Commit history for src/server/git
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed
- Harden the git proxy and bridges before deploy: trust only ok'd refs, restrict v2 commands, fail closed on unloadable thin-pack bases, rate-limit before auth, shorten public raw caching, and charge bridged bytes to the head owner (CI-P6, GIT-P4..P7, P9..P12, GIT-14/PR-12).23526ca⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
a360a78⌁
- Accept pushes to scratch repositories only with their scratch push token, and return 422 for case-insensitive duplicate labels.f760be0⌁taigrr committed
- Dispose Artifacts handles that resolve after a call timeout, and release the status-check handle on failure705afe0⌁taigrr committed
- Add AI-suggested pull request titles and descriptions on the compare page for plans that include AI or bring their own key, metered through aiMeter as "pr-describe" on a cheap PR_DESCRIBE_MODEL.33f39b5⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Merge roadmap/integrations95ebb35⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/platformfixa662571⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Merge roadmap/mergefixb1edaa2⌁taigrr committed
- Merge roadmap/integrationsbe7d970⌁taigrr committed
- Merge roadmap/editorf5c6bf8⌁taigrr committed
- Fetch whole trees in one upload-pack request, cap and retry Artifacts calls per request, and skip Artifacts for repos that are not ready.c5e6e12⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Index code on first search and after import or fork, and sync every branch and tag from an import's source.dfd86a2⌁taigrr committed
- Retry transient Artifacts reads, return readable download errors, and reserve page names.4762231⌁taigrr committed
- Merge roadmap/pulls: in-Worker merges, suggestions, auto-merge, merge queue, CODEOWNERS0beb9c3⌁taigrr committed
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
- real git forgebcc398c⌁taigrr committed