medlogic
/
olivetin
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,345 Commits 1 Branch 0 Tags 12 MiB
Commit Graph

1345 Commits

Author SHA1 Message Date
jamesread c132eacc00 docs: add Antora site sources under docs/ with CI smoke build 
Move the docs.olivetin.app AsciiDoc component into this repository, add
local Antora playbooks for contributors and CI, and document the split
between this repo and the docs build repository.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-10 21:58:48 +01:00
jamesread 841ef770f3 chore: Dep update March 24th 2026-03-24 22:52:17 +00:00
jamesread cb3aa3362e chore: fix potential panic in tests 2026-03-11 00:29:56 +00:00
jamesread 606b705bdd chore: fix potential panic in tests 2026-03-11 00:27:42 +00:00
jamesread acd6cb839e security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream 2026-03-10 23:47:35 +00:00
jamesread 86c35f40c3 chore: remove unneeded comment 2026-03-10 23:28:17 +00:00
jamesread bc5e9fbe1e security: GHSA-xx6g-43w2-9g6g (MODERATE) Email argument makes compliance harder, enables log injection 2026-03-10 23:27:09 +00:00
jamesread ac0852aad4 chore: dep update March 26 2026-03-10 22:36:28 +00:00
jamesread 9d916b7175 fix: Add link to websocket disconnection 2026-03-10 11:40:06 +00:00
jamesread b33aded230 chore: Use a constant for the default CSP 2026-03-09 10:00:47 +00:00
jamesread b298a6bd8c chore: Treat root fieldset separately for ordering 2026-03-09 09:31:40 +00:00
jamesread b78b0df84d Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-03-09 09:20:02 +00:00
jamesread dcb5bd0c82 chore: Allow entity key ordering for actionless components 2026-03-09 09:18:24 +00:00
James Read 57ebade75b
Merge branch 'main' into next 2026-03-09 04:58:10 -04:00
jamesread 93a9636a82 chore: additional test coverage for view permission 2026-03-09 08:55:47 +00:00
jamesread caf5a4b025 fix: Disconnection banner preserves original disconnect time 2026-03-09 08:47:26 +00:00
jamesread a5c102dbf1 fix: Much more helpful reconnection banner 2026-03-09 00:27:53 +00:00
jamesread 2f77000de4 security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files 2026-03-08 23:29:00 +00:00
jamesread 24e8b48dc9 fix: Websocket reconnection logic (#802, 889, #884) 2026-03-08 23:09:23 +00:00
jamesread 71bb999950 security: Actions that people didnt have permission to view were being returned (#921) 2026-03-08 22:45:46 +00:00
jamesread 5ff6b5d080 fix: Entity ordering (#886, #762) 2026-03-08 22:16:24 +00:00
jamesread 0fee24089f fix: Restart action button was not working 2026-03-08 21:11:27 +00:00
jamesread 3f46007281 fix: Relax default CSP to allow iconify to work 2026-03-08 20:46:52 +00:00
James Read 276e3f62dd
Next (#915) 2026-03-05 09:51:25 +00:00
jamesread b032ae5e5e chore: fix regression on arguments not being found 2026-03-05 08:29:30 +00:00
James Read 6e7f3b0823
Merge commit from fork 
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
 2026-03-05 03:24:56 -05:00
James Read 93d983c506
Merge branch 'next' into advisory-fix-1 2026-03-05 03:24:12 -05:00
jamesread d7962710e7 security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards 2026-03-05 08:20:02 +00:00
jamesread 9080577f2b chore: potential crash in unit tests 2026-03-05 08:10:56 +00:00
jamesread 10f5ba62a2 docs: typos in SECURITY.md 2026-03-05 08:07:56 +00:00
jamesread 131393fb2d Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-03-05 00:24:20 +00:00
jamesread 9d55d4a178 docs: Policy change, 2k will receive security updates much slower 2026-03-05 00:24:00 +00:00
James Read 06557683a1
Merge commit from fork 
GHSA-fwhj-785h-43hh
 2026-03-04 19:16:35 -05:00
James Read 5e0c052e68
Merge branch 'next' into advisory-fix-1 2026-03-04 19:16:07 -05:00
James Read 6202736d53
Merge commit from fork 
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
 2026-03-04 19:05:48 -05:00
jamesread cb46a597b2 security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest 2026-03-05 00:04:58 +00:00
James Read 32c7fd73b8
Merge commit from fork 
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
 2026-03-04 18:36:22 -05:00
jamesread d6a0abc375 security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session 2026-03-04 23:31:15 +00:00
jamesread e97d8ecbd8 security: GHSA-g962-2j28-3cg9 (HIGH) JWT Audience Validation Bypass in Local Key and HMAC Modes 2026-03-04 23:13:39 +00:00
jamesread 92a1346edf docs: update security.md with the fix process 2026-03-04 23:12:20 +00:00
jamesread 00cb5a2abf fix: action triggers were broken #914 2026-03-04 23:12:20 +00:00
jamesread 0c47564652 chore: logs are written with 0600 instead of 0644 2026-03-04 23:12:20 +00:00
jamesread bb14c5da3e security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references 2026-03-04 22:51:58 +00:00
James Read 235493e471
Next (#911) 2026-03-02 00:49:13 +00:00
James Read d9aed9d5c5
chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend (#906) 2026-03-01 19:45:05 -05:00
jamesread 87148f05bd chore: Update SECURITY.md 2026-03-02 00:44:49 +00:00
James Read e8e62d22f1
Merge branch 'next' into dependabot/npm_and_yarn/frontend/minimatch-3.1.5 2026-03-01 19:36:51 -05:00
jamesread 0412b9ea1d Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-03-02 00:35:05 +00:00
jamesread d9804182ea security: GHSA-4fqm-6fmh-82mq Authentication bypass in KillAction - thanks for the responsible disclosure @kule500 and making OliveTin better 2026-03-02 00:29:02 +00:00
James Read 26086576da
feat: Clickable links in outout (#900) (#909) 2026-03-01 19:16:25 -05:00