refi64.dev / core
Monorepo for Tangled
Star
Fork 0
Watch

Commits on 0dc54771380cd1bfec25d775fedfb66db7869b74

docs: use tangled.org (not .sh) for settings link in knot setup
Signed-off-by: tinybuttercom <184706546+tinybuttercom@users.noreply.github.com>
tinybuttercom committed
knot2/git: isolate repo open so ambient config can't inject archive filter driver
oyster.cafe committed
spindle/models: fix secret masker cutting off lines early
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/README.md: remove 'possibility' of upstream. it's happened
oyster.cafe committed
knot2/xrpc: tolerate old owner-name file remote
oyster.cafe committed
knot2/index: resolve clone path by display name when no rkey
oyster.cafe committed
appview/pages: pass resolver instead of nil in tests
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/models: hold back a trailing window so secrets split across log writes stay masked
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: bind qmp sockets ourselves at 0600 and pass qemu the fd
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: cap each workflow vm's cpu and io in its cgroup
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: key the activation config cache per repo so tenants can't poison each other's toplevels
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/netguard: refuse to dial internal addresses on user-controlled fetches
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/ssh: force no compression bc makes no sense
oyster.cafe committed
appview/pages/markup: render attached images
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
appview: upload images as blobs (pulls)
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
appview: upload images as blobs (issues)
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
appview/pages/templates: rename blob field name
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
lexicons: add blobs field to `repo.{issue,pull}`
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
knot2/xrpc: hidden staging ref read
oyster.cafe committed
spindle: fix skipped tests not actually being skipped
re:fi.64 committed
knot2/xrpc: forks take upstream's object format master
oyster.cafe committed
nix: package knot-server and knot-migrate, add a nixos module
oyster.cafe committed
appview/{config,state}: gate xrpc router behind TANGLED_XRPC_ENABLED
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
appview/xrpc: handlers for "private" xrpc service
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
api,lexicons: all lexicons for "private" xrpc service
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
knotserver/git: remove `protocol.ext.allow=never`
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
knotmirror/xrpc/gitea: resolve annotated tags to commits, not tags
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2: serve legacy basic-auth admin endpoint if secret set
oyster.cafe committed
docs: fix nixery env var name
Signed-off-by: Trey Bastian <hello@treybastian.com>
Trey Bastian committed
spindle/engines/microvm: treat exited vms as already destroyed instead of erroring out
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
*: fmt
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knotserver: inline knot2 to monorepo
oyster.cafe committed
appview/pages/templates: use generic htmx trigger `from:` query
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
knotmirror/xrpc: skip blob size check on submodules
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
idresolver,spindle: add regressions tests for all paths that use perms
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle: reject repo record if repo was already registered under another owner
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knotserver/git: validate fork source
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
spindle: check owner did is a member in processRepo
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle: check for perm on process pull
dawn committed
bobbin/worker: add cors headers
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
appview: disable autocomplete in markdownEditor and issue title to avoid browser repeating submitted content
Wilhelm Berggren committed
spindle/engines/microvm: set vsock to use host cid explicitly
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: vacate populated cgroup namespace roots at init
Signed-off-by: Winter <winter@madoka.systems>
Winter committed
spindle: ingest pull records only from jetstream
Signed-off-by: noriaki watanabe <nabeyang@gmail.com>
noriaki watanabe committed
camo: verify hmac before checking the cache
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
appview/pages/templates: require comment body in issue comment
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
appview/notify/email: cap at 10 notifs
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
appview/pages/templates: visibility based line-quote-button
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
nix/{microvm,pkgs}: add wf user to trusted users in microvm images
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
shuttle,spindle/engines/microvm: have shuttle detect step ooms properly, parse serial for oom / kernel panic
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
fix(appview/oauth): derive dev client URI from configured appview host
Niels Mokkenstorm committed
appview/pages: unify button styles across all edit/create forms
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
appview/pages: load pipeline statuses using htmx in pulls pages
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
spindle/engine: properly interrupt running workflows on cancel, dont overwrite cancelled status
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/engine: reject workflows that map to colliding keys
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
appview/pages/templates: remove unnecessary top-level `hx-include`
Signed-off-by: Seongmin Lee <git@boltless.me>
Seongmin Lee committed
Revert "appview/pages/templates: fix patch resubmit button"
Seongmin Lee committed
appview: add theme drop-down persisted in database
Signed-off-by: TheBananaPancake <did:plc:3ywraszv5eqhnlvzumwju5fa>
Banana Pancake committed
appview/pages: update copy for CI section
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
appview/pages: incorporate new features group into landing
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed