Commit history
- Check DNS on every untrusted relay hop for git imports and syncs, and meter each delivery once on its final outcome.c351567⌁taigrr committed
- Write delivery terminal state atomically, keep the owner's lease through retry backoff, retry rather than drop duplicates, dead-letter on the final attempt, and never overwrite a success in the DLQ.b02c3bd⌁taigrr committed
- Own delivery leases per queue message with terminal deliveries, map receive-pack refusals to refs, retry partial mirrors, safe metering sizes, and treat only global unicast IPv6 as public.6e60ac8⌁taigrr committed
3b3e3db⌁
- Fix mirror refusal mapping, multi-pass screening and fast-path scanning; keep push protection fail-closed for force mirrors; release delivery leases in finally; dedupe metering; widen reserved address ranges; audit after save.961549a⌁taigrr committed
- Route GitHub mirrors through push protection, branch rules and push events with an audited force-mirror opt-in; add DNS-over-HTTPS SSRF checks, per-event delivery leases, per-channel Slack retries and outbound metering.20420f0⌁taigrr committed
- Merge roadmap/mergefixb1edaa2⌁taigrr committed
- Merge roadmap/mcp0835f93⌁taigrr committed
- Merge roadmap/sites5b019ed⌁taigrr committed
- Merge roadmap/integrationsbe7d970⌁taigrr committed
- Merge roadmap/editorf5c6bf8⌁taigrr committed
- Merge roadmap/runnerd0ce09d⌁taigrr committed
- Fetch whole trees in one upload-pack request, cap and retry Artifacts calls per request, and skip Artifacts for repos that are not ready.c5e6e12⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- fixup ui bugsff2db5e⌁taigrr committed
- Index code on first search and after import or fork, and sync every branch and tag from an import's source.dfd86a2⌁taigrr committed
- Retry transient Artifacts reads, return readable download errors, and reserve page names.4762231⌁taigrr committed
- Show uploaded profile pictures everywhere and allow changing them from the profile page.54b389c⌁taigrr committed
- Skip email when no verified sender is configured and keep pending imports alive through transient Artifacts errors.67eb2a4⌁taigrr committed