Commit Graph

Select branches

Hide Pull Requests

285

backup/173-unpushed

bug_fix_2

chore/bootstrap-seed-gitlawb-nodes

ci/targeted-pr-checks

codex/b1a-mirror-persistence

feat/admin-purge-spam

feat/commit-status-surface

feat/real-node-deny-harness

feat/repos-search-sort

feat/storage-abstraction

feat/ucan-push-authorization

feat/upstream-mirror-worker

feat/write-sink-brake-coverage

fix/227-icaptcha-insecure-parse

fix/234-release-publish-environment-gate

fix/341-bounty-mutation-gates

fix/344-remove-label-canonicalization

fix/350-timestamp-slice-panics

fix/357-gl-doctor-exit-status

fix/360-attest-didkey-bound

fix/477-bounty-stats-visibility

fix/bound-preauth-signature-body

fix/claim-task-assignee-integrity

fix/doctor-probes-transport-node

fix/fork-repo-path-validation

fix/gossip-replay-bound

fix/graphql-mutation-fence

fix/graphql-query-cost-bounds

fix/h2-unbounded-data-frames

fix/helper-refuses-plaintext-remote-node

fix/icaptcha-insecure-seam-coverage

fix/issue-115-sign-gated-reads

fix/issue-117-multiround-fetch-deadlock

fix/issue-123-client-read-status-check

fix/issue-218-reconciliation-sweep-v2

fix/issue-26-split-2-arweave-transport

fix/issue-26-split-3-cert-compat

fix/issue-26-split-4-config-policy

fix/issue-338-public-read-messaging

fix/issue-345-icaptcha-stdin-overflow

fix/issue-358-check-created-overflow

fix/issue-369-delete-push-hang

fix/issue-370-view-url-404

fix/issue-398-hex-sha-validation

fix/issue-400-silent-empty-results

fix/issue-413-gl-scheme-check

fix/issue-417-nonutf8-mirror-path

fix/issue-419-recipient-scan-cap

fix/issue-426-issue-read-errors

fix/issue-435-replica-visibility

fix/issue-496-create-task-repo-gate

fix/issue-509-cert-threshold-did-canonical

fix/list-refs-canonical-slug

fix/node-add-response-missing-hash

fix/p2p-key-ownership

fix/path-traversal-codeql-4

fix/peers-ledger-248-writers

fix/reject-small-order-ed25519-keys

fix/satisfies-threshold-tolerant-scan

fix/sweep-sourceless-legacy-pins

fix/task-read-visibility-gate

fix/triage-detect-namespaced-test-attrs

fix/verify-all-lenient-require-all

fix/zeroize-seed-bytes

infra-fly-node-configs

infra-node3-fly

main

pr-219

recreate-376-fix-git-clone-positional-delimiter

recreate-409-codex-fix-federated-response-bounds

recreate-410-codex/fix-identify-address-bounds

release-please--branches--main--components--gitlawb-node

test/replay-guards-253

#1

#10

#103

#105

#107

#108

#109

#11

#111

#113

#119

#12

#122

#125

#127

#128

#129

#13

#130

#131

#132

#133

#134

#137

#138

#139

#14

#140

#141

#142

#143

#145

#146

#148

#148/merge

#149

#15

#150

#151

#152

#154

#155

#156

#157

#158

#159

#159/merge

#16

#161

#163

#165

#168

#169

#170

#173

#174

#180

#181

#182

#184

#186

#188

#19

#192

#193

#193/merge

#194

#194/merge

#195

#196

#196/merge

#198

#20

#200

#202

#209

#21

#213

#214

#215

#219

#22

#221

#223

#224

#229

#23

#230

#233

#235

#236

#237

#24

#240

#241

#243

#244

#245

#246

#247

#248

#249

#25

#254

#255

#261

#261/merge

#262

#267

#27

#274

#275

#276

#276/merge

#277

#28

#280

#281

#285

#286

#290

#292

#297

#297/merge

#298

#3

#30

#304

#304/merge

#306

#307

#307/merge

#309

#311

#312

#314

#318

#320

#321

#324

#325

#326

#327

#33

#330

#331

#331/merge

#332

#333

#334

#335

#337

#34

#346

#347

#35

#36

#362

#362/merge

#363

#363/merge

#365

#366

#368

#37

#372

#372/merge

#375

#376

#377

#379

#38

#381

#382

#383

#384

#384/merge

#385

#386

#388

#39

#390

#391

#392

#392/merge

#394

#394/merge

#396

#4

#40

#401

#402

#402/merge

#403

#403/merge

#404

#405

#405/merge

#406

#407

#408

#409

#410

#412

#414

#414/merge

#433

#434

#437

#437/merge

#438

#438/merge

#439

#440

#441

#442

#443

#443/merge

#444

#445

#447

#448

#453

#455

#456

#457

#458

#458/merge

#459

#459/merge

#46

#460

#462

#463

#464

#465

#466

#483

#495

#497

#498

#498/merge

#5

#512

#514

#515

#516

#517

#518

#519

#519/merge

#52

#520

#521

#523

#524

#525

#526

#527

#528

#529

#530

#532

#533

#535

#536

#537

#538

#539

#54

#540

#541

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#551/merge

#552

#553

#553/merge

#554

#554/merge

#555

#555/merge

#56

#57

#58

#59

#60

#61

#63

#64

#66

#67

#68

#69

#7

#70

#72

#73

#75

#78

#79

#79/merge

#8

#80

#83

#84

#87

#9

#90

#91

#92

v0.3.9

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.7.0

v0.7.1

Mono Color

• c5d2dbc0a9 ci(release): surface missing-asset errors from the formula sha() subshell beardthelion 2026-09-13 13:42:51 -05:00
• d02bb320f0 ci(release): assert the pinned npm version took effect beardthelion 2026-09-13 13:42:15 -05:00
• 57968b05d5 ci(release): make the resolver test's gh stub discriminate on the full call beardthelion 2026-09-13 13:40:14 -05:00
• c55fec59a5 ci(release): freeze docker moving tags on dispatch, retire the registry floor beardthelion 2026-09-13 13:35:50 -05:00
• 9be99aa7a4 Address PR review feedback (#448) beardthelion 2026-09-13 12:52:24 -05:00
• a4da137d11 fix(node): gate id-keyed bounty mutations on repo read before status checks beardthelion 2026-09-13 12:02:46 -05:00
• 7c33483b04 Address PR review feedback (#447) beardthelion 2026-09-13 10:44:58 -05:00
• 7c88dc202b Address PR review feedback (#447) beardthelion 2026-09-13 10:32:55 -05:00
• 55a6a2ac2f ci(release): base64 release-asset names in the resolver map beardthelion 2026-09-13 09:29:18 -05:00
• 64c4ea5f7a ci(release): force bash for the release-binaries resolver step beardthelion 2026-09-13 09:24:38 -05:00
• 73d560ebfb ci(release): bind the tag to the commit its release was created against beardthelion 2026-09-13 09:23:03 -05:00
• 1a9f51f290 ci(release): run the resolver on the producer path and hash homebrew inputs locally beardthelion 2026-09-13 09:20:07 -05:00
• ab0a32ef4f ci(release): pin the verified commit and the exact asset bytes end to end beardthelion 2026-09-13 09:11:41 -05:00
• e005dda59c ci(release): require backfill release assets to be automation-uploaded beardthelion 2026-09-13 09:03:30 -05:00
• 7d9b6e1ad8 ci(release): anchor docker moving tags to the registry floor, not the release pointer beardthelion 2026-09-13 09:01:06 -05:00
• 0742c671ec ci(release): check release author, decide npm dist-tag per package, close the test gap beardthelion 2026-09-13 08:56:38 -05:00
• a219ed11b8 ci(release): qualify the provenance compare and fail closed on npm lookup errors beardthelion 2026-09-13 08:51:51 -05:00
• 7b8e18219c ci(release): gate every job on the release environment and verify tag provenance beardthelion 2026-09-13 08:48:02 -05:00
• 7ef1b9cb8d ci(release): qualify tag checkouts and keep moving tags forward-only beardthelion 2026-09-13 08:40:20 -05:00
• 65140370c3 ci(release): gate publish jobs on the release environment, anchor the tag check, pin npm beardthelion 2026-09-13 08:29:05 -05:00
• ec3af1c30c test(node): assert denial bodies leak no replica or repo data beardthelion 2026-09-11 15:06:18 -05:00
• 8eb62e6fde fix(icaptcha): return unsolved instead of blocking or overflowing beardthelion 2026-09-11 14:16:38 -05:00
• 7eb2868c56 fix(node): gate replica register/unregister on repo read visibility beardthelion 2026-09-11 14:22:14 -05:00
• d6ffeaf9fa docs(gl): the guard is stricter than the helper's, not identical fix/issue-413-gl-scheme-check beardthelion 2026-09-11 13:02:32 -05:00
• 5f74e95262 fix(git-remote): frame signed pushes correctly, cert before options and no command list beardthelion 2026-09-11 13:02:24 -05:00
• 935d98544d refactor(gl): run the transport guard before request construction beardthelion 2026-09-11 12:31:04 -05:00
• 07b8234b9b fix(gl): judge the client's build-time proxy state, and prove the env tests run beardthelion 2026-09-11 12:14:49 -05:00
• 9ed392f91f fix(gl): refuse signed loopback http when a proxy carries it off-machine beardthelion 2026-09-11 11:53:28 -05:00
• 0a82f28251 fix(git-remote): consume negotiated push-options and push-cert sections beardthelion 2026-09-11 11:53:20 -05:00
• 6db7285194 fix(git-remote): stop waiting on EOF for a delete-only push beardthelion 2026-09-11 11:10:44 -05:00
• 8def1cae7b fix(gl): refuse signed requests to a plaintext remote beardthelion 2026-09-11 11:18:08 -05:00
• 9a8ddc96e9 fix(core): reject over-cap recipient lists at seal too beardthelion 2026-09-11 10:10:19 -05:00
• ecee615adf fix(core): cap the blinded recipient scan in open_blob beardthelion 2026-09-11 02:21:00 -05:00
• 5da280b6ff fix(node): propagate for-each-ref failures in resolve_issue_id fix/issue-426-issue-read-errors beardthelion 2026-09-10 23:08:58 -05:00
• f2b6cebdc1 fix(node): propagate for-each-ref failures in list_issues beardthelion 2026-09-10 22:56:25 -05:00
• b5048f749f fix(node): read issue refs via cat-file --batch on stdin, resolve absence by enumeration beardthelion 2026-09-10 22:00:08 -05:00
• 227246fa11 test(gl): cover a non-UTF-8 TMPDIR end to end via a child process beardthelion 2026-09-10 21:29:26 -05:00
• d7da6aa159 fix(node): distinguish missing ref from probe failure in store::log fix/issue-400-silent-empty-results beardthelion 2026-09-10 21:29:26 -05:00
• 326f5e55ac fix(node): bound issue ref names and propagate rev-parse probe failures beardthelion 2026-09-10 21:29:25 -05:00
• 49eb7d5a89 docs: drop the stale private-read priority entry beardthelion 2026-09-10 21:29:16 -05:00
• bbf2f876c8 fix: warn or error instead of returning silent empty results beardthelion 2026-09-10 19:17:16 -05:00
• 4fa108160a fix(node): split absent ref from unreadable object in issue reads beardthelion 2026-09-10 19:14:41 -05:00
• 5cf3e8c7e5 fix(node): reconcile public-read messaging with per-repo enforcement beardthelion 2026-09-10 19:17:24 -05:00
• c674f520ed fix(gl): pass the mirror temp path to git as an OS string beardthelion 2026-09-10 17:17:49 -05:00
• f9942ee710 fix(node): validate ref-update SHAs are hex, not just length 40 beardthelion 2026-09-10 17:17:49 -05:00
• 6603d051e1 fix(ci): bound the \u{ escape scan to prevent quadratic stall beardthelion 2026-09-09 23:50:46 -05:00
• a1065189c1 fix(ci): recognize char literals so their contents cannot open string state beardthelion 2026-09-09 23:47:55 -05:00
• 5fca9f0ab3 test(core): generate body nonces with OsRng in poisoned-envelope fixtures beardthelion 2026-09-09 13:41:53 -05:00
• 26cdedc74d test(node): clear CodeQL alert and restore gossip readiness tests feat/real-node-deny-harness beardthelion 2026-09-09 13:32:18 -05:00
• ad824573b1 test(core): use Default::default() for zero-point fixtures flagged by CodeQL beardthelion 2026-09-09 13:21:20 -05:00
• 050dd4f829 fix(node): complete federation review follow-ups euxarist 2026-09-09 01:29:06 -04:00
• cfa69cae91 fix(node): Bound federation latency and preserve truncated peer pages. euxarist 2026-09-08 20:32:55 -04:00
• d800f0870c fix(ci): skip test attributes inside raw strings, block comments, and strings beardthelion 2026-09-08 10:32:14 -05:00
• 1b5cb7d0be test(gl): count the MCP tool list at 41 with ucan_import feat/ucan-push-authorization Vasanthdev2004 2026-09-08 20:39:43 +05:30
• e3314c611c fix(gl,core): sanitize token-derived output, prove the publish step, add MCP import Vasanthdev2004 2026-09-08 20:34:14 +05:30
• 8b91f2841a fix(gl): store one repository per imported delegation; pin the two-gate composition Vasanthdev2004 2026-09-08 20:26:19 +05:30
• fb831b1037 docs: state the two gates a delegated push crosses, and finish the sweep Vasanthdev2004 2026-09-08 20:24:45 +05:30
• 1da425158a fix(core,gl): bound every proof-chain walk and make verify report the chain Vasanthdev2004 2026-09-08 18:02:22 +05:30
• f3acd33f01 test(git-remote): clear the insecure-HTTP override in the fetch harness fix/helper-refuses-plaintext-remote-node beardthelion 2026-09-08 00:01:42 -05:00
• efdd3ce45b fix(node): tighten identity-key parent-dir reload mask and add owner-push socket coverage beardthelion 2026-09-07 23:07:43 -05:00
• 4dc62b21ca fix(node): drop repo_capability_matches, orphaned by the shared push rule Vasanthdev2004 2026-09-08 09:25:31 +05:30
• 02fba70bc6 fix(node): validate the fork name before spending the proof beardthelion 2026-09-07 22:54:52 -05:00
• d58da1e6d2 fix(git-remote): bypass the proxy for a loopback node beardthelion 2026-09-07 22:53:22 -05:00
• f79309b63c fix(core,node,gl,git-remote): one definition of a usable push capability Vasanthdev2004 2026-09-08 09:02:45 +05:30
• d0ce3176d1 test(node): restructure deny-harness fixtures to clear CodeQL alerts beardthelion 2026-09-07 22:26:50 -05:00
• 12e68e5463 fix(git-remote): refuse a plaintext node off this machine unless opted in beardthelion 2026-09-07 22:01:10 -05:00
• a7257dce20 fix(node): hold fork to the same repo-name rules as every other creation route beardthelion 2026-09-07 20:19:17 -05:00
• 950698a788 fix(node): strict owner lengths, sign-before-hash on #26 split 2/4 Gravirei 2026-09-07 13:13:59 +06:00
• 48ec0c579b fix(node): propagate federated peer truncation euxarist 2026-09-07 02:50:27 -04:00
• bb8aff3ea8 fix(node): bound federated repository aggregation euxarist 2026-09-07 02:42:56 -04:00
• 0e5a1608e2 feat(node): persist upstream mirror configuration and transition state (#538) 3 people 2026-11-07 03:50:15 +00:00
• 37947208c5 docs: state that GITLAWB_ENFORCE_OWNER_PUSH defaults to true (#537) beardthelionandGravirei 2026-11-07 00:38:41 +00:00
• 5ed3381a6b fix(gl): truncate node-supplied display strings at a char boundary (#350) (#536) beardthelion 2026-11-06 20:38:05 +00:00
• 9b915b09a7 fix(attest): bound did:key method-id length before base58 decode (#360) (#535) beardthelion 2026-11-06 18:14:06 +00:00
• 77ac1037cb fix(icaptcha-client): parse GITLAWB_ICAPTCHA_INSECURE as truthy only (#227) (#533) 3 people 2026-11-06 17:26:16 +00:00
• db98b3957a fix(attest): make verify_all lenient under RequireAll (#359) (#532) 3 people 2026-11-06 16:54:42 +00:00
• 8c9e4adc2d fix(node): canonicalize and 404-on-no-match in remove_label (#344) (#530) beardthelionandAyush7614 2026-11-06 15:08:34 +00:00
• 8eedb935c3 fix(node): gate bounty mutations on repo read before status checks (#529) beardthelion 2026-11-06 15:06:01 +00:00
• 47c6e6ce22 fix(node): fail pin_git_object when the add response carries no Hash (#528) beardthelion 2026-11-06 06:32:13 +00:00
• 317a1550c2 fix(node): scope bounty aggregates to anonymously-listable repos (#477) (#527) beardthelionandMystic 2026-11-06 03:06:15 +00:00
• 30637193a6 fix(node): resolve issue ids from git refnames, not request input (#526) JATMNandClaude Opus 5.5 2026-11-06 03:04:20 +00:00
• a23c81d75a fix(deps): bump follow-redirects and override ws in scripts/ (#525) JATMNandClaude Opus 5.5 2026-11-06 01:00:41 +00:00
• 5bb61cc97f ci(release): verify release provenance for backfill publishes (#523) beardthelion 2026-11-05 21:51:35 +00:00
• 2c341f71ac fix(node): ANS-104 codec and recovery policy types (#26 split 2/4) (#524) beardthelionandGravirei 2026-11-05 21:12:46 +00:00
• 911be4d9fe fix(node): validate ref-update SHAs are hex, not just length 40 (#433) beardthelion 2026-11-05 16:57:42 +00:00
• df87b150fd fix(gl): pass the mirror temp path to git as an OS string (#434) beardthelion 2026-11-05 16:52:25 +00:00
• 0366f18458 fix(node): reconcile public-read messaging with per-repo enforcement (#439) beardthelion 2026-11-05 16:46:47 +00:00
• c2e175d222 fix(git-remote): stop waiting on EOF for a delete-only push (#442) beardthelion 2026-11-05 16:39:29 +00:00
• cd27756134 ci(triage): match test as a name segment, not just a whole component (#277) beardthelionandKevin Codex 2026-11-05 16:33:22 +00:00
• 5479fd59b8 fix(icaptcha): return unsolved instead of blocking or overflowing (#444) beardthelion 2026-11-05 16:01:31 +00:00
• 131bb95c68 fix(node): scope the refs listing by the canonical repo slug (#388) beardthelion 2026-11-05 15:40:50 +00:00
• 0303222eae fix(node): gate replica register/unregister on repo read visibility (#445) beardthelion 2026-11-05 15:20:09 +00:00
• 2450bbd9e9 fix(core): cap the blinded recipient scan in open_blob (#419) (#440) beardthelion 2026-11-05 05:24:52 +00:00
• c97695a259 Add a completeness fence over the GraphQL mutation surface (#219) beardthelion 2026-11-05 04:43:52 +00:00
• 6b2c53bbb8 fix(gl): status-check the client read/write surfaces so a node denial surfaces as an error, not a fake result (#123) (#186) beardthelionandKevin Codex 2026-11-05 04:20:10 +00:00
• fc87586411 fix(node): hold fork to the same repo-name rules as every other creation route (#412) beardthelion 2026-11-05 03:53:40 +00:00
• 288ad92fe8 fix(node): bound the request body the signature middleware buffers before it verifies (#262) beardthelionandKevin Codex 2026-11-05 03:10:35 +00:00
• 86c544a577 fix(core): reject small-order Ed25519 keys at DID resolution and before X25519 (#314) beardthelion 2026-11-05 01:49:28 +00:00
• 206e0827ad fix(node): bound replay of authenticated gossip ref-update events (#334) beardthelionandKevin Codex 2026-11-04 23:04:03 +00:00
• 421f03ac46 fix(node): reject revision syntax in issue ids and drop service passthrough (#521) 3 people 2026-11-04 22:44:09 +00:00