Jakub Zych 068adaabf9 fix(19.6.1-04): refuse code-declared role capture and wrap Administrators Runs ...

- Roles create and update refuse a submitted code that code-declared grants attach to
- compileActionExtensions wraps contributed Administrators Runs with guardOutranked
- Prove both holes on Postgres; keep the boot smoke callable with a superuser principal

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-22 13:29:38 +02:00

..

backpack

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

beachcomber

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00

boardwalk

feat(19.6.1-02): field trigger and admin build

2026-10-22 11:43:58 +02:00

bonfire

fix(summer): mask secret flag values in a delegate's error (WR-10)

2026-10-22 04:00:57 +02:00

bouncer

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00

breakwater

feat(breakwater): Markdown renderer and HTML sanitizer with the forum policy (D-17)

2026-10-18 14:52:30 +02:00

cabana

fix(19.6.1-04): refuse code-declared role capture and wrap Administrators Runs

2026-10-22 13:29:38 +02:00

compass

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

conga

test(surf,conga,lagoon): summaries, reports, stats and checklist flags

2026-10-21 19:38:18 +02:00

cooler

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00

diary

fix(bonfire): strip control characters from error blocks, process views and tables

2026-10-22 02:31:55 +02:00

festival

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

fetchguard

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

flare

test(cabana,flare,dev,summer): json, reported errors and dev serve

2026-10-21 19:38:19 +02:00

lagoon

fix(lagoon): keep Status plugin-only; migrate:status adds the framework sets itself (WR-12)

2026-10-22 04:30:36 +02:00

lighthouse

feat: Artisan checklist for application commands, hints and coverage gate

2026-10-21 13:16:21 +02:00

pact

feat(19.6.1-01): Administrators screen and cross-controller record actions

2026-10-22 10:59:23 +02:00

party

test(17-06): framework and admin SPA unit tests for the blog companions

2026-10-12 19:29:37 +02:00

phrasebook

feat(19.6.1-02): field trigger and admin build

2026-10-22 11:43:58 +02:00

postcard

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00

seaglass

test(17-06): framework and admin SPA unit tests for the blog companions

2026-10-12 19:29:37 +02:00

sieve

feat(sieve): add the remaining collection helpers and docs mentions

2026-10-11 14:27:13 +02:00

signpost

fix(17): CR-01 ignore an item URL pattern override that is not a path

2026-10-12 21:25:30 +02:00

sunrise

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

sunscreen

test(diary): config, channels, rotation, redaction and slogtest

2026-10-21 19:09:28 +02:00

surf

test(surf,conga,lagoon): summaries, reports, stats and checklist flags

2026-10-21 19:38:18 +02:00

tide

feat(19.4-03): tide captures a named input of an HTML response

2026-10-19 19:59:24 +02:00

towel

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

wire

docs: add a Role in the framework section to every module README

2026-10-11 00:58:17 +02:00

wristband

refactor: framework modules log through diary components

2026-10-21 11:58:22 +02:00