Commits

• Design: define path matching, since path.Match does not cross /

  cmc · 2026-09-05 04:46 UTC

  Verified · cmc cd8af93e07

• Design: wikis in the repository

  cmc · 2026-09-05 04:46 UTC

  Verified · cmc 63974ed532

• e2e: a link minted before suspension opens nothing

  cmc · 2026-09-05 04:04 UTC

  success Verified · cmc c7a2a1a6ab

• web: a suspended account cannot mail itself a session

  cmc · 2026-09-05 04:02 UTC

  Verified · cmc cfc0bc7785

• web: close the login-link timing side channel, cover the username path

  cmc · 2026-09-05 03:44 UTC

  Verified · cmc 3f7a91e284

• web: request a login link by email

  cmc · 2026-09-05 03:35 UTC

  Verified · cmc 090dc2eb20

• httpd: session cookie is SameSite=Lax

  cmc · 2026-09-05 03:27 UTC

  Verified · cmc 63ec505eda

• store: count login tokens per account, indexed

  cmc · 2026-09-05 03:26 UTC

  Verified · cmc 9a58f1933f

• Plan: confirm the user lookup, fix the index check

  cmc · 2026-09-05 03:17 UTC

  Verified · cmc cc3550cfbb

• Plan: browser login without an SSH key

  cmc · 2026-09-05 03:16 UTC

  Verified · cmc 965735bfbc

• Design: name the store file, specify the empty identifier

  cmc · 2026-09-05 03:10 UTC

  Verified · cmc 8c430f898a

• Design: browser login without an SSH key

  cmc · 2026-09-05 03:10 UTC

  Verified · cmc b24bfe450b

• CHANGELOG: v1.13.3

  cmc · 2026-09-05 01:22 UTC

  success Verified · cmc e671162d07

• ci: analyse each branch as itself, not as main

  cmc · 2026-09-05 01:06 UTC

  success Verified · cmc a5e232bfe9

• mr: only a writer's review decides a merge gate

  cmc · 2026-09-05 01:05 UTC

  success Verified · cmc f84bca7807

• exec: the two smart-HTTP spawns the sweep missed

  cmc · 2026-09-05 00:43 UTC

  success Verified · cmc 319867a8f1

• CHANGELOG: v1.13.2

  cmc · 2026-09-05 00:02 UTC

  success Verified · cmc 61564b7c32

• exec: resolve git and ssh once, at start-up

  cmc · 2026-09-04 23:40 UTC

  success Verified · cmc cabf60cf5b

• web: the topics-remove field gets a label, and a test that would have caught it

  cmc · 2026-09-04 23:15 UTC

  success Verified · cmc 5441d8b8bf

• web: clearing a cookie carries the attributes that set it

  cmc · 2026-09-04 23:13 UTC

  success Verified · cmc b0fba1c090

• runner: a build workspace another user could have created first

  cmc · 2026-09-04 23:12 UTC

  success Verified · cmc ca4d0e9517

• pages: a directory redirect cannot leave the site

  cmc · 2026-09-04 22:51 UTC

  success Verified · cmc 6b5f1f02e9

• CHANGELOG: v1.13.1

  cmc · 2026-09-04 20:09 UTC

  success Verified · cmc 2727fd25d8

• cli: a command reading stdin on a terminal says so

  cmc · 2026-09-04 19:40 UTC

  success Verified · cmc 47b439b55a

• ci: SonarCloud static analysis, report-only

  cmc · 2026-09-04 19:34 UTC

  success Verified · cmc f70349ad3c

• tests: a private repository is invisible on every surface, in one test

  cmc · 2026-09-04 19:28 UTC

  success Verified · cmc 6df734dd58

• CHANGELOG: v1.13.0

  cmc · 2026-09-04 17:48 UTC

  success Verified · cmc 96df83f2d3

• mr: what changed between two revisions of a merge request

  cmc · 2026-09-04 17:32 UTC

  success Verified · cmc e99285743d

• mr: a review is composed and submitted as one thing

  cmc · 2026-09-04 17:24 UTC

  success Verified · cmc 46a896187a

• import: a migrated merge request has something to diff

  cmc · 2026-09-04 17:01 UTC

  success Verified · cmc 9c7f3c8bef

• tests: the review loop, driven end to end by three accounts

  cmc · 2026-09-04 16:54 UTC

  success Verified · cmc f8f4f38f31

• runner: -jobs N runs that many builds at once

  cmc · 2026-09-04 16:49 UTC

  success Verified · cmc 3b4f05eb52

• mr: a merge request can say it is not asking yet

  cmc · 2026-09-04 16:42 UTC

  success Verified · cmc 6f184c2936

• webhooks: the other half of the mutations record an event

  cmc · 2026-09-04 16:36 UTC

  success Verified · cmc f150dbe6d8

• search: issues and merge requests are searched by their text, not their titles

  cmc · 2026-09-04 16:28 UTC

  success Verified · cmc 7cc95d1fc1

• e2e: say the timeout is too short instead of panicking eleven minutes in

  cmc · 2026-09-04 16:21 UTC

  success Verified · cmc e733f19cd4

• CHANGELOG: v1.12.0

  cmc · 2026-09-04 16:01 UTC

  success Verified · cmc 8839e2cc95

• store: writers serialise instead of failing under contention

  cmc · 2026-09-04 15:29 UTC

  success Verified · cmc 34360906d0

• hook: one cat-file for the whole push, verified as it streams

  cmc · 2026-09-04 15:13 UTC

  success Verified · cmc 6ab65cbbaf

• store: expired rows are swept, and the audit log stops copying prose

  cmc · 2026-09-04 15:07 UTC

  success Verified · cmc d51efc8bb8

• control: the payloads other surfaces decode are named types

  cmc · 2026-09-04 15:01 UTC

  success Verified · cmc 332a13feaa

• store: one admin's settings change no longer overwrites another's

  cmc · 2026-09-04 14:55 UTC

  success Verified · cmc 5e9732fb1d

• store: the dashboard walks an index instead of sorting the table

  cmc · 2026-09-04 14:51 UTC

  success Verified · cmc f686b22ad7

• CHANGELOG: v1.11.0

  cmc · 2026-09-04 14:32 UTC

  success Verified · cmc 81f47453f4

• merge gates: CODEOWNERS is a setting, not a file that happens to exist

  cmc · 2026-09-04 14:06 UTC

  success Verified · cmc 1f8076c655

• web: search across the instance, and a page for the inbox

  cmc · 2026-09-04 13:57 UTC

  success Verified · cmc 251a71053c

• notifications: an inbox, and repositories you can watch or mute

  cmc · 2026-09-04 13:48 UTC

  success Verified · cmc 5ccfa71112

• CONTRIBUTING: registration is open, not by invite

  cmc · 2026-09-04 04:20 UTC

  success Verified · cmc 3f74a298ff

• web: tabs wrap on a phone, and the landing page says what the forge does

  cmc · 2026-09-04 04:20 UTC

  Verified · cmc 03fe6e4437

• css: dead rules out, off-scale values on the scale, undefined classes resolved

  cmc · 2026-09-04 03:11 UTC

  success Verified · cmc 43a8eaa579

older →