This website requires JavaScript.
caa5b5d8ff
fix(19.3-06): refuse protected uploads into a public_url bucket (WR-07)
2026-10-15 22:30:00 +02:00
f705343904
fix(19.3-06): api-docs CSP allows only nonce-carrying scripts (WR-06)
2026-10-15 22:28:34 +02:00
85d8b6a85a
fix(19.3-06): zero CookieConfig writes SameSite=Lax and Secure (WR-09)
2026-10-15 22:27:31 +02:00
4dae8331c5
fix(19.3-06): production refuses an inferred insecure token cookie (WR-05)
2026-10-15 22:26:43 +02:00
e32940d90f
fix(19.3-06): credentialed CORS refuses wildcard-host and unanchored origins (WR-04)
2026-10-15 22:25:43 +02:00
072353663e
fix(19.3-06): cors:<profile> headers on every response of the route (CR-01)
2026-10-15 22:24:08 +02:00
e9ad640999
docs(19.3): state after gap closure planning
2026-10-15 21:21:00 +02:00
94d9344cdd
docs(19.3): revise gap closure plan 06 after checker feedback
2026-10-15 21:19:55 +02:00
629e75f152
docs(19.3): create gap closure plan 06 (CR-01, WR-01..WR-09)
2026-10-15 21:12:58 +02:00
ebdd896d82
docs(19.3): add phase verification report (gaps found)
2026-10-15 20:28:18 +02:00
6cd29eae35
docs(19.3): record code review disposition
2026-10-15 20:18:44 +02:00
1ec6aa4364
docs(19.3): add code review report
2026-10-15 20:18:33 +02:00
f80e2e8636
docs(19.3-05): state and roadmap after the v0.1.27 release
2026-10-15 20:10:23 +02:00
03a9d1f7f1
docs(19.3-05): complete unit tests, phase gate and release plan
2026-10-15 20:09:46 +02:00
9921768bbf
docs(19.3-05): summary through Task 6 and the release sheet; state at the Task 7 checkpoint
2026-10-15 20:02:00 +02:00
8f5325300c
docs(19.3-05): validation map filled, wave 0 complete
2026-10-15 19:56:21 +02:00
f57fc12a78
test(19.3-05): gate plugins, layers and docs stages
2026-10-15 19:56:21 +02:00
78ba385793
test(19.3-05): cooler caches, rate-limit parity, Install and after-commit purge
2026-10-15 19:49:34 +02:00
b139651674
docs(19.3-05): record the miniredis checkpoint reply
2026-10-15 19:41:38 +02:00
df7db6cfc2
docs(19.3-05): log S3 object content-type observation in deferred items
2026-10-15 19:37:44 +02:00
38f6d65c09
test(19.3-05): build tags, S3 tag guard, DiskExtension and public_url
2026-10-15 19:37:35 +02:00
055f51c94f
test(19.3-05): surf CORS, profiles, api-docs and store lookup; cabana reorder hook
2026-10-15 19:30:52 +02:00
619916b5d2
test(19.3-05): phase gate with bouncer cookie and Turnstile unit suites
2026-10-15 19:24:32 +02:00
6035ccc194
docs(19.3-04): record plan 04 state and roadmap progress
2026-10-15 19:17:20 +02:00
6f9f2e20a4
docs(19.3-04): complete framework site-cache purge plan
2026-10-15 19:17:00 +02:00
af9dad634c
feat(19.3-04): pact.ReorderAfterSave hook inside cabana's reorder transaction
2026-10-15 18:27:07 +02:00
0bc390f39f
feat(19.3-04): cooler site-cache purge service with site_cache.purge_url and purge_token
2026-10-15 18:21:10 +02:00
1d8e50a1ee
docs(19.3-03): record plan 03 state and roadmap progress
2026-10-15 18:14:44 +02:00
17054f9f85
docs(19.3-03): complete S3 build tag, content-derived disk names and public_url plan
2026-10-15 18:14:18 +02:00
2e87efae54
feat(19.3-03): storage.uploads.public_url for direct bucket or CDN file URLs
2026-10-15 18:13:00 +02:00
2e22e9f9a6
fix(19.3-03): name stored uploads after their sniffed content through attach.DiskExtension
2026-10-15 18:09:49 +02:00
2382040b25
feat(19.3-03): summer.yaml build.tags and the summercms_s3 tag that links the S3 uploads driver
2026-10-15 18:07:05 +02:00
b1fab9930b
docs(19.3-02): record plan 02 state and roadmap progress
2026-10-15 18:02:28 +02:00
e3ba89a411
docs(19.3-02): complete cookie transport, credentialed CORS, Turnstile and api-docs plan
2026-10-15 18:01:54 +02:00
20bc1a0795
feat(19.3-02): opt-in /api-docs Swagger UI page with a pinned, SRI-checked swagger-ui-dist
2026-10-15 17:59:54 +02:00
597c79bae7
feat(19.3-02): Cloudflare Turnstile verification as turnstile:open|closed middleware
2026-10-15 17:54:58 +02:00
5055e8bb61
feat(19.3-02): per-group CORS policies through cors:<profile> with router-registered preflights
2026-10-15 17:51:58 +02:00
e7659f2f4b
feat(19.3-02): cookie token refresh across subdomains with hardened credentialed CORS
2026-10-15 17:49:35 +02:00
866e4fd3e0
docs(19.3-01): record plan 01 state and roadmap progress
2026-10-15 17:42:42 +02:00
d86f27cc9c
docs(19.3-01): complete cooler cache and Redis rate-limit store plan
2026-10-15 17:41:58 +02:00
fd7f204979
feat(19.3-01): add cooler.Cache with otter memory and Redis drivers
2026-10-15 17:40:23 +02:00
fa4d89d0b9
feat(19.3-01): share rate limits across instances through cooler's Redis store
2026-10-15 17:34:39 +02:00
77dd11c804
docs(19.3): decide cooler dependencies
2026-10-15 17:27:33 +02:00
7357525b0b
docs(19.3): create phase plan
2026-10-15 14:45:51 +02:00
55dbb18295
docs(19.3): add pattern map
2026-10-15 14:12:24 +02:00
25b97338e1
docs(19.3): add research and validation strategy
2026-10-15 13:34:17 +02:00
401883ae3b
docs(state): record phase 19.3 context session
2026-10-15 11:51:35 +02:00
2d352ff582
docs(19.3): capture phase context
2026-10-15 11:51:29 +02:00
fcd39918f3
docs(18.1): create gap closure plans 07-09 for review findings
2026-10-14 22:20:49 +02:00
38c9c7aa3c
docs(18.1): add phase verification report and human UAT items
2026-10-14 21:30:27 +02:00
929cfd8669
docs(18.1): add code review report
2026-10-14 21:24:17 +02:00
a9dd5656d9
docs(18.1-06): record plan complete in state and roadmap
2026-10-14 21:14:10 +02:00
c1a65c9f22
docs(18.1-06): complete phase 18.1 tests, gate and release plan (push-all)
2026-10-14 21:13:47 +02:00
5c2b0e1d8a
docs(18.1-06): validated phase 18.1 verification map and deferred items (task 4)
2026-10-14 21:05:47 +02:00
7790434834
test(18.1-06): require the pgstripe unit and Postgres tests in the phase 18.1 gate (task 4)
2026-10-14 21:05:47 +02:00
6f71cd12ce
test(18.1-06): require the pgsub unit and Postgres tests in the phase 18.1 gate (task 3)
2026-10-14 20:50:56 +02:00
323b6d684a
test(18.1-06): taglist and flat reorder unit matrices, partitioned flat smoke and admin specs (task 2)
2026-10-14 20:38:52 +02:00
0f09586ec0
fix(18.1-06): keep reorder.flat in the localized list schema
2026-10-14 20:29:31 +02:00
3cc4a5ff91
test(18.1-06): fail-closed phase 18.1 gate over four repositories with detector self-test (task 1)
2026-10-14 20:27:31 +02:00
dbf8aaac74
docs(18.1-05): record plan complete in state and roadmap
2026-10-14 18:42:40 +02:00
967c0f870c
docs(18.1-05): complete vue-paymentgateway-layer subscription pieces plan (release held)
2026-10-14 18:42:07 +02:00
adf983d81b
docs(18.1-04): record plan complete in state and roadmap
2026-10-14 18:20:08 +02:00
35887109a0
docs(18.1-04): complete pgsub admin screens and customer API plan
2026-10-14 18:19:19 +02:00
310c063d38
docs(18.1-03): record plan complete in state and roadmap
2026-10-14 17:54:53 +02:00
7b679a9cf3
docs(18.1-03): complete Stripe subscriptions plan
2026-10-14 17:54:13 +02:00
1f3e30c00b
docs(18.1-02): record plan complete in state and roadmap
2026-10-14 17:28:13 +02:00
577f712b0a
docs(18.1-02): complete pgsub core plan
2026-10-14 17:27:46 +02:00
f9a724bb41
docs(18.1-01): record plan complete in state and roadmap
2026-10-14 16:38:56 +02:00
1e18143ef3
docs(18.1-01): complete taglist and flat reorder plan
2026-10-14 16:38:23 +02:00
c3834cb42c
feat(18.1-01): task 4 flat reorder in the admin SPA
2026-10-14 16:05:10 +02:00
9edff8890f
feat(18.1-01): task 3 flat reorder on the server
2026-10-14 15:56:57 +02:00
cf63fb3152
feat(18.1-01): task 2 taglist string mode, customTags and all save sites
2026-10-14 15:52:52 +02:00
349bad5596
feat(18.1-01): task 1 taglist field in array mode end to end
2026-10-14 15:47:30 +02:00
43d2fdd54a
docs(18.1): record phase planned in state
2026-10-14 14:32:47 +02:00
e37ccbeacb
docs(18.1): revise plans per checker feedback
2026-10-14 14:31:27 +02:00
05bacad997
docs(18.1): create phase plan
2026-10-14 14:05:08 +02:00
b1ed92490d
docs(18.1): map file patterns to existing analogs
2026-10-14 13:30:39 +02:00
0849f98041
docs(18.1): record context amendments from research premise shifts
2026-10-14 13:27:10 +02:00
b36acb375a
docs(phase-18.1): add validation strategy
2026-10-14 13:19:58 +02:00
b30dceeb0e
docs(18.1): research phase domain
2026-10-14 13:19:04 +02:00
d369549740
docs(roadmap): mark executed phases complete and add missing decimal rows
2026-10-14 11:19:26 +02:00
95e011accb
docs(phase-18): add security threat verification
2026-10-14 01:32:20 +02:00
db55996a08
test(18): persist human verification items as UAT
2026-10-14 00:44:47 +02:00
df66d99624
docs(18): phase re-verification report after gap closure 18-08 (human_needed, 11/11)
2026-10-14 00:44:47 +02:00
e691b8300b
docs(18): record code review disposition after gap closure 18-08
2026-10-14 00:34:32 +02:00
195882c39d
docs(18): add code review report (re-review after gap closure 18-08)
2026-10-14 00:34:32 +02:00
fa773b0b49
docs(18-08): complete Stripe decline gap-closure plan
2026-10-14 00:21:03 +02:00
d1f39cc109
docs(18): create gap-closure plan 18-08 (Stripe payment_failed is non-terminal)
Jakub Zych
2026-10-13 18:43:35 +02:00
96f094bcb0
docs(18): phase verification report (gaps_found: Stripe payment_failed rejects a retryable payment)
Jakub Zych
2026-10-13 18:11:05 +02:00
a591932fee
docs(18): add code review report and per-finding disposition
Jakub Zych
2026-10-13 18:01:01 +02:00
c96001abc1
docs(18): record code review disposition
Jakub Zych
2026-10-13 18:00:49 +02:00
a377953820
docs(18-07): record the pushed heads and the v0.1.25 tag in the plan summary
Jakub Zych
2026-10-13 17:48:18 +02:00
2f5e8e3014
docs(18-07): record plan 07 progress in STATE and ROADMAP
Jakub Zych
2026-10-13 17:47:32 +02:00
8d33af4f22
docs(18-07): complete unit tests and phase gate plan
Jakub Zych
2026-10-13 17:47:05 +02:00
efdc11647c
docs(18-07): record the deferred RegisterDetailsParams reader and a pre-existing gofmt item
Jakub Zych
2026-10-13 17:35:40 +02:00
63febdde98
docs(18-07): phase 18 validation map validated and Nyquist-compliant
Jakub Zych
2026-10-13 17:35:30 +02:00
fc3cb26322
test(18-07): the phase 18 gate requires the Stripe operator suites and every layer spec (task 4)
Jakub Zych
2026-10-13 17:35:02 +02:00
be853996c7
test(18-07): the phase 18 gate requires the payment gateway suites per package (task 3)
Jakub Zych
2026-10-13 17:24:08 +02:00
0f35c9a0ca
test(18-07): framework unit coverage of money, settings secrets, tabs, richeditor and danger actions (task 2)
Jakub Zych
2026-10-13 16:58:03 +02:00
eb60c329d8
fix(18-07): money accepts trailing zeros beyond the field scale
Jakub Zych
2026-10-13 16:53:58 +02:00
Jakub Zych
Jakub Zych