Commit history for src/server/git/proxy.ts
- Security (GIT-A1..A6, A9..A12, AZ-A3): gate fork PR bridging on live author access, fork-of-base heads only, revocation sweep on collaborator/org removal; tag protection on release create/delete and tag creation; compare and PR 'since' reachability; enforce_admins fails closed on unverifiable pushes; RFC 5987 archive names; per-caller LFS transfer limiter; safeDecode; paged hidden-ref cleanup; reach cache generationsf3b9112⌁taigrr committed
- Merge roadmap/integrations95ebb35⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
7f485b4⌁
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
- real git forgebcc398c⌁taigrr committed