07:00
  • bc578b7eba fix: Various sec fixes (#38108) (#38147) bircni 2026-06-17 21:43:22 +02:00
  • 186ac68f03 fix: bound debian ParseControlFile to a single control stanza (#38044) (#38055) Giteabot 2026-06-14 07:29:27 -07:00
  • fedce235d5 fix(hostmatcher): block reserved IP ranges from external/private filters (#38039) (#38059) Giteabot 2026-06-10 03:05:23 -07:00
  • d3c6998d3e fix(lfs): require Code-unit access for cross-repo LFS object reuse (#38006) (#38050) Giteabot 2026-06-10 00:32:28 -07:00
  • e9648f367e fix(actions)!: require merged PR to bypass fork PR approval gate (#38010) (#38041) Giteabot 2026-06-09 06:53:42 -07:00
  • 725acbe112 fix: bound CODEOWNERS regex match time (#38011) (#38025) Giteabot 2026-06-07 09:40:34 -07:00
  • 884e568ea2 fix(lfs): reject unknown SSH LFS sub-verbs to prevent auth bypass (#38008) (#38015) Giteabot 2026-06-06 13:07:06 -07:00
  • 240fe1ebe5 feat: security scanning API endpoints + pre-receive hook blocking (#692) jmiller 2026-06-28 02:14:46 -05:00
  • e99658ddc0 feat(orgs): auto-create default teams on org creation (#513) jmiller 2026-06-28 02:00:17 -05:00
  • f627219ca8 feat: cascade merge — auto-create PRs to downstream branches after merge (#460) jmiller 2026-06-28 02:04:40 -05:00
  • df9305758f feat: add issue status presets and cross-org migration (#507) jmiller 2026-06-28 02:03:15 -05:00
  • ecc1f20162 feat: cascade merge — auto-create PRs to downstream branches after merge (#460) jmiller 2026-06-28 02:04:40 -05:00
  • 965abb54b8 feat: add issue status presets and cross-org migration (#507) jmiller 2026-06-28 02:03:15 -05:00
  • b94f41b597 feat(orgs): auto-create default teams on org creation (#513) jmiller 2026-06-28 02:00:17 -05:00
  • ebdf59d64f chore: sync cascade-dev.yml from Template-Generic [skip ci] jmiller 2026-06-28 01:21:39 +00:00
  • 8ffd2ffe18 Merge pull request 'release: branch protection delete allowlist (#696)' (#707) from dev into main jmiller 2026-06-28 01:20:26 +00:00
  • d2a3827202 fix: remove duplicate cascade-dev.yml synced to top-level (belongs in custom/) jmiller 2026-06-27 20:16:53 -05:00
  • 3cb45ba457 merge: incorporate workflow sync from main into dev jmiller 2026-06-27 20:16:05 -05:00
  • 92cf6a8521 Merge pull request 'feat: add delete allowlist for branch protection rules (#696)' (#706) from feature/delete-whitelist into dev jmiller 2026-06-28 00:36:24 +00:00
  • 81d20e25bf fix: set protectBranch.Repo before CanUserDelete to avoid extra DB load jmiller 2026-06-27 19:32:26 -05:00
  • 2d0b746b5f chore: sync ci-generic.yml from Template-Generic [skip ci] jmiller 2026-06-27 20:44:25 +00:00
  • 035ecb94f8 chore: sync cascade-dev.yml from Template-Generic [skip ci] jmiller 2026-06-27 20:44:10 +00:00
  • c47013edb0 fix: restore original whitespace alignment in convert.go jmiller 2026-06-27 15:40:15 -05:00
  • 4178e7f23e feat: add delete allowlist for branch protection rules (#696) jmiller 2026-06-27 15:35:13 -05:00
  • 46cbf6600a Merge pull request 'merge: sync main into dev' (#705) from main into dev jmiller 2026-06-27 20:00:18 +00:00
  • afe46361c7 feat: workflow subdirectory discovery + move custom workflows to custom/ (#693) jmiller 2026-06-27 14:33:28 -05:00
  • e66c75753d chore: sync rc-revert.yml from Template-Generic [skip ci] jmiller 2026-06-27 05:32:16 +00:00
  • d6e56460a4 chore: sync pr-check.yml from Template-Generic [skip ci] jmiller 2026-06-27 05:32:11 +00:00
  • 322bd982bd Merge pull request 'fix: cherry-pick upstream v1.26.2 security and actions fixes' (#704) from fix/v1262-security-cherrypicks into main jmiller 2026-06-27 05:31:04 +00:00
  • a48f44c901 fix(ci): allow fix/* and patch/* branches to target main jmiller 2026-06-27 00:19:57 -05:00
  • 882eb2cce7 docs: add cherry-pick entries to changelog jmiller 2026-06-26 21:41:36 -05:00
  • f962ae575a fix(actions): exclude workflow_call from workflow trigger detection (#37894) (#37899) Giteabot 2026-05-28 23:40:50 -07:00
  • 58074ac860 fix(actions): keep action run title clickable when commit subject is a URL (#37867) (#37898) Giteabot 2026-05-28 22:59:47 -07:00
  • 9db67cd554 fix(actions): reject workflow_dispatch for workflows without that trigger (#37660) (#37895) Giteabot 2026-05-28 20:09:08 -07:00
  • a063c3b2e4 fix(actions): ack re-sent UpdateLog finalize idempotently (#37885) (#37892) Giteabot 2026-05-27 20:52:50 -07:00
  • ac48c1d958 fix: "run as root" check (#37622) (#37625) Giteabot 2026-05-09 10:02:21 -07:00
  • ad06fa7bec fix(pull): handle empty pull request files view to allow reviews (#37783) (#37785) Nicolas 2026-05-19 20:45:18 +02:00
  • ed068f2964 chore: sync pre-release.yml from Template-Generic [skip ci] jmiller 2026-06-27 00:49:13 +00:00
  • 03c8755fe1 docs: add CI infrastructure feature, repo wiki link to README [skip ci] jmiller 2026-06-27 00:29:25 +00:00
  • bd5c435f27 chore: sync ci-issue-reporter.yml from Template-Generic [skip ci] jmiller 2026-06-25 19:46:25 +00:00
  • a25a673d0c Merge pull request 'release: token scope editing, ci-reporter refactor, workflow standardization' (#703) from dev into main jmiller 2026-06-25 19:44:16 +00:00
  • 02ff660912 fix: sync repo-health.yml from Template-Generic (MOKOGITEA_URL + reusable workflow) [skip ci] jmiller 2026-06-25 17:48:01 +00:00
  • bc6bd9bf45 fix: sync pr-check.yml from Template-Generic (MOKOGITEA_URL + reusable workflow) [skip ci] jmiller 2026-06-25 17:47:54 +00:00
  • 03547194a4 merge: incorporate workflow sync from main into dev jmiller 2026-06-25 12:41:45 -05:00
  • 6131739e39 Merge pull request 'refactor: centralize ci-issue-reporter into MokoCLI + reusable workflow' (#701) from feature/edit-token-scopes into dev jmiller 2026-06-25 17:35:25 +00:00
  • 86e1db1dc8 refactor: move ci-issue-reporter to MokoCLI, use reusable workflow jmiller 2026-06-25 12:32:22 -05:00
  • 61e8b9deef chore: sync workflow-sync-trigger.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:11:26 +00:00
  • 9d3803a0b5 chore: sync version-set.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:11:20 +00:00
  • 53fab919cf chore: sync repo-health.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:11:14 +00:00
  • a47c4c7f67 chore: sync pre-release.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:11:06 +00:00
  • 1d29460244 chore: sync pr-check.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:11:00 +00:00
  • 24cd2986ab chore: sync issue-branch.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:10:54 +00:00
  • bf8b747ef9 chore: sync deploy-manual.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:10:49 +00:00
  • 467ea55ee8 chore: sync cleanup.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:10:44 +00:00
  • 1ac0449cde chore: sync auto-release.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:10:39 +00:00
  • d4221bcc9e chore: sync auto-bump.yml from Template-Generic [skip ci] jmiller 2026-06-25 17:10:34 +00:00
  • 6ef4a61eab chore: sync version-set.yml from Template-Generic [skip ci] jmiller 2026-06-25 16:44:35 +00:00
  • ba1427a19f chore: sync repo-health.yml from Template-Generic [skip ci] jmiller 2026-06-25 16:44:28 +00:00
  • 90d9fa9482 chore: sync pr-check.yml from Template-Generic [skip ci] jmiller 2026-06-25 16:44:22 +00:00
  • 699d8540d4 chore: sync issue-branch.yml from Template-Generic [skip ci] jmiller 2026-06-25 16:44:12 +00:00
  • 456235faaf chore: sync deploy-manual.yml from Template-Generic [skip ci] jmiller 2026-06-25 16:43:57 +00:00
  • 5c2321b164 chore: sync cleanup.yml from Template-Generic [skip ci] jmiller 2026-06-25 16:43:46 +00:00
  • 8798ccb478 Merge pull request 'feat: edit API token scopes + standardize workflow tokens' (#700) from feature/edit-token-scopes into main jmiller 2026-06-25 16:25:00 +00:00
  • 5c1b4e6509 docs: add changelog entries for token standardization and validation fix jmiller 2026-06-25 11:23:30 -05:00
  • 2a5a2dd845 fix: standardize workflow token references to MOKOGITEA_TOKEN jmiller 2026-06-25 11:13:20 -05:00