Commit history for src/server/git
- Security: INT-A21 bind browser-minted editor tokens to the forge session; INT-A22 validate room paths before they enter the shared doc and cap control frames; INT-A7/A8 preview header allow-list extracted with testsb13650b⌁taigrr committed
- Security: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root imagef2e2275⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Merge roadmap/integrations95ebb35⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/platformfixa662571⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Merge roadmap/mergefixb1edaa2⌁taigrr committed
- Merge roadmap/integrationsbe7d970⌁taigrr committed
- Merge roadmap/editorf5c6bf8⌁taigrr committed
- Fetch whole trees in one upload-pack request, cap and retry Artifacts calls per request, and skip Artifacts for repos that are not ready.c5e6e12⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Index code on first search and after import or fork, and sync every branch and tag from an import's source.dfd86a2⌁taigrr committed
- Retry transient Artifacts reads, return readable download errors, and reserve page names.4762231⌁taigrr committed
7f485b4⌁
- Merge roadmap/pulls: in-Worker merges, suggestions, auto-merge, merge queue, CODEOWNERS0beb9c3⌁taigrr committed
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
- real git forgebcc398c⌁taigrr committed