Commits

• control: bind queued merges to their credential; dequeue on foreign push, retarget, source deletion

  cmc · 2026-09-29 03:45 UTC

  Verified · cmc c1f3c195a2

• web: queued merge state, merge-when-ready and cancel buttons on the MR page

  cmc · 2026-09-29 03:35 UTC

  Verified · cmc 991b65712f

• control: mr merge --when-ready and --cancel

  cmc · 2026-09-29 03:33 UTC

  Verified · cmc 8fa927e43a

• store: merge queue table, MR queue fields, queued flag on dashboard rows

  cmc · 2026-09-29 03:33 UTC

  Verified · cmc 93177cdf69

• runner: report a missing image or podman before missing build cgroups

  cmc · 2026-09-29 03:53 UTC

  success Verified · cmc f5b05a2161

• wiki, changelog: flood test checks the log; runner needs build cgroups on the forge's host

  cmc · 2026-09-29 03:46 UTC

  failure Verified · cmc 060250459e

• runner host: flood test asserts the table's effect; exact rollback of the builds table

  cmc · 2026-09-29 03:46 UTC

  Verified · cmc 748122ef10

• runner: refuse to start without build cgroups when taking untrusted builds or polling over loopback

  cmc · 2026-09-29 03:45 UTC

  Verified · cmc 7acfcebdf5

• wiki, changelog: build egress by trust

  cmc · 2026-09-29 03:38 UTC

  Verified · cmc 2258972d20

• deploy: scratch test for a build failing SSH logins beside the runner

  cmc · 2026-09-29 03:38 UTC

  Verified · cmc b5ea7bcf97

• runner host: build egress by cgroup, narrower for untrusted builds

  cmc · 2026-09-29 03:37 UTC

  Verified · cmc 4be4bd5917

• runner: builds run under a cgroup per trust class

  cmc · 2026-09-29 03:37 UTC

  Verified · cmc 89708196e4

• backup: verify skips LFS upload staging files; asset label names a missing repository by id

  cmc · 2026-09-29 03:32 UTC

  success Verified · cmc 18da8c33b3

• wiki, changelog: restore-drill, what a drill restores and checks

  cmc · 2026-09-29 03:30 UTC

  Verified · cmc 504b4d488c

• gitbayd: admin restore-drill restores an archive, verifies it, reports elapsed time and the newest activity

  cmc · 2026-09-29 03:29 UTC

  Verified · cmc a27671383a

• backup: verify checks release assets and LFS object digests

  cmc · 2026-09-29 03:27 UTC

  Verified · cmc c09a124633

• changelog: v1.37.0

  cmc · 2026-09-29 03:09 UTC

  success Verified · cmc 5518fc0861

• deps: go-crypto 1.5.2, modernc.org/sqlite 1.60.0

  cmc · 2026-09-29 03:04 UTC

  success Verified · cmc 640f8fb475

• control: import-issues API client keeps no idle connections

  cmc · 2026-09-29 02:54 UTC

  success Verified · cmc 0728a77dae

• wiki, changelog: import-issues connects only to checked addresses

  cmc · 2026-09-29 02:51 UTC

  Verified · cmc 367c79588a

• control: import-issues refuses credentials, a query or a fragment in --api-base

  cmc · 2026-09-29 02:50 UTC

  Verified · cmc 11114e655e

• control: import-issues API client dials only the checked address

  cmc · 2026-09-29 02:50 UTC

  Verified · cmc 1d81484849

• control: import-issues fetches pull heads pinned to the checked address

  cmc · 2026-09-29 02:48 UTC

  Verified · cmc fa31441639

• control: admin repo visibility needs a recent web sign-in

  cmc · 2026-09-29 02:32 UTC

  success Verified · cmc 08a24a6e68

• wiki: attach the scratch runner from a machine with an admin identity

  cmc · 2026-09-29 02:29 UTC

  failure Verified · cmc 879ef3991c

• control: repo settings visibility needs a sign-in from the last 15 minutes

  cmc · 2026-09-29 02:29 UTC

  Verified · cmc 25279b4b49

• control: webhook add trims a CRLF from the secret; --secret - counts as stdin

  cmc · 2026-09-29 02:28 UTC

  Verified · cmc 132441b6f5

• wiki: SSRF control partial while import-issues fetches unpinned

  cmc · 2026-09-29 02:28 UTC

  Verified · cmc 0cd2b3a8ac

• control: mirror add refuses a numerically written host

  cmc · 2026-09-29 02:27 UTC

  Verified · cmc 0c7b382159

• changelog: one #297 entry, upgrade notes after the list, #298 note corrected

  cmc · 2026-09-29 02:26 UTC

  Verified · cmc fad7a633f4

• lfs: tokens carry the key's fingerprint pin beside its id

  cmc · 2026-09-29 02:26 UTC

  Verified · cmc fc755889ba

• wiki: Known-Gaps keeps the open #301 row

  cmc · 2026-09-29 02:16 UTC

  success Verified · cmc c2e04ef116

• wiki: web mints and grants need a sign-in from the last 15 minutes

  cmc · 2026-09-29 02:15 UTC

  Verified · cmc 273e9b95f8

• httpd: the login return path refuses a leading /\

  cmc · 2026-09-29 02:15 UTC

  Verified · cmc ab95b83440

• web: a stale session's mint or grant gets a sign-in link back to the form

  cmc · 2026-09-29 00:27 UTC

  Verified · cmc ed8f3378b1

• control: web mints and grants need a sign-in from the last 15 minutes

  cmc · 2026-09-29 00:10 UTC

  Verified · cmc b79de56262

• store: a web session's user carries its sign-in time

  cmc · 2026-09-29 00:08 UTC

  Verified · cmc 887952c35a

• import: document the address check; e2e imports with allow_local

  cmc · 2026-09-29 00:29 UTC

  success Verified · cmc 592e7bcb92

• import: refuse a query or fragment, ls-remote in the new repository

  cmc · 2026-09-29 00:23 UTC

  Verified · cmc ecfc702093

• gitpin: refuse odd numeric hosts, pin every name on the port

  cmc · 2026-09-29 00:23 UTC

  Verified · cmc c32afe91e2

• import: http(s) only, address checked and pinned like a mirror sync

  cmc · 2026-09-29 00:16 UTC

  Verified · cmc 1c6440454b

• mirror: sync through gitpin

  cmc · 2026-09-29 00:12 UTC

  Verified · cmc ae2edb026f

• gitpin: resolve, check and pin a git remote

  cmc · 2026-09-29 00:07 UTC

  Verified · cmc 7e3afe5f90

• e2e: hand out ports below the ephemeral range

  cmc · 2026-09-29 02:12 UTC

  success Verified · cmc 01ae5cf9a0

• lfs: refuse an upload token once its repository is archived

  cmc · 2026-09-29 00:25 UTC

  failure Verified · cmc ceafd97e30

• lfs: e2e for a token outliving its key; document the binding

  cmc · 2026-09-29 00:23 UTC

  Verified · cmc bd5cf5d7d1

• lfs: test deploy key tokens

  cmc · 2026-09-29 00:22 UTC

  Verified · cmc b5cc83bf50

• lfs: a token needs its key's current access to the repository

  cmc · 2026-09-29 00:22 UTC

  Verified · cmc 911c19309b

• lfs: refuse a token whose key was removed, expired or disabled

  cmc · 2026-09-29 00:18 UTC

  Verified · cmc 70d7e17c28

• lfs: a transfer token names the key that obtained it

  cmc · 2026-09-29 00:17 UTC

  Verified · cmc 682aca3520

older →