medlogic
/
olivetin
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,608 Commits 1 Branch 0 Tags 12 MiB
Commit Graph

1608 Commits

Author SHA1 Message Date
jamesread 92a1346edf docs: update security.md with the fix process 2026-03-04 23:12:20 +00:00
jamesread 00cb5a2abf fix: action triggers were broken #914 2026-03-04 23:12:20 +00:00
jamesread 0c47564652 chore: logs are written with 0600 instead of 0644 2026-03-04 23:12:20 +00:00
jamesread bb14c5da3e security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references 2026-03-04 22:51:58 +00:00
James Read 235493e471
Next (#911) 2026-03-02 00:49:13 +00:00
James Read d9aed9d5c5
chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend (#906) 2026-03-01 19:45:05 -05:00
jamesread 87148f05bd chore: Update SECURITY.md 2026-03-02 00:44:49 +00:00
James Read e8e62d22f1
Merge branch 'next' into dependabot/npm_and_yarn/frontend/minimatch-3.1.5 2026-03-01 19:36:51 -05:00
jamesread 0412b9ea1d Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-03-02 00:35:05 +00:00
jamesread d9804182ea security: GHSA-4fqm-6fmh-82mq Authentication bypass in KillAction - thanks for the responsible disclosure @kule500 and making OliveTin better 2026-03-02 00:29:02 +00:00
James Read 26086576da
feat: Clickable links in outout (#900) (#909) 2026-03-01 19:16:25 -05:00
James Read 58b0a7b8f6
Security remote crash in oauth2 (#910) 2026-03-01 19:14:36 -05:00
jamesread f044d90d55 security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow. 2026-03-01 23:52:25 +00:00
James Read a565e1ce4c
chore(deps-dev): bump selenium-webdriver from 4.40.0 to 4.41.0 in /integration-tests (#894) 2026-03-01 18:27:19 -05:00
James Read 159c9d6c4d
chore(deps): bump github.com/bufbuild/buf from 1.65.0 to 1.66.0 in /service (#897) 2026-03-01 18:27:06 -05:00
jamesread 7051aad599 feat: Clickable links in outout (#900) 2026-03-01 23:17:44 +00:00
James Read e67fac17d0
Merge branch 'next' into dependabot/go_modules/service/next/github.com/bufbuild/buf-1.66.0 2026-03-01 17:16:45 -05:00
James Read a8c6366bdd
Merge branch 'next' into dependabot/npm_and_yarn/integration-tests/next/selenium-webdriver-4.41.0 2026-03-01 17:16:37 -05:00
jamesread aa2bd95ccb feat(policy): add policy to show/hide version number 
Made-with: Cursor
 2026-02-27 21:26:55 +00:00
James Read f41fe2caba
docs: Add autonomy level to README 2026-02-27 11:21:34 +00:00
dependabot[bot] 1c32a389b3
chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 00:25:25 +00:00
James Read 2eb5f0ba79
Next (#905) 2026-02-27 00:24:07 +00:00
jamesread 54eb2a6586 fix: User login log message fixed when password matches, but user lookup fails 2026-02-27 00:10:45 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread 4744169aa0 chore: code cleanup, remove todos, etc 2026-02-26 23:07:07 +00:00
jamesread e9a3863b1b chore: codestyle 2026-02-26 20:56:51 +00:00
jamesread f3549b035e Remove dead CORS package (L-2) 
The CORS helper was unused; its import was commented out in webuiServer.go.
Deleting the package removes the dormant origin-reflection security issue.
 2026-02-26 20:46:11 +00:00
jamesread 4af4d516be fix: ShowDiagnostics now behind policy checks 2026-02-26 20:43:14 +00:00
jamesread 24cced0c8c security: IDOR on ExecutionStatus API 2026-02-26 20:23:48 +00:00
jamesread 5cbcf29704 Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-02-26 17:42:30 +00:00
jamesread 7717f735aa chore: dep update 2026-02-26 17:42:12 +00:00
James Read 6dfffd1170
security: 10-slot Semaphore around password hash functions to prevent… (#904) 2026-02-26 12:12:06 -05:00
James Read 894f3ddc5f
fix: Set common security headers by default (#903) 2026-02-26 11:52:10 -05:00
jamesread a7be68b359 security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks 2026-02-26 16:49:29 +00:00
jamesread e487288287 doc: Updated agents codestyle 2026-02-26 16:15:54 +00:00
jamesread cb71ddf401 fix: Set common security headers by default 2026-02-26 16:14:41 +00:00
James Read 60176b6078
chore: Setup buildx (#901) 2026-02-26 14:14:22 +00:00
jamesread 69c1276a13 chore: Setup buildx 2026-02-26 13:38:52 +00:00
dependabot[bot] ff3620bca9
chore(deps): bump github.com/bufbuild/buf in /service 
Bumps [github.com/bufbuild/buf](https://github.com/bufbuild/buf) from 1.65.0 to 1.66.0.
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bufbuild/buf/compare/v1.65.0...v1.66.0)

---
updated-dependencies:
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 07:24:25 +00:00
James Read eb42029b5d
Next (#890) 2026-02-26 07:23:20 +00:00
jamesread a5d991c759 Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-02-26 07:18:47 +00:00
jamesread 04d627d36c chore: dependabot less spam 2026-02-26 07:18:38 +00:00
James Read 6cebb684b9
fix: Logs page pagination (#883) (#885) 2026-02-25 19:52:52 -05:00
jamesread 907d674975 Merge branch 'fix-883-logs-pagination' of github.com:OliveTin/OliveTin into fix-883-logs-pagination 2026-02-26 00:48:25 +00:00
jamesread 1335302e80 chore: codestyle 2026-02-26 00:48:21 +00:00
James Read 0fcc26671f
Merge branch 'next' into fix-883-logs-pagination 2026-02-25 19:40:16 -05:00
jamesread ad479651b7 chore: Fix broken test configs 2026-02-26 00:33:21 +00:00
jamesread 4e2fdc2d96 chore: fix security advisory link 2026-02-26 00:11:21 +00:00
James Read e776a2d60d
Merge branch 'next' into fix-883-logs-pagination 2026-02-25 19:07:17 -05:00
jamesread 87f2a3287b chore: invalid key in test config 2026-02-26 00:04:14 +00:00