Commits

• httpd: the login return path refuses a leading /\

  cmc · 2026-09-29 02:15 UTC

  Verified · cmc ab95b83440

• web: a stale session's mint or grant gets a sign-in link back to the form

  cmc · 2026-09-29 00:27 UTC

  Verified · cmc ed8f3378b1

• control: web mints and grants need a sign-in from the last 15 minutes

  cmc · 2026-09-29 00:10 UTC

  Verified · cmc b79de56262

• store: a web session's user carries its sign-in time

  cmc · 2026-09-29 00:08 UTC

  Verified · cmc 887952c35a

• import: document the address check; e2e imports with allow_local

  cmc · 2026-09-29 00:29 UTC

  success Verified · cmc 592e7bcb92

• import: refuse a query or fragment, ls-remote in the new repository

  cmc · 2026-09-29 00:23 UTC

  Verified · cmc ecfc702093

• gitpin: refuse odd numeric hosts, pin every name on the port

  cmc · 2026-09-29 00:23 UTC

  Verified · cmc c32afe91e2

• import: http(s) only, address checked and pinned like a mirror sync

  cmc · 2026-09-29 00:16 UTC

  Verified · cmc 1c6440454b

• mirror: sync through gitpin

  cmc · 2026-09-29 00:12 UTC

  Verified · cmc ae2edb026f

• gitpin: resolve, check and pin a git remote

  cmc · 2026-09-29 00:07 UTC

  Verified · cmc 7e3afe5f90

• e2e: hand out ports below the ephemeral range

  cmc · 2026-09-29 02:12 UTC

  success Verified · cmc 01ae5cf9a0

• lfs: refuse an upload token once its repository is archived

  cmc · 2026-09-29 00:25 UTC

  failure Verified · cmc ceafd97e30

• lfs: e2e for a token outliving its key; document the binding

  cmc · 2026-09-29 00:23 UTC

  Verified · cmc bd5cf5d7d1

• lfs: test deploy key tokens

  cmc · 2026-09-29 00:22 UTC

  Verified · cmc b5cc83bf50

• lfs: a token needs its key's current access to the repository

  cmc · 2026-09-29 00:22 UTC

  Verified · cmc 911c19309b

• lfs: refuse a token whose key was removed, expired or disabled

  cmc · 2026-09-29 00:18 UTC

  Verified · cmc 70d7e17c28

• lfs: a transfer token names the key that obtained it

  cmc · 2026-09-29 00:17 UTC

  Verified · cmc 682aca3520

• webhook: document --secret -, pipe it in the e2e test

  cmc · 2026-09-29 00:14 UTC

  success Verified · cmc f8b976a972

• cli: webhook add forwards stdin for --secret -

  cmc · 2026-09-29 00:11 UTC

  Verified · cmc ba885de89c

• webhook: add reads the signing secret from stdin

  cmc · 2026-09-29 00:10 UTC

  Verified · cmc 8dcfa45a8a

• deploy: runner comment and Admin procedure name the real attachments

  cmc · 2026-09-29 00:07 UTC

  Verified · cmc 8ab6240513

• plans: #287, #284, #298, #285, #297

  cmc · 2026-09-29 00:05 UTC

  success Verified · cmc fb6e9dcfa4

• hookd: the peer-refusal test accepts a broken pipe

  cmc · 2026-09-28 23:29 UTC

  success Verified · cmc 530a2fdc11

• e2e: wait up to 60s for a start, stop if gitbayd exits, show why

  cmc · 2026-09-28 23:24 UTC

  failure Verified · cmc 0d76166636

• e2e: signup expects the registered page's numbered steps

  cmc · 2026-09-28 23:19 UTC

  success Verified · cmc 7e29c13f48

• tests: token and issue-form tests pass a nil pack limiter to New

  cmc · 2026-09-28 23:13 UTC

  failure Verified · cmc ccf54427de

• web, store: final-review wording, header and range-diff fixes

  cmc · 2026-09-28 23:08 UTC

  Verified · cmc 7c015c39b3

• web: drop CLI commands from four empty states, per the register

  cmc · 2026-09-28 23:04 UTC

  Verified · cmc 2dd9add6d0

• web: new-issue form keeps milestone/assignee and a refused create

  cmc · 2026-09-28 23:02 UTC

  Verified · cmc d906ddff2e

• e2e: match current build-follow and account-token page text

  cmc · 2026-09-28 23:00 UTC

  Verified · cmc 1a8bd7a061

• wiki: Parity corrections for range-diff and token list/revoke

  cmc · 2026-09-28 22:58 UTC

  Verified · cmc 85b72babf8

• web: fork owners can open an MR from mrs and compare pages

  cmc · 2026-09-28 22:57 UTC

  Verified · cmc 82b9f3aba2

• wiki: Parity reflects the web API-token page

  cmc · 2026-09-28 22:46 UTC

  Verified · cmc abc151f56b

• web: registered page's next steps as a numbered list, with a token mention for the iOS app

  cmc · 2026-09-28 22:45 UTC

  Verified · cmc a5a27ecbe6

• web: Settings → API tokens: create, list, revoke

  cmc · 2026-09-28 22:38 UTC

  Verified · cmc f4b0c29240

• tests: newer callers pass a nil pack limiter to New

  cmc · 2026-09-28 23:06 UTC

  success Verified · cmc 7d1aad238f

• wiki: Known-Gaps keeps the open #298 row

  cmc · 2026-09-28 23:05 UTC

  Verified · cmc 539835bd23

• hookd: cap refs in a refused-push row; pack-limit docs name the class cap

  cmc · 2026-09-28 23:04 UTC

  Verified · cmc 6ee49bebaa

• packlimit: log refusals once a minute per transport

  cmc · 2026-09-28 22:57 UTC

  Verified · cmc 9c31ca2462

• wiki: unkeyed audit chain, stall kill, enforced limits, pack-limit gaps

  cmc · 2026-09-28 22:56 UTC

  Verified · cmc 77ff123033

• hookd: audit refused hook requests and refused pushes

  cmc · 2026-09-28 22:55 UTC

  Verified · cmc ead6796abe

• httpd: web archives take a pack slot

  cmc · 2026-09-28 22:53 UTC

  Verified · cmc bd49b87fce

• packlimit: key IPv6 clients on their /64; anonymous clients leave a slot for accounts

  cmc · 2026-09-28 22:51 UTC

  Verified · cmc 6c6c6248c1

• config: pack_queue = -1 leaves the queue unbounded

  cmc · 2026-09-28 22:49 UTC

  Verified · cmc 8b4a553eee

• gitbayd: one pack-generation limit for SSH, HTTP and git://

  cmc · 2026-09-28 22:35 UTC

  Verified · cmc 3035725993

• httpd, gitd: pack generation takes a slot; ls-refs does not

  cmc · 2026-09-28 22:25 UTC

  Verified · cmc b94ae2638b

• sshd: upload-pack and upload-archive take a pack slot; killed when the client leaves

  cmc · 2026-09-28 22:04 UTC

  Verified · cmc be2c840ec8

• config: pack_concurrency, pack_per_principal, pack_queue, pack_queue_wait

  cmc · 2026-09-28 21:47 UTC

  Verified · cmc ee55b8c0ca

• packlimit: global and per-principal limit with a bounded queue

  cmc · 2026-09-28 21:40 UTC

  Verified · cmc 99c5044cba

• web: builds page offers an org-mode badge snippet

  cmc · 2026-09-28 22:41 UTC

  success Verified · cmc 9ec11cfbad

older →