Commit history
- Treat a missing root viewer as signed out so SSR error and pending renders no longer crash SiteHeader on context.viewer being undefined5329a59⌁taigrr committed
- Remove the security review and triage docs now that every finding is closed, keep operator contacts out of the repo (ABUSE_FORWARD_TO is a secret, ADMIN_EMAIL is unset), and drop the private go-live checklist16fdec6⌁taigrr committed
- Answer go get discovery (?go-get=1) with a go-import tag so gitfor.dev/<owner>/<repo> works as a Go module path543e945⌁taigrr committed
- Clean oxlint: name the magic numbers, render the 2FA QR code as an img, and split the webhook and metering tests around shared harnesses2707fe2⌁taigrr committed
- Show a new avatar everywhere right after upload, and switch PostHog to a first-party cookie so session replay can run, with the cookie and privacy pages updated to match60ec83b⌁taigrr committed
- Forward the forge origin (never the page path) to PostHog so session replay's authorized-domain check passes13a0bc2⌁taigrr committed
- Disclose PostHog session recording in the privacy and cookie policies, and describe analytics as collected without cookies rather than claiming nothing at all is stored6b5723c⌁taigrr committed
- Merge fix/verify-gate25d807bf⌁taigrr committed
- Let unverified accounts open the billing portal to cancel or update the card, and fix the rate limiter test fixture for the verified-write guard64b0cda⌁taigrr committed
- Merge fix/verify-gatec201dc1⌁taigrr committed
- Merge fix/ratelimit-doca717c8⌁taigrr committed
- Cap PBKDF2 at the 100,000 iterations Workers supports so sign-up works, and drop the operator's postal address from the legal pagesb4e1b7d⌁taigrr committed
- Launch Sites custom domains on gitforstatic.dev: SaaS zone, catch-all route, show customers the CNAME target, reserve the fallback host name, and keep the forge app off every host but its own5f8a63e⌁taigrr committed
- Production resource ids for gitfor.dev, route abuse+tag@ subaddresses to the abuse desk, and go-live steps for inbound mail routing9d013f2⌁taigrr committed
6c14c6d⌁
- Deploy each commit to a Sites preview once when a pull request runs on both push and pull_request, and store the head branch ref on pull request deployments9871ba2⌁taigrr committed
- Merge feat/remove-pages1823e11⌁taigrr committed
- Merge feat/sites-pr-runs580ed3e⌁taigrr committed
- Production config for gitfor.dev: forge route, legal and contact addresses, billing and analytics vars; add a /support page; reserve every route, footer page and raw handler prefix as an account name; go-live checklist.8db9bc9⌁taigrr committed
- Merge fix/ci3 burst guard1bfa25e⌁taigrr committed
- Merge fix/billing2 follow-upfb432fa⌁taigrr committed
- Merge fix/ci3a0c75b6⌁taigrr committed
- Merge fix/billing27151d48⌁taigrr committed
- Merge fix/ci2e5d0622⌁taigrr committed
- Merge fix/abuse203118c2⌁taigrr committed
- Merge fix/do24b4a1d9⌁taigrr committed
- Merge fix/takedown228a0416⌁taigrr committed
- Merge fix/abuse6c55473⌁taigrr committed
- Merge fix/do guardaeb217a⌁taigrr committed