Commit Graph

Select branches

Hide Pull Requests

285

backup/173-unpushed

bug_fix_2

chore/bootstrap-peer-moonwake-ledger

chore/bootstrap-peer-pocketlawb

chore/bootstrap-seed-gitlawb-nodes

ci/targeted-pr-checks

codex/b1a-mirror-persistence

feat/admin-purge-spam

feat/commit-status-surface

feat/real-node-deny-harness

feat/repos-search-sort

feat/storage-abstraction

feat/ucan-push-authorization

feat/upstream-mirror-worker

feat/write-sink-brake-coverage

fix/227-icaptcha-insecure-parse

fix/234-release-publish-environment-gate

fix/341-bounty-mutation-gates

fix/344-remove-label-canonicalization

fix/350-timestamp-slice-panics

fix/357-gl-doctor-exit-status

fix/360-attest-didkey-bound

fix/477-bounty-stats-visibility

fix/audit-ignore-libsqlite3-sys

fix/bound-preauth-signature-body

fix/claim-task-assignee-integrity

fix/creation-rate-limit-config

fix/doctor-probes-transport-node

fix/durable-outbox-receive-pack

fix/fork-repo-path-validation

fix/gossip-replay-bound

fix/graphql-mutation-fence

fix/graphql-query-cost-bounds

fix/h2-unbounded-data-frames

fix/helper-refuses-plaintext-remote-node

fix/icaptcha-insecure-seam-coverage

fix/issue-115-sign-gated-reads

fix/issue-117-multiround-fetch-deadlock

fix/issue-123-client-read-status-check

fix/issue-218-reconciliation-sweep-v2

fix/issue-26-split-2-arweave-transport

fix/issue-26-split-3-cert-compat

fix/issue-26-split-4-config-policy

fix/issue-338-public-read-messaging

fix/issue-345-icaptcha-stdin-overflow

fix/issue-358-check-created-overflow

fix/issue-369-delete-push-hang

fix/issue-370-view-url-404

fix/issue-398-hex-sha-validation

fix/issue-400-silent-empty-results

fix/issue-413-gl-scheme-check

fix/issue-417-nonutf8-mirror-path

fix/issue-419-recipient-scan-cap

fix/issue-426-issue-read-errors

fix/issue-435-replica-visibility

fix/issue-496-create-task-repo-gate

fix/issue-509-cert-threshold-did-canonical

fix/list-refs-canonical-slug

fix/node-add-response-missing-hash

fix/p2p-key-ownership

fix/path-traversal-codeql-4

fix/peers-ledger-248-writers

fix/quarantine-encrypted-and-ipfs-cid

fix/quickstart-no-ucan-failure

fix/reject-small-order-ed25519-keys

fix/satisfies-threshold-tolerant-scan

fix/secret-file-mode-at-create

fix/sweep-sourceless-legacy-pins

fix/task-read-visibility-gate

fix/triage-detect-namespaced-test-attrs

fix/verify-all-lenient-require-all

fix/zeroize-seed-bytes

infra-fly-node-configs

infra-node3-fly

main

pr-219

recreate-376-fix-git-clone-positional-delimiter

recreate-409-codex-fix-federated-response-bounds

recreate-410-codex/fix-identify-address-bounds

release-please--branches--main--components--gitlawb-node

test/replay-guards-253

#1

#10

#103

#105

#107

#108

#109

#11

#111

#113

#119

#12

#122

#125

#127

#128

#129

#13

#130

#131

#132

#133

#134

#137

#138

#139

#14

#140

#141

#142

#143

#145

#146

#148

#149

#15

#150

#151

#152

#154

#155

#156

#157

#158

#159

#159/merge

#16

#161

#163

#165

#168

#169

#170

#173

#174

#180

#181

#182

#184

#186

#188

#19

#192

#193

#193/merge

#194

#194/merge

#195

#196

#196/merge

#198

#20

#200

#202

#209

#21

#213

#214

#215

#219

#22

#221

#223

#224

#229

#23

#230

#233

#235

#236

#237

#24

#240

#241

#243

#244

#245

#246

#247

#248

#249

#25

#254

#255

#261

#261/merge

#262

#267

#27

#274

#275

#276

#277

#28

#280

#281

#285

#286

#290

#292

#297

#298

#3

#30

#304

#304/merge

#306

#307

#307/merge

#309

#311

#312

#314

#318

#320

#321

#324

#325

#326

#327

#33

#330

#331

#331/merge

#332

#333

#334

#335

#337

#34

#346

#347

#35

#36

#362

#362/merge

#363

#363/merge

#365

#366

#368

#37

#372

#372/merge

#375

#376

#377

#379

#38

#381

#382

#383

#384

#385

#386

#388

#39

#390

#391

#392

#392/merge

#394

#394/merge

#396

#4

#40

#401

#402

#402/merge

#403

#403/merge

#404

#405

#405/merge

#406

#407

#408

#409

#410

#412

#414

#414/merge

#433

#434

#437

#437/merge

#438

#438/merge

#439

#440

#441

#442

#443

#443/merge

#444

#445

#447

#448

#453

#455

#456

#457

#458

#459

#46

#460

#462

#463

#464

#465

#466

#483

#495

#497

#498

#5

#512

#514

#515

#516

#517

#518

#519

#52

#520

#521

#523

#524

#525

#526

#527

#528

#529

#530

#532

#533

#535

#536

#537

#538

#539

#54

#540

#541

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#564

#566

#566/merge

#57

#58

#59

#60

#61

#63

#64

#66

#67

#68

#69

#7

#70

#72

#73

#75

#78

#79

#79/merge

#8

#80

#83

#84

#87

#9

#90

#91

#92

v0.3.9

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.7.0

v0.7.1

Mono Color

• ba82ae785e feat(node,git): cap concurrent served git ops with a 503 load-shed (#62) beardthelion 2026-07-09 21:43:38 -05:00
• ad7c2b2b83 test(gl): add tests for iCaptcha transparent retry flow (#167) (#168) GravireiandGravirei 2026-07-10 20:22:30 +06:00
• c98b503f90 feat(icaptcha-client): solve the iCaptcha proof-of-work on answer (#181) Kevin Codex 2026-07-10 22:02:58 +08:00
• 3ec8cbf1e1 chore(main): release 0.5.1 (#158) v0.5.1 github-actions[bot] 2026-07-10 19:46:16 +08:00
• 6b5e5bc7ae fix(node): bound list_ref_certificates with LIMIT and add upsert to prevent unbounded growth (#147) (#149) GravireiandGravirei 2026-07-10 17:44:43 +06:00
• dfcaa22b23 fix(node): rate-limit repo/agent creation per client IP to stop DID-farm spam floods (#180) 3 people 2026-07-10 19:44:04 +08:00
• 2109d08e2c Fix/db startup resilience (#170) 3 people 2026-07-10 09:44:02 +08:00
• c5e5099def refactor(visibility): route is_owner through the shared did_matches matcher (#153) (#156) GravireiandGravirei 2026-07-10 06:55:49 +06:00
• cd67718f49 fix(node,git): bound a hung served git with a total-duration timeout (#62) (#165) beardthelionandt 2026-07-09 19:54:59 -05:00
• 6bafaa6dc5 fix(bounties): add tests for claim_bounty repo-read gate (#160) (#169) GravireiandGravirei 2026-07-10 06:39:10 +06:00
• 26bc3f6987 fix(visibility): gate repo-scoped read surfaces on visibility (#120) (#157) GravireiandGravirei 2026-07-08 06:46:19 +06:00
• d00d89ae5b fix(node): gate POST /api/v1/sync/trigger and rate-limit the peer-sync routes (#82) (#161) beardthelionandt 2026-07-07 19:44:55 -05:00
• 67ad2b876c fix(deps): bump crossbeam-epoch to 0.9.20 for RUSTSEC-2026-0204 (#162) (#163) beardthelionandt 2026-07-07 09:46:44 -05:00
• a9b5ba56c9 feat(node): add q= and sort= params to GET /repos feat/repos-search-sort Kevin CodexandClaude Fable 5 2026-07-02 10:36:41 +08:00
• 6cff5286b4 fix(release): build aarch64-musl natively on arm64 runners, replace retired macos-13 (#155) Kevin CodexandClaude Fable 5 2026-07-06 10:39:12 +08:00
• 1a7f1b774c fix(infra/fly): node.toml to single machine (min_machines_running=1) (#154) infra-fly-node-configs Kevin CodexandClaude Opus 4.8 2026-07-05 21:24:47 +08:00
• 5f63f28215 chore(main): release 0.5.0 (#142) v0.5.0 github-actions[bot] 2026-07-05 20:07:23 +08:00
• 06388ec26a feat(gl): sanctioned iCaptcha client flow + secure git lifecycle (#138) Kevin CodexandClaude Opus 4.8 2026-07-05 19:47:06 +08:00
• 2df6ff9d30 fix(node): close two spam-vector root causes (trust upsert + ungated push) (#152) 3 people 2026-07-05 17:31:21 +08:00
• 2620e973e3 fix(repos): log the cause when repo create fails (#103) Mizuki Hayashiandmizuki0x 2026-07-05 11:16:11 +02:00
• e3a20317d5 ci: pin cargo-audit on the blocking gate, float the weekly canary (#151) beardthelionandt 2026-07-05 04:10:45 -05:00
• c296e23678 test(node,git): wire run_git_service teardown end-to-end (#62) (#150) beardthelionandt 2026-07-05 04:10:25 -05:00
• 20d6848846 fix(gl): sign the CLI's /ipfs/pins reads under the #134 auth gate (#146) beardthelionandt 2026-07-05 04:10:02 -05:00
• 4891db3889 fix(node): gate the ref-updates feeds on read visibility (#112, #114) (#143) beardthelionandt 2026-07-05 04:09:15 -05:00
• 6f36fc07b8 fix(node,git-remote): gate receive-pack advertisement, sign client fetch/push (#119) beardthelionandt 2026-07-05 04:08:44 -05:00
• 15e017ad77 fix(node): make creation-route rate limit configurable; fix(gl): surface real errors on pr create failure carlitos973 2026-07-03 07:29:34 -07:00
• 563c456803 fix(node,gossip): route gossip HTTP through the no-redirect client (#93) (#140) beardthelion 2026-07-02 19:13:20 -05:00
• 6c95592d18 fix(node): prefer canonical repo row over mirror row in get_repo (#124) (#141) GravireiandGravirei 2026-07-03 06:12:27 +06:00
• 466a550915 fix(node): gate GET /ipfs/{cid} on reachable allowed-set, not deny-set (#126) (#133) GravireiandGravirei 2026-07-02 06:11:38 +06:00
• 09a0cb23b9 fix(remote): include HTTP error response body (#137) Yang Yuandparanoa233 2026-07-01 21:59:06 +08:00
• cd4680ebeb chore(aws): codify iCaptcha enforce in the EC2 node Terraform (#139) Kevin Codex 2026-07-01 09:55:16 +08:00
• 15e0f4f629 feat(node): add --bulk mode to purge-spam for fast set-based cleanup feat/admin-purge-spam Kevin Codex 2026-07-01 06:28:01 +08:00
• f83c6689ef feat(node): admin purge-spam subcommand for bulk spam-repo cleanup Kevin Codex 2026-06-30 22:11:06 +08:00
• 8d96cab4f7 chore(node): seed Gitlawb nodes in bootstrap-peers; ignore node1 fly config (#132) chore/bootstrap-seed-gitlawb-nodes Kevin Codex 2026-06-30 21:59:56 +08:00
• 0190fbbbf6 chore(main): release 0.4.0 (#131) v0.4.0 github-actions[bot] 2026-06-30 21:09:16 +08:00
• 86341d195d test(node): guard that every repo-scoped handler is visibility-gated (#122) beardthelion 2026-06-30 07:48:03 -05:00
• 8b9ceec25e feat(node): iCaptcha-aware repo propagation gate with quarantine (#125) Kevin Codex 2026-06-30 20:46:54 +08:00
• 12bfb1b3c8 fix(release): use simple release-type + generic Cargo.toml updaters (#130) Kevin Codex 2026-06-30 20:01:42 +08:00
• 788a8686c1 fix(release): give crates explicit versions for release-please (#129) Kevin Codex 2026-06-30 18:24:38 +08:00
• 174f25a206 fix(node): gate GET /ipfs/{cid} on per-caller path-scoped visibility (#110) (#128) beardthelion 2026-06-30 05:16:33 -05:00
• 3f08d9936b Release automation (#127) Kevin Codex 2026-06-30 16:56:58 +08:00
• adc20f9eff feat(node): iCaptcha proof-of-intelligence gate on create_repo + register (#108) Kevin CodexandClaude Opus 4.8 2026-06-30 10:58:08 +08:00
• 828dd279a2 fix(node): gate repo-listing and stats surfaces on visibility (#97, #99, #101, #104) (#111) beardthelion 2026-06-29 19:30:32 -05:00
• 6ae316cc88 fix(node): gate fork_repo on per-caller path-scoped visibility (#98) (#109) beardthelion 2026-06-27 20:01:13 -05:00
• 6809201daa fix(node): anchor the real old_sha and issue a per-ref certificate (#72) beardthelion 2026-06-27 10:16:23 -05:00
• 3e1e9045e4 fix(node): close under-withholding via full ref scope and full-history classification (#42) (#84) beardthelion 2026-06-27 10:15:38 -05:00
• 1960f6b28f ci(triage): label fork PRs and stop auto-closing PRs that only lack an issue link (#107) beardthelion 2026-06-27 10:14:41 -05:00
• abc9ad03ac fix(node): fail closed when a recipient DID can't be resolved (#47) (#67) beardthelion 2026-06-25 21:33:13 -05:00
• 338ff83584 fix(node): skip withheld-walk when no path-scoped rule can withhold (#60) beardthelion 2026-06-25 21:32:43 -05:00
• 636d3abe17 chore(deps): bump tar to 0.4.46 and rand to 0.9.3 to clear advisories (#105) beardthelion 2026-06-25 21:32:09 -05:00
• 2f6611a30f fix(core): zeroize the derived X25519 secret (#65) (#91) beardthelion 2026-06-24 19:31:32 -05:00
• 3e8e333aa0 fix(node): dedupe mirror and canonical repo rows on list surfaces (#6) (#73) beardthelion 2026-06-24 19:25:42 -05:00
• f28fa02236 fix(security): gate webhook creation through the public-host validator (#81) (#92) beardthelion 2026-06-24 19:24:34 -05:00
• 1af4fdf485 feat(node): pin the per-push object delta instead of re-enumerating the whole repo (#90) beardthelion 2026-06-23 22:05:19 -05:00
• 3d880cd56f fix(node): reject malformed path globs with non-trailing or empty-segment wildcards (#74) (#75) beardthelion 2026-06-23 22:04:16 -05:00
• 0a15e763d2 feat(node): owner-only push enforcement behind GITLAWB_ENFORCE_OWNER_PUSH (#31) (#68) 3 people 2026-06-24 11:03:28 +08:00
• 2153b0b7a6 fix(gl): paginate gl-clone Arweave recovery and make /encrypted-blobs parsing schema-strict (#49) (#70) beardthelion 2026-06-23 09:09:17 -05:00
• 96fcfdb1ca fix(node): preserve promisor mirror mode on unknown withheld-paths lookup (#48) (#69) beardthelion 2026-06-23 09:07:53 -05:00
• 9a46e8cbb7 fix(core): zeroize the derived X25519 secret (#65) (#66) fix/zeroize-seed-bytes beardthelion 2026-06-23 09:05:56 -05:00
• c9f43b0105 fix(core): route seed access through the zeroizing wrapper (#41) (#64) beardthelion 2026-06-23 09:05:02 -05:00
• 97d37fd541 Perf/alloc and copy cleanups (#80) Kevin CodexandClaude Opus 4.8 2026-06-23 15:38:18 +08:00
• a8cc33a185 fix(security): reject non-public peer URLs + prune poisoned peers (#78) 3 people 2026-06-23 14:07:14 +08:00
• 2202b0097f feat(node): enforce per-route authorization across the REST and GraphQL surface (#87) beardthelion 2026-06-23 00:16:35 -05:00
• ff492b4521 feat(node): signature-gated agent self-deregister (#29) (#63) beardthelion 2026-06-22 22:41:59 -05:00
• 2d4105e479 chore(deps): bump quinn-proto 0.11.14 -> 0.11.15 (RUSTSEC-2026-0185) (#83) beardthelion 2026-06-22 22:39:18 -05:00
• 803d83efdb fix(node): reap leaked git child processes (#53) (#61) beardthelion 2026-06-22 21:10:17 -05:00
• e4f5e87e0b fix(node): migrate node_seed pin caller to to_seed() beardthelion 2026-06-22 12:14:40 -05:00
• 38e654a289 Merge remote-tracking branch 'origin/main' into fix/zeroize-seed-bytes beardthelion 2026-06-22 11:59:42 -05:00
• 4f814459cc test(core): pin to_seed's Zeroizing return type, drop duplicate round-trip beardthelion 2026-06-22 11:52:38 -05:00
• 7533b74f79 ci: harden PR pipeline (audit, MSRV, beta matrix, release + docker smoke) (#57) beardthelion 2026-06-22 06:02:38 -05:00
• abdc775770 feat(node): blind recipient identities at rest and gate B1 by repo readability (#40) beardthelion 2026-06-22 06:01:19 -05:00
• 3a577613eb feat(infra): Fly configs for node + node2 on the public OSS build Kevin CodexandOpenClaude 2026-06-22 07:25:12 +08:00
• d45318281c fix(core): route seed access through the zeroizing wrapper (#41) beardthelion 2026-06-19 21:57:24 -05:00
• e37ea7fec6 fix(node): enforce path-scoped visibility on the REST read API (#52) beardthelion 2026-06-19 09:53:18 -05:00
• 197c4e1cf1 Add contributor templates, issue forms, and PR triage automation (#58) beardthelion 2026-06-19 09:52:32 -05:00
• a5d2264cc0 ci(release): smoke-test packaged binaries' --version before attaching (#59) 3 people 2026-06-19 22:50:35 +08:00
• 5ff7af84fa feat: encrypted replication for private subtrees (B1/B2/B3) for #18 (#36) beardthelionandCommandCodeBot 2026-06-19 09:48:33 -05:00
• f23e35e188 feat(infra): Fly config for node3 on the public OSS build infra-node3-fly Kevin CodexandOpenClaude 2026-06-19 00:54:18 +08:00
• 8680d0f9d6 feat(node): replication enforcement (Phase 2) for #18 (#34) beardthelionandKevin Codex 2026-06-18 09:51:36 -05:00
• c03c9af8fa feat(sync): auto-register as replica with origin after successful mirror (#56) Kevin CodexandOpenClaude 2026-06-18 22:31:29 +08:00
• 7a8b6c4974 Aws ecr image (#55) Kevin CodexandOpenClaude 2026-06-18 22:05:50 +08:00
• 7a99d0f27c fix(node): make Tigris repo hydration resilient to corrupt archives & failed writes (#54) Kevin CodexandOpenClaude 2026-06-18 21:38:47 +08:00
• c7df6cad20 Fix/backport prod fixes (#39) Kevin CodexandClaude Fable 5 2026-06-18 21:36:11 +08:00
• b61a1bd46f fix(api): blob endpoint returns 400/404 instead of 500 on bad paths (#37) Kevin CodexandClaude Fable 5 2026-06-18 21:35:36 +08:00
• e365a57b51 feat(node): peer partial-mirrors for repos with private subtrees (#35) beardthelion 2026-06-18 08:33:31 -05:00
• 4a59056a90 gl clone: clean partial clone of repos with private subtrees (#33) beardthelion 2026-06-18 08:25:13 -05:00
• 3a401eb079 feat(git-remote-gitlawb): add --version and --help flags (#30) 3 people 2026-06-18 21:13:01 +08:00
• 61b383019f feat(node): subtree content withholding (Phase 3) for #18 (#28) beardthelion 2026-06-18 08:11:46 -05:00
• a2217bff27 fix(infra): drop fly idle_timeout 600 -> 120 (#38) Kevin CodexandClaude Fable 5 2026-06-12 21:55:57 +08:00
• 6abaf1d7ed feat: path-scoped repository visibility (Phase 1) for #18 (#25) beardthelion 2026-06-05 09:42:26 -05:00
• 9e6e832ec5 Infra reorg (#27) Kevin CodexandOpenClaude 2026-06-05 22:38:53 +08:00
• 09a339745e feat: agent profiles (display name, bio, avatar, social links) (#23) 3 people 2026-06-04 01:17:22 -07:00
• 2ce4da9cc5 feat(node): graceful shutdown + Prometheus metrics endpoint (#22) Vasanth TandClaude Opus 4.8 2026-06-02 06:28:05 +05:30
• 927e4d0cfb feat(db): versioned schema migrations with idempotent backfill (#21) Vasanth TandClaude Opus 4.8 2026-06-01 12:12:50 +05:30
• 924bccd8e5 feat(gitlawb-attest): External Attestation v1 for ref-update certs (#20) Achille Wasque 2026-05-31 04:05:28 +02:00
• a9f208a378 Feat/ucan chain validation (#19) R Sundareswaran 2026-05-30 12:14:40 +05:30
• 491978a809 Test/core crypto primitives (#16) R Sundareswaran 2026-05-29 14:12:32 +05:30
• 0b056f3ad0 [codex] fix Dependabot Rust alerts (#15) Vasanth T 2026-05-28 14:14:05 +05:30
• d366fc6b97 [codex] chore: add live-safe OSS readiness pass (#14) Vasanth T 2026-05-28 13:04:47 +05:30
• b12c6bc328 feat: per-DID rate limiting on creation endpoints (10/hour) (#13) Kevin CodexandClaude Opus 4.7 2026-05-27 12:29:02 +08:00