Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 57ebade75b
  Merge branch 'main' into next James Read 2026-03-09 04:58:10 -0400
• 93a9636a82 chore: additional test coverage for view permission jamesread 2026-03-09 08:55:47 +0000
• caf5a4b025 fix: Disconnection banner preserves original disconnect time jamesread 2026-03-09 08:47:26 +0000
• a5c102dbf1 fix: Much more helpful reconnection banner jamesread 2026-03-09 00:27:53 +0000
• 2f77000de4 security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files jamesread 2026-03-08 23:29:00 +0000
• 24e8b48dc9 fix: Websocket reconnection logic (#802, 889, #884) jamesread 2026-03-08 23:09:23 +0000
• 71bb999950 security: Actions that people didnt have permission to view were being returned (#921) jamesread 2026-03-08 22:45:46 +0000
• 5ff6b5d080 fix: Entity ordering (#886, #762) jamesread 2026-03-08 22:16:24 +0000
• 0fee24089f fix: Restart action button was not working jamesread 2026-03-08 21:11:27 +0000
• 3f46007281 fix: Relax default CSP to allow iconify to work jamesread 2026-03-08 20:46:52 +0000
• 276e3f62dd
  Next (#915) James Read 2026-03-05 09:51:25 +0000
• b032ae5e5e chore: fix regression on arguments not being found jamesread 2026-03-05 08:29:30 +0000
• 6e7f3b0823
  Merge commit from fork James Read 2026-03-05 03:24:56 -0500
• 93d983c506
  Merge branch 'next' into advisory-fix-1 James Read 2026-03-05 03:24:12 -0500
• d7962710e7 security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards jamesread 2026-03-05 08:20:02 +0000
• 9080577f2b chore: potential crash in unit tests jamesread 2026-03-05 08:10:56 +0000
• 10f5ba62a2 docs: typos in SECURITY.md jamesread 2026-03-05 08:07:56 +0000
• 131393fb2d Merge branch 'next' of github.com:OliveTin/OliveTin into next jamesread 2026-03-05 00:24:20 +0000
• 9d55d4a178 docs: Policy change, 2k will receive security updates much slower jamesread 2026-03-05 00:24:00 +0000
• 06557683a1
  Merge commit from fork James Read 2026-03-04 19:16:35 -0500
• 5e0c052e68
  Merge branch 'next' into advisory-fix-1 James Read 2026-03-04 19:16:07 -0500
• 6202736d53
  Merge commit from fork James Read 2026-03-04 19:05:48 -0500
• cb46a597b2 security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest jamesread 2026-03-05 00:04:58 +0000
• 32c7fd73b8
  Merge commit from fork James Read 2026-03-04 18:36:22 -0500
• d6a0abc375 security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session jamesread 2026-03-04 23:31:15 +0000
• e97d8ecbd8 security: GHSA-g962-2j28-3cg9 (HIGH) JWT Audience Validation Bypass in Local Key and HMAC Modes jamesread 2026-03-03 22:47:03 +0000
• 92a1346edf docs: update security.md with the fix process jamesread 2026-03-04 23:00:28 +0000
• 00cb5a2abf fix: action triggers were broken #914 jamesread 2026-03-03 22:20:45 +0000
• 0c47564652 chore: logs are written with 0600 instead of 0644 jamesread 2026-03-02 13:48:22 +0000
• bb14c5da3e security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references jamesread 2026-03-04 22:51:58 +0000
• 235493e471
  Next (#911) James Read 2026-03-02 00:49:13 +0000
• d9aed9d5c5
  chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend (#906) James Read 2026-03-01 19:45:05 -0500
• 87148f05bd chore: Update SECURITY.md jamesread 2026-03-02 00:44:49 +0000
• e8e62d22f1
  Merge branch 'next' into dependabot/npm_and_yarn/frontend/minimatch-3.1.5 James Read 2026-03-01 19:36:51 -0500
• 0412b9ea1d Merge branch 'next' of github.com:OliveTin/OliveTin into next jamesread 2026-03-02 00:35:05 +0000
• d9804182ea security: GHSA-4fqm-6fmh-82mq Authentication bypass in KillAction - thanks for the responsible disclosure @kule500 and making OliveTin better jamesread 2026-03-02 00:29:02 +0000
• 26086576da
  feat: Clickable links in outout (#900) (#909) James Read 2026-03-01 19:16:25 -0500
• 58b0a7b8f6
  Security remote crash in oauth2 (#910) James Read 2026-03-01 19:14:36 -0500
• f044d90d55 security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow. jamesread 2026-03-01 23:52:25 +0000
• a565e1ce4c
  chore(deps-dev): bump selenium-webdriver from 4.40.0 to 4.41.0 in /integration-tests (#894) James Read 2026-03-01 18:27:19 -0500
• 159c9d6c4d
  chore(deps): bump github.com/bufbuild/buf from 1.65.0 to 1.66.0 in /service (#897) James Read 2026-03-01 18:27:06 -0500
• 7051aad599 feat: Clickable links in outout (#900) jamesread 2026-03-01 23:17:44 +0000
• e67fac17d0
  Merge branch 'next' into dependabot/go_modules/service/next/github.com/bufbuild/buf-1.66.0 James Read 2026-03-01 17:16:45 -0500
• a8c6366bdd
  Merge branch 'next' into dependabot/npm_and_yarn/integration-tests/next/selenium-webdriver-4.41.0 James Read 2026-03-01 17:16:37 -0500
• aa2bd95ccb feat(policy): add policy to show/hide version number jamesread 2026-02-27 21:26:55 +0000
• f41fe2caba
  docs: Add autonomy level to README James Read 2026-02-27 11:21:34 +0000
• 1c32a389b3
  chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /frontend dependabot[bot] 2026-02-27 00:25:25 +0000
• 2eb5f0ba79
  Next (#905) James Read 2026-02-27 00:24:07 +0000
• 54eb2a6586 fix: User login log message fixed when password matches, but user lookup fails jamesread 2026-02-27 00:10:45 +0000
• 03da2ff2e7 security: Try to set cookies secure, with force override option jamesread 2026-02-26 23:43:50 +0000
• 4744169aa0 chore: code cleanup, remove todos, etc jamesread 2026-02-26 23:07:07 +0000
• e9a3863b1b chore: codestyle jamesread 2026-02-26 20:56:51 +0000
• f3549b035e Remove dead CORS package (L-2) jamesread 2026-02-26 20:46:11 +0000
• 4af4d516be fix: ShowDiagnostics now behind policy checks jamesread 2026-02-26 20:43:14 +0000
• 24cced0c8c security: IDOR on ExecutionStatus API jamesread 2026-02-26 20:23:48 +0000
• 5cbcf29704 Merge branch 'next' of github.com:OliveTin/OliveTin into next jamesread 2026-02-26 17:42:30 +0000
• 7717f735aa chore: dep update jamesread 2026-02-26 17:42:12 +0000
• 6dfffd1170
  security: 10-slot Semaphore around password hash functions to prevent… (#904) James Read 2026-02-26 12:12:06 -0500
• 894f3ddc5f
  fix: Set common security headers by default (#903) James Read 2026-02-26 11:52:10 -0500
• a7be68b359 security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks jamesread 2026-02-26 16:49:29 +0000
• e487288287 doc: Updated agents codestyle jamesread 2026-02-26 16:15:54 +0000
• cb71ddf401 fix: Set common security headers by default jamesread 2026-02-26 16:14:41 +0000
• 60176b6078
  chore: Setup buildx (#901) James Read 2026-02-26 14:14:22 +0000
• 69c1276a13 chore: Setup buildx jamesread 2026-02-26 13:38:52 +0000
• ff3620bca9
  chore(deps): bump github.com/bufbuild/buf in /service dependabot[bot] 2026-02-26 07:24:25 +0000
• eb42029b5d
  Next (#890) James Read 2026-02-26 07:23:20 +0000
• a5d991c759 Merge branch 'next' of github.com:OliveTin/OliveTin into next jamesread 2026-02-26 07:18:47 +0000
• 04d627d36c chore: dependabot less spam jamesread 2026-02-26 07:17:22 +0000
• 6cebb684b9
  fix: Logs page pagination (#883) (#885) James Read 2026-02-25 19:52:52 -0500
• 907d674975 Merge branch 'fix-883-logs-pagination' of github.com:OliveTin/OliveTin into fix-883-logs-pagination jamesread 2026-02-26 00:48:25 +0000
• 1335302e80 chore: codestyle jamesread 2026-02-26 00:48:21 +0000
• 0fcc26671f
  Merge branch 'next' into fix-883-logs-pagination James Read 2026-02-25 19:40:16 -0500
• ad479651b7 chore: Fix broken test configs jamesread 2026-02-26 00:33:21 +0000
• 4e2fdc2d96 chore: fix security advisory link jamesread 2026-02-26 00:11:21 +0000
• e776a2d60d
  Merge branch 'next' into fix-883-logs-pagination James Read 2026-02-25 19:07:17 -0500
• 87f2a3287b chore: invalid key in test config jamesread 2026-02-26 00:04:14 +0000
• 5a0d94700c chore: typo in SECURITY.md jamesread 2026-02-26 00:01:00 +0000
• 10294e2030 chore: type in SECURITY.md jamesread 2026-02-25 23:59:49 +0000
• bee81b43f2
  Merge branch 'next' into fix-883-logs-pagination James Read 2026-02-25 18:51:46 -0500
• 1d61117d67
  Merge branch 'next' into dependabot/npm_and_yarn/integration-tests/next/selenium-webdriver-4.41.0 James Read 2026-02-25 18:51:30 -0500
• 38d6b57077 chore: codefmt jamesread 2026-02-25 23:24:02 +0000
• c4a8eadd3f chore: Fix broken test configs jamesread 2026-02-25 23:15:57 +0000
• c3028bb3b5
  chore(deps-dev): bump selenium-webdriver in /integration-tests dependabot[bot] 2026-02-23 05:52:28 +0000
• 26e77a961d
  Merge commit from fork James Read 2026-02-22 17:27:07 +0000
• 4bbd2eab15 security: GHSA-49gm-hh7w-wfvf jamesread 2026-02-22 10:19:08 +0000
• 1db6509288
  chore(deps): bump axios from 1.13.2 to 1.13.5 in /integration-tests (#877) James Read 2026-02-22 09:36:31 +0000
• a208db72d1
  chore(deps): bump wait-on from 9.0.3 to 9.0.4 in /integration-tests (#881) James Read 2026-02-22 09:36:06 +0000
• ea4cdf9df2 fix: Logs page pagination (#883) jamesread 2026-02-19 20:33:24 +0000
• 4700f998e3
  chore(deps): bump wait-on from 9.0.3 to 9.0.4 in /integration-tests dependabot[bot] 2026-02-16 05:49:56 +0000
• f58eeef49d
  check return value from `unmarshalRoot` in test and fail if false Andrew Savinykh 2026-02-15 21:28:23 +1300
• 2fe6d306aa substitute environment variables when loading yaml config Andrew Savinykh 2026-02-15 20:36:03 +1300
• 7dcbca31fc fix: #803 enable custom JS (again!) jamesread 2026-02-15 01:03:22 +0000
• 903fd15bdb fix: #860 respect popupOnStart even if the action has args. jamesread 2026-02-15 00:31:26 +0000
• 544515c2a6 chore: #829, json support in template engine jamesread 2026-02-15 00:19:36 +0000
• 58e1f37ee4 chore: util script to cleanup bad releases jamesread 2026-02-14 22:08:52 +0000
• d22bdebff7
  release: Clean up docker builds, support attestation with provinence and sboms (#879) James Read 2026-02-14 20:41:10 +0000
• e057b1a69e
  Merge branch 'main' into next James Read 2026-02-14 20:21:05 +0000
• 5b9f2beccd chore: Clean up docker builds, support attestation with provinence and sboms jamesread 2026-02-14 19:48:54 +0000
• 6b72348310
  Next (#862) James Read 2026-02-14 00:26:41 +0000
• 321e8f9cb2
  Fix: Remove JSON quotes from webhook JSONPath string extraction (#864) James Read 2026-02-13 23:55:37 +0000