golem15/summercms
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,304 Commits 1 Branch 45 Tags
5ce50bedfba58a00a79162d2e3b02f8ea84633d0
Commit Graph

89 Commits

Author SHA1 Message Date
Jakub Zych
3ce8a36742 docs(quick-261104-fx1): min/max length on text fields and pl validation messages 2026-11-04 11:48:41 +01:00
Jakub Zych
617eaef78e docs: capture todo - Enforce min/max length on text fields in lagoon.Validate 2026-11-04 11:05:55 +01:00
Jakub Zych
399efed845 docs(20): review disposition after the gap closure 
- CR-01, CR-02, CR-03, WR-01, WR-04 and WR-05 fixed, with commits, tags
  and the live checks of release 195aa213c546
- WR-02, WR-03, WR-06 and IN-01 to IN-09 deferred, one todo each
 2026-11-03 23:07:32 +01:00
Jakub Zych
d6f490a9ab docs(20-02): close the sm-demo-app journal/oauthserver pointer todo 
Already done by sm-demo-app 2133309 and 5ec5941 (oauthserver v0.1.6,
journal v0.2.6).
 2026-10-30 18:37:35 +01:00
Jakub Zych
e51df97db8 docs(quick-261029-1r3): derive the summercms.io landing version from go.mod, close its todo 2026-10-29 01:32:38 +01:00
Jakub Zych
83a952a74b docs: capture todo - Stream-aware previous/next links on the summercms.io changelog 2026-10-29 00:05:21 +01:00
Jakub Zych
545c0b4350 docs: record the version-format decision on the landing-version todo 2026-10-29 00:05:08 +01:00
Jakub Zych
13aa5f3227 docs: capture todo - Derive the summercms.io landing version from go.mod 2026-10-28 23:41:08 +01:00
Jakub Zych
860c41d829 docs(quick-batch-261028-rqa): 6 framework items complete, close their todos, record follow-ups 2026-10-28 21:51:41 +01:00
Jakub Zych
202d38ba3c docs(quick-261028-rqd): record the console info findings as fixed and the earlier gates' consumer names as a todo 2026-10-28 20:57:22 +01:00
Jakub Zych
825a3fd2da docs(quick-261028-r16): close the two lagoon todos, record the fonoteka.go and S3 follow-ups 2026-10-28 19:47:44 +01:00
Jakub Zych
8c9c967c88 docs: close todo and debug session - user logout leaves the session cookie valid 2026-10-28 19:24:43 +01:00
Jakub Zych
1a487bc644 docs(quick-261028-pq8): fix the four internal/build scaffolder todos 2026-10-28 19:18:29 +01:00
Jakub Zych
2bef465ecd docs: capture todo - make:plugin drops the vendor namespace 2026-10-28 18:24:53 +01:00
Jakub Zych
bd23a82f22 docs(todos): close FAQ port, site-cache purge, sitemap XSLT; drop sitemap port 2026-10-28 13:19:06 +01:00
Jakub Zych
1769e15fbd docs(19.6): record code review disposition and the WR-05 todo 2026-10-26 16:43:41 +01:00
Jakub Zych
a70dbb6ff0 docs(todos): link two 19.6 todos to their g15office tasks 2026-10-26 15:36:59 +01:00
Jakub Zych
07f4632dc2 docs(19.6): v0.1.1 release recorded, finding F-1 deferred 
- security review: T-19.6-37 closed by sm-mfa-plugin v0.1.1, F-1 deferred
  with the corrected reason for the activate-by-code mint path
- validation map: plan 04 Tasks 5 and 6 green
- todo for F-1; deferred items: tag message resolved, F-1 deferred
 2026-10-26 15:34:38 +01:00
Jakub Zych
d3b1636ac7 docs(19.6-03): complete WebAuthn and adoption plan 
sm-demo-app mounts golem15.mfa v0.1.0 at user v0.1.12, sociallogin v0.1.4
and the two-factor UI (0eb1f60..bb24207, pushed with the 19 earlier
commits as 18597e5..bb24207, not deployed). The summary records the
"proceed" reply, the push checks and the tests. deferred-items.md gains the
private sm-mfa-plugin repository's effect on the demo's release build, and
a pending todo tracks the demo's leftover journal and oauthserver moves.
 2026-10-26 13:47:45 +01:00
Jakub Zych
4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed 
- 19.7-SECURITY-REVIEW.md: T-19.7-01..41 and T-19.7-SC with file, line and
  pinning test; two production fixes (c49983d, 1111828); superuser reach
  accepted as designed with audit and ceiling
- 19.7-SECURITY.md: threats_open 0, accepted risks AR-19.7-01..05
- the frontend permission and account link todos move to todos/done with
  their closing notes
 2026-10-23 14:29:56 +02:00
Jakub Zych
e2759d668f docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send 2026-10-23 00:25:24 +02:00
Jakub Zych
e5dd4579a8 docs: fill item 8 in the external-escalation reply 2026-10-23 00:10:27 +02:00
Jakub Zych
a9e3f2434d docs: tune item 8 password-routes quick after item 7 2026-10-22 23:53:43 +02:00
Jakub Zych
6a1974c0d2 docs: fill item 7 in the external-escalation reply 2026-10-22 23:45:20 +02:00
Jakub Zych
ec69f547b8 docs: tune item 7 cookie quick after 9-10 2026-10-22 23:14:09 +02:00
Jakub Zych
e9ebf93d36 docs(quick-261022-vfz): user-plugin /login throttle via surf.ClientIP and whole-second tokens_valid_after writers 2026-10-22 23:08:04 +02:00
Jakub Zych
c309a1abe9 docs: tune items 9-10 quick after G4 2026-10-22 22:37:41 +02:00
Jakub Zych
575a110378 docs: fill G4 in the external-escalation reply 2026-10-22 22:36:19 +02:00
Jakub Zych
b8bf71c5dd docs: fold G3 leftovers into G4 and login-cookie quicks 2026-10-22 22:00:09 +02:00
Jakub Zych
b70abe48e6 docs: fill G3 in the external-escalation reply 2026-10-22 21:46:10 +02:00
Jakub Zych
3ebd78373c docs: hold user-plugin escalations for SummerCMS v0.5.0 2026-10-22 21:37:57 +02:00
Jakub Zych
76694c7cb9 docs: fill G2 in the external-escalation reply 2026-10-22 21:36:43 +02:00
Jakub Zych
66bb96eebd docs: capture six user-plugin escalation quicks 2026-10-22 21:04:34 +02:00
Jakub Zych
422bd1e01f test(19.6.1): complete UAT - 24 passed, 1 issue 2026-10-22 13:17:34 +02:00
Jakub Zych
88ec4df2b3 docs(todo): user logout fix released in sm-user-plugin v0.1.8 2026-10-22 10:45:14 +02:00
Jakub Zych
ee5b8844bf docs(todo): user logout bug confirmed, fixed in the plugin and the demo frontend 2026-10-22 04:57:09 +02:00
Jakub Zych
1e9927fa4b docs(19.8): map phase and its todos to g15office tasks 2026-10-22 04:41:51 +02:00
Jakub Zych
f5e9ee508b docs(todo): user plugin logout leaves the session cookie valid 2026-10-22 04:21:27 +02:00
Jakub Zych
a48afbd11e docs(19.8): re-review fixes recorded, IN-10..IN-13 and the exit-130 suggestion deferred 2026-10-22 04:10:42 +02:00
Jakub Zych
d311d029c3 docs(19.8): review fixes recorded, info findings captured as a todo 
- CR-01..CR-03 and WR-01..WR-08 fixed with their commits (19.8-05)
- IN-01..IN-09 deferred to one pending todo (minor, framework)
 2026-10-22 02:43:48 +02:00
Jakub Zych
c1f5ded59d docs: capture todo - Quiet plugin boot logs on console commands like --help 2026-10-21 15:34:02 +02:00
Jakub Zych
99b6df44d6 docs(19.5): record the email-proof release and close its todo 2026-10-21 15:33:05 +02:00
Jakub Zych
ff0e3a6c69 docs(19.5): record the last UAT answers (prohibitions, CR-02 wording) 2026-10-21 15:06:40 +02:00
Jakub Zych
e819f7b865 docs(19.5): link the email-proof release todo to g15office sqnwn1zi 2026-10-21 14:53:11 +02:00
Jakub Zych
20ecc4167d docs(19.5): capture the email-proof release todo 2026-10-21 14:51:30 +02:00
Jakub Zych
80fae5c279 docs(19.8): close the duplicate command names todo 2026-10-21 12:13:29 +02:00
Jakub Zych
52f17e41fc docs(19.5): capture the OAuth password-bootstrap todo 2026-10-21 01:28:24 +02:00
Jakub Zych
464f7fa0bb docs(19.5): close user-plugin console database todo 2026-10-20 23:07:22 +02:00
Jakub Zych
c1ae1bb571 docs(todos): link the purge-env consumer todo to g15office az6inuma 2026-10-20 22:48:48 +02:00
Jakub Zych
95ae878bd3 docs(todos): purge token rename follow-up for grzybyfunkcjonalne 2026-10-20 21:14:35 +02:00