Commit Graph

1281 Commits

Author SHA1 Message Date
jamesread aa2bd95ccb feat(policy): add policy to show/hide version number
Build & Release pipeline / build (push) Has been cancelled
Buf CI / buf (push) Has been cancelled
Made-with: Cursor
2026-02-27 21:26:55 +00:00
James Read f41fe2caba docs: Add autonomy level to README
Build & Release pipeline / build (push) Has been cancelled
2026-02-27 11:21:34 +00:00
jamesread 54eb2a6586 fix: User login log message fixed when password matches, but user lookup fails
Build & Release pipeline / build (push) Has been cancelled
2026-02-27 00:10:45 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread 4744169aa0 chore: code cleanup, remove todos, etc 2026-02-26 23:07:07 +00:00
jamesread e9a3863b1b chore: codestyle
Build & Release pipeline / build (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
2026-02-26 20:56:51 +00:00
jamesread f3549b035e Remove dead CORS package (L-2)
The CORS helper was unused; its import was commented out in webuiServer.go.
Deleting the package removes the dormant origin-reflection security issue.
2026-02-26 20:46:11 +00:00
jamesread 4af4d516be fix: ShowDiagnostics now behind policy checks 2026-02-26 20:43:14 +00:00
jamesread 24cced0c8c security: IDOR on ExecutionStatus API 2026-02-26 20:23:48 +00:00
jamesread 5cbcf29704 Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-02-26 17:42:30 +00:00
jamesread 7717f735aa chore: dep update 2026-02-26 17:42:12 +00:00
James Read 6dfffd1170 security: 10-slot Semaphore around password hash functions to prevent… (#904) 2026-02-26 12:12:06 -05:00
James Read 894f3ddc5f fix: Set common security headers by default (#903) 2026-02-26 11:52:10 -05:00
jamesread a7be68b359 security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks 2026-02-26 16:49:29 +00:00
jamesread e487288287 doc: Updated agents codestyle 2026-02-26 16:15:54 +00:00
jamesread cb71ddf401 fix: Set common security headers by default 2026-02-26 16:14:41 +00:00
jamesread 69c1276a13 chore: Setup buildx 2026-02-26 13:38:52 +00:00
jamesread a5d991c759 Merge branch 'next' of github.com:OliveTin/OliveTin into next
Build & Release pipeline / build (push) Has been cancelled
2026-02-26 07:18:47 +00:00
jamesread 04d627d36c chore: dependabot less spam 2026-02-26 07:18:38 +00:00
James Read 6cebb684b9 fix: Logs page pagination (#883) (#885)
Build & Release pipeline / build (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
Buf CI / buf (push) Has been cancelled
2026-02-25 19:52:52 -05:00
jamesread 907d674975 Merge branch 'fix-883-logs-pagination' of github.com:OliveTin/OliveTin into fix-883-logs-pagination 2026-02-26 00:48:25 +00:00
jamesread 1335302e80 chore: codestyle 2026-02-26 00:48:21 +00:00
James Read 0fcc26671f Merge branch 'next' into fix-883-logs-pagination 2026-02-25 19:40:16 -05:00
jamesread ad479651b7 chore: Fix broken test configs 2026-02-26 00:33:21 +00:00
jamesread 4e2fdc2d96 chore: fix security advisory link 2026-02-26 00:11:21 +00:00
James Read e776a2d60d Merge branch 'next' into fix-883-logs-pagination 2026-02-25 19:07:17 -05:00
jamesread 87f2a3287b chore: invalid key in test config 2026-02-26 00:04:14 +00:00
jamesread 5a0d94700c chore: typo in SECURITY.md 2026-02-26 00:01:00 +00:00
jamesread 10294e2030 chore: type in SECURITY.md 2026-02-25 23:59:49 +00:00
James Read bee81b43f2 Merge branch 'next' into fix-883-logs-pagination 2026-02-25 18:51:46 -05:00
jamesread 38d6b57077 chore: codefmt 2026-02-25 23:24:02 +00:00
jamesread c4a8eadd3f chore: Fix broken test configs 2026-02-25 23:15:57 +00:00
James Read 26e77a961d Merge commit from fork
Build & Release pipeline / build (push) Has been cancelled
Advisory fix 1
2026-02-22 17:27:07 +00:00
jamesread 4bbd2eab15 security: GHSA-49gm-hh7w-wfvf 2026-02-22 10:19:08 +00:00
James Read 1db6509288 chore(deps): bump axios from 1.13.2 to 1.13.5 in /integration-tests (#877)
Build & Release pipeline / build (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
DevSkim / DevSkim (push) Has been cancelled
2026-02-22 09:36:31 +00:00
James Read a208db72d1 chore(deps): bump wait-on from 9.0.3 to 9.0.4 in /integration-tests (#881)
Build & Release pipeline / build (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
2026-02-22 09:36:06 +00:00
jamesread ea4cdf9df2 fix: Logs page pagination (#883) 2026-02-19 20:33:51 +00:00
dependabot[bot] 4700f998e3 chore(deps): bump wait-on from 9.0.3 to 9.0.4 in /integration-tests
Bumps [wait-on](https://github.com/jeffbski/wait-on) from 9.0.3 to 9.0.4.
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](https://github.com/jeffbski/wait-on/compare/v9.0.3...v9.0.4)

---
updated-dependencies:
- dependency-name: wait-on
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-16 05:49:56 +00:00
jamesread 7dcbca31fc fix: #803 enable custom JS (again!)
Build & Release pipeline / build (push) Has been cancelled
2026-02-15 01:03:22 +00:00
jamesread 903fd15bdb fix: #860 respect popupOnStart even if the action has args. 2026-02-15 00:31:26 +00:00
jamesread 544515c2a6 chore: #829, json support in template engine 2026-02-15 00:19:36 +00:00
jamesread 58e1f37ee4 chore: util script to cleanup bad releases
Build & Release pipeline / build (push) Has been cancelled
2026-02-14 22:08:52 +00:00
James Read d22bdebff7 release: Clean up docker builds, support attestation with provinence and sboms (#879)
Build & Release pipeline / build (push) Has been cancelled
DevSkim / DevSkim (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
3000.10.0
2026-02-14 20:41:10 +00:00
James Read e057b1a69e Merge branch 'main' into next 2026-02-14 20:21:05 +00:00
jamesread 5b9f2beccd chore: Clean up docker builds, support attestation with provinence and sboms 2026-02-14 19:48:54 +00:00
James Read 6b72348310 Next (#862)
Build & Release pipeline / build (push) Has been cancelled
DevSkim / DevSkim (push) Has been cancelled
Buf CI / buf (push) Has been cancelled
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
2026-02-14 00:26:41 +00:00
James Read 321e8f9cb2 Fix: Remove JSON quotes from webhook JSONPath string extraction (#864)
Build & Release pipeline / build (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
2026-02-13 23:55:37 +00:00
jamesread 011ee866df feat: template parsing for env in password fields 2026-02-13 23:53:43 +00:00
jamesread 1248ee8765 chore: remove extranious comments 2026-02-13 23:36:16 +00:00
James Read 254c4a6a15 Merge branch 'main' into next 2026-02-13 23:23:32 +00:00