Commit Graph

1539 Commits

Author SHA1 Message Date
James Read f41fe2caba
docs: Add autonomy level to README 2026-02-27 11:21:34 +00:00
dependabot[bot] 1c32a389b3
chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 00:25:25 +00:00
James Read 2eb5f0ba79
Next (#905) 2026-02-27 00:24:07 +00:00
jamesread 54eb2a6586 fix: User login log message fixed when password matches, but user lookup fails 2026-02-27 00:10:45 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread 4744169aa0 chore: code cleanup, remove todos, etc 2026-02-26 23:07:07 +00:00
jamesread e9a3863b1b chore: codestyle 2026-02-26 20:56:51 +00:00
jamesread f3549b035e Remove dead CORS package (L-2)
The CORS helper was unused; its import was commented out in webuiServer.go.
Deleting the package removes the dormant origin-reflection security issue.
2026-02-26 20:46:11 +00:00
jamesread 4af4d516be fix: ShowDiagnostics now behind policy checks 2026-02-26 20:43:14 +00:00
jamesread 24cced0c8c security: IDOR on ExecutionStatus API 2026-02-26 20:23:48 +00:00
jamesread 5cbcf29704 Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-02-26 17:42:30 +00:00
jamesread 7717f735aa chore: dep update 2026-02-26 17:42:12 +00:00
James Read 6dfffd1170
security: 10-slot Semaphore around password hash functions to prevent… (#904) 2026-02-26 12:12:06 -05:00
James Read 894f3ddc5f
fix: Set common security headers by default (#903) 2026-02-26 11:52:10 -05:00
jamesread a7be68b359 security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks 2026-02-26 16:49:29 +00:00
jamesread e487288287 doc: Updated agents codestyle 2026-02-26 16:15:54 +00:00
jamesread cb71ddf401 fix: Set common security headers by default 2026-02-26 16:14:41 +00:00
James Read 60176b6078
chore: Setup buildx (#901) 2026-02-26 14:14:22 +00:00
jamesread 69c1276a13 chore: Setup buildx 2026-02-26 13:38:52 +00:00
dependabot[bot] ff3620bca9
chore(deps): bump github.com/bufbuild/buf in /service
Bumps [github.com/bufbuild/buf](https://github.com/bufbuild/buf) from 1.65.0 to 1.66.0.
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bufbuild/buf/compare/v1.65.0...v1.66.0)

---
updated-dependencies:
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-26 07:24:25 +00:00
James Read eb42029b5d
Next (#890) 2026-02-26 07:23:20 +00:00
jamesread a5d991c759 Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-02-26 07:18:47 +00:00
jamesread 04d627d36c chore: dependabot less spam 2026-02-26 07:18:38 +00:00
James Read 6cebb684b9
fix: Logs page pagination (#883) (#885) 2026-02-25 19:52:52 -05:00
jamesread 907d674975 Merge branch 'fix-883-logs-pagination' of github.com:OliveTin/OliveTin into fix-883-logs-pagination 2026-02-26 00:48:25 +00:00
jamesread 1335302e80 chore: codestyle 2026-02-26 00:48:21 +00:00
James Read 0fcc26671f
Merge branch 'next' into fix-883-logs-pagination 2026-02-25 19:40:16 -05:00
jamesread ad479651b7 chore: Fix broken test configs 2026-02-26 00:33:21 +00:00
jamesread 4e2fdc2d96 chore: fix security advisory link 2026-02-26 00:11:21 +00:00
James Read e776a2d60d
Merge branch 'next' into fix-883-logs-pagination 2026-02-25 19:07:17 -05:00
jamesread 87f2a3287b chore: invalid key in test config 2026-02-26 00:04:14 +00:00
jamesread 5a0d94700c chore: typo in SECURITY.md 2026-02-26 00:01:00 +00:00
jamesread 10294e2030 chore: type in SECURITY.md 2026-02-25 23:59:49 +00:00
James Read bee81b43f2
Merge branch 'next' into fix-883-logs-pagination 2026-02-25 18:51:46 -05:00
James Read 1d61117d67
Merge branch 'next' into dependabot/npm_and_yarn/integration-tests/next/selenium-webdriver-4.41.0 2026-02-25 18:51:30 -05:00
jamesread 38d6b57077 chore: codefmt 2026-02-25 23:24:02 +00:00
jamesread c4a8eadd3f chore: Fix broken test configs 2026-02-25 23:15:57 +00:00
dependabot[bot] c3028bb3b5
chore(deps-dev): bump selenium-webdriver in /integration-tests
Bumps [selenium-webdriver](https://github.com/SeleniumHQ/selenium) from 4.40.0 to 4.41.0.
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.40.0...selenium-4.41.0)

---
updated-dependencies:
- dependency-name: selenium-webdriver
  dependency-version: 4.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-23 05:52:28 +00:00
James Read 26e77a961d
Merge commit from fork
Advisory fix 1
2026-02-22 17:27:07 +00:00
jamesread 4bbd2eab15 security: GHSA-49gm-hh7w-wfvf 2026-02-22 10:19:08 +00:00
James Read 1db6509288
chore(deps): bump axios from 1.13.2 to 1.13.5 in /integration-tests (#877) 2026-02-22 09:36:31 +00:00
James Read a208db72d1
chore(deps): bump wait-on from 9.0.3 to 9.0.4 in /integration-tests (#881) 2026-02-22 09:36:06 +00:00
jamesread ea4cdf9df2 fix: Logs page pagination (#883) 2026-02-19 20:33:51 +00:00
dependabot[bot] 4700f998e3
chore(deps): bump wait-on from 9.0.3 to 9.0.4 in /integration-tests
Bumps [wait-on](https://github.com/jeffbski/wait-on) from 9.0.3 to 9.0.4.
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](https://github.com/jeffbski/wait-on/compare/v9.0.3...v9.0.4)

---
updated-dependencies:
- dependency-name: wait-on
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-16 05:49:56 +00:00
Andrew Savinykh f58eeef49d
check return value from `unmarshalRoot` in test and fail if false
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-02-15 21:28:23 +13:00
Andrew Savinykh 2fe6d306aa substitute environment variables when loading yaml config 2026-02-15 20:36:03 +13:00
jamesread 7dcbca31fc fix: #803 enable custom JS (again!) 2026-02-15 01:03:22 +00:00
jamesread 903fd15bdb fix: #860 respect popupOnStart even if the action has args. 2026-02-15 00:31:26 +00:00
jamesread 544515c2a6 chore: #829, json support in template engine 2026-02-15 00:19:36 +00:00
jamesread 58e1f37ee4 chore: util script to cleanup bad releases 2026-02-14 22:08:52 +00:00