Repository navigation

chore: promote nightly to main (2026-11-09) - #1885

Merged

Wikid82 merged 330 commits into

mainfrom

nightly

Nov 9, 2026

Merged

chore: promote nightly to main (2026-11-09)#1885
Wikid82 merged 330 commits into
mainfrom
nightly

This pull request is big! We're only showing the most recent 250 commits

Commits on Nov 3, 2026
- docs: add QA report for the bouncer registration changes
  Wikid82
  committed
  bbad844
- fix: keep a working CrowdSec bouncer key and register through the shared key check (#1824)
  Wikid82
  authored
  f38e04f
Commits on Nov 4, 2026
- fix: update Caddy version to 2.11.8 in Dockerfile
  Wikid82
  committed
  76e690c
- chore(docker): refresh bundled proxy toolchain image
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  e81d368
- chore(docker): refresh bundled proxy toolchain image (#1831)
  Wikid82
  authored
  b4d3526
- test: pin the CrowdSec rollback and archive limit behaviour
  Wikid82
  committed
  38d911e
- fix: keep a failed CrowdSec import from leaving the configuration folder incomplete
  Wikid82
  committed
  e35ca7c
- fix(security): harden input handling in the CrowdSec API
  Wikid82
  committed
  656da91
- docs: describe the CrowdSec import limits and recovery
  Wikid82
  committed
  e7cae43
- fix: allow for archive headers in the import size check
  Wikid82
  committed
  41fbbdc
- fix: show a clear message when an import upload is too large
  Wikid82
  committed
  67bc47e
- fix: keep the import error wording and cover the remaining archive failure paths
  Wikid82
  committed
  e6579c5
- test: cover the remaining CrowdSec page branches
  Wikid82
  committed
  0a2e1bc
- test: update the CrowdSec import refusal checks for the new limits
  Wikid82
  committed
  30426f5
- docs: add QA report for the CrowdSec import changes
  Wikid82
  committed
  3394e98
- fix: stop key-leak log test colliding with random temp-dir digits
  
  Wikid82
  and
  claude
  committed
  ec1ff4a
- chore: update model from sonnet to opus in planning and supervisor agents
  Wikid82
  committed
  23a3be0
- fix: keep a failed CrowdSec import from leaving the configuration folder incomplete (#1832)
  Wikid82
  authored
  3e4dd4b
- chore: update lucide-react to version 1.68.0
  Wikid82
  committed
  20271e1
- chore: update typescript version to 7.1.0-dev.20261104.1
  Wikid82
  committed
  6d817cb
- fix(ci): enhance grype scan handling to tolerate specific exit codes
  Wikid82
  committed
  7565b65
- chore(deps): update backend indirect Go dependencies
  Wikid82
  committed
  ed8f292
- chore(security): ignore unfixed HIGH SQLite CVEs in Alpine image
  Wikid82
  committed
  6e04173
- chore(ci): drop scan ignore lists from the toolchain key
  Wikid82
  committed
  c76283a
- chore: allow capping semgrep workers in pre-commit hook
  
  Wikid82
  and
  claude
  committed
  1d12128
- fix(ci): never skip the Docker build on manual dispatch
  Wikid82
  committed
  d24b01b
- chore(docker): refresh bundled proxy toolchain image
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  1609246
- chore(docker): refresh bundled proxy toolchain image (#1835)
  Wikid82
  authored
  0baa282
- chore(models): update agent models to 'best' for planning, QA security, and supervisor
  Wikid82
  committed
  e6f1172
- chore(agents): reduce dev-agent test and lint usage
  Wikid82
  committed
  d798277
- fix: read the CrowdSec engine address from one place
  Wikid82
  committed
  fbeb8da
- fix: refuse a CrowdSec preset apply at once while a hub restore runs
  Wikid82
  committed
  0785150
- fix: try the hub mirror when a single hub item download fails
  Wikid82
  committed
  765d825
- fix: give a hub upgrade the full first time share in the hub helper
  Wikid82
  committed
  bc8e4bb
- fix: log skipped export symlinks once and check the pid before a reload signal
  Wikid82
  committed
  87ed593
- test: cover the CrowdSec registration log arms and the enabled-module start revert
  Wikid82
  committed
  fe04028
- test: make the backup service tests independent of each other
  Wikid82
  committed
  e59cea7
- test: assert the registered bouncer badge in the CrowdSec UI states spec
  Wikid82
  committed
  771a60b
- docs: describe the CrowdSec engine address, restore busy answer and hub fallbacks
  Wikid82
  committed
  ad71a24
- docs: replace the current plan with the CrowdSec leftovers plan
  Wikid82
  committed
  ea4cb50
- fix: serve test engines at the local CrowdSec address and tidy review items
  Wikid82
  committed
  deeaaf3
- docs: add the QA report for the CrowdSec leftovers
  Wikid82
  committed
  ea2abc8
- fix: tidy CrowdSec engine address, restore busy answer and hub fallbacks (#1836)
  Wikid82
  authored
  126784c
- chore(ci): update CodeQL action versions to v4.39.3
  Wikid82
  committed
  84a4094
- fix(ci): update CodeQL action versions to v4.39.3
  Wikid82
  committed
  41b4a0c
- docs: plan the WAF rule sets need rules fix
  Wikid82
  committed
  5843d02
- test: pin the rule set fixtures that carry real rules
  Wikid82
  committed
  64fd2d2
- fix: refuse a WAF rule set without rules
  Wikid82
  committed
  c314ffc
- fix: explain a selected WAF rule set that has no rules
  Wikid82
  committed
  6abbb38
- fix: remove the WAF preset that has no rules and require rules in the form
  Wikid82
  committed
  5fa5fae
- docs: say that a WAF rule set needs rules
  Wikid82
  committed
  ab1bb3d
- docs: stop describing a bundled OWASP rule set
  Wikid82
  committed
  e1008a7
- chore(deps): update @tanstack/react-query to version 5.106.0
  Wikid82
  committed
  e908b56
- chore: update dockerfile-non-major
  renovate[bot]
  authored
  b2c0fe1
- chore(docker): sync toolchain image pin to caddy-crowdsec-8929b2ed89c42f0b
  github-actions[bot]
  committed
  42cea39
- docs: add the QA report for the WAF rule set fix
  Wikid82
  committed
  99c3db4
- chore(docker): add pinned SQLite version arg to patch Alpine CVEs
  Wikid82
  committed
  623b5d8
- chore: update dockerfile-non-major (#1837)
  Wikid82
  authored
  6f1975b
- chore(deps): update @tanstack/react-query to version 5.106.0
  Wikid82
  committed
  f979555
- chore: update dockerfile-non-major
  
  renovate[bot]
  authored and
  Wikid82
  committed
  f7f19c0
- chore(docker): sync toolchain image pin to caddy-crowdsec-8929b2ed89c42f0b
  
  github-actions[bot]
  authored and
  Wikid82
  committed
  e7fa07b
- chore(docker): add pinned SQLite version arg to patch Alpine CVEs
  Wikid82
  committed
  cf753ff
Commits on Nov 5, 2026
- fix(ci): increase timeout for golangci-lint in quality checks
  Wikid82
  committed
  206ecd6
- chore: update NPM version to 12.2.2 in Dockerfile
  Wikid82
  committed
  1f37a0c
- chore: update npm installation to use dynamic version from build argument
  Wikid82
  committed
  e5e186a
- chore(docker): update SQLite version to i3.53.4-r0
  Wikid82
  committed
  80407fb
- Merge branch 'development' into fix/waf-rule-sets-need-rules
  Wikid82
  authored
  74070ab
- chore: renew expired CodeQL cookie-secure suppression
  Wikid82
  committed
  c5ccd83
- chore(ci): annotate blocking CodeQL gate findings with rule and location
  Wikid82
  committed
  94ec221
- fix: rename test constant that tripped gosec G101
  Wikid82
  committed
  5629dac
- fix: require rules in a WAF rule set (#1838)
  Wikid82
  authored
  a7c1384
- chore: update Caddy version to 2.11.9
  Wikid82
  committed
  e8dd684
- chore(docker): refresh bundled proxy toolchain image
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  ba1ab18
- chore(docker): refresh bundled proxy toolchain image (#1841)
  Wikid82
  authored
  ff52a02
- chore(docker): remove Caddy candidate build args
  Wikid82
  committed
  893365f
- chore(docker): refresh bundled proxy toolchain image
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  271d635
- chore(docker): refresh bundled proxy toolchain image (#1842)
  Wikid82
  authored
  d36ded7
- docs: plan the security settings checks and leftovers
  Wikid82
  committed
  d08747b
- fix: reject out-of-range security settings values
  Wikid82
  committed
  7559799
- fix: restore only the settings a refused change touched
  Wikid82
  committed
  0d54776
- fix: keep the modified time of a restored security setting
  Wikid82
  committed
  674505f
- test: pin how each reader decides the security suite is on
  Wikid82
  committed
  57fbd4b
- refactor: read the security suite switch value one way
  Wikid82
  committed
  1189593
- fix: make the break-glass disable switch the security suite off everywhere
  Wikid82
  committed
  148436c
- docs: describe the allowed security settings values
  Wikid82
  committed
  120bff4
- fix: write back blank values when a refused change is restored
  Wikid82
  committed
  6e7f0b9
- docs: add the QA report for the security settings checks
  Wikid82
  committed
  b5c47db
- fix: check security settings values and narrow the failed-apply restore (#1844)
  Wikid82
  authored
  085c7b1
- chore: add jsdom installation script for frontend dependencies
  Wikid82
  committed
  c722a85
- chore(deps): update @tanstack/react-query to version 5.106.1
  Wikid82
  committed
  762a67f
- chore(deps): update vite to version 8.3.6
  Wikid82
  committed
  c7bf757
- chore(deps): update typescript to version 7.1.0-dev.20261105.1
  Wikid82
  committed
  7aae98b
- chore(deps): update lucide-react to version 1.69.0
  Wikid82
  committed
  73f9895
- test: redirect local key checks to mock LAPI for immediate responses
  Wikid82
  committed
  42dd172
- chore(deps): update jsdom to version 31.0.0
  Wikid82
  committed
  dec5840
- fix: add the missing local-host labels to the German, Spanish, French and Chinese translations
  Wikid82
  committed
  2a8b090
- test: restore security module keys through one shared snapshot after enforcement specs
  Wikid82
  committed
  015b788
- test: stop a timing check and a typo from weakening the output limit test
  Wikid82
  committed
  356cf65
- docs: correct the rate limiting, metrics and WAF notes
  Wikid82
  committed
  fc8baa6
- docs: record the QA result for the security settings leftovers
  Wikid82
  committed
  61ba9e9
- chore(deps): update Trivy version to v0.76.2 across workflows
  Wikid82
  committed
  41196d0
- fix: tidy security test helpers, translations and docs (#1849)
  Wikid82
  authored
  b5e454c
- fix: count a host with its own WAF handler as protected in the security status
  Wikid82
  committed
  693859d
- docs: record the QA result for the WAF status count fix
  Wikid82
  committed
  ece1520
- chore: update i18next and react-i18next to latest versions
  Wikid82
  committed
  430181a
- fix: count a host with its own WAF handler as protected (#1852)
  Wikid82
  authored
  a867e87
- chore(deps): update go-sqlite3 to v1.14.53
  Wikid82
  committed
  3da0763
- chore(deps): update zensical version in requirements and ensure installation in a virtual environment
  Wikid82
  committed
  77fbbb6
- docs: plan the lint sweep
  Wikid82
  committed
  029bfe7
- chore: raise golangci-lint timeout for local lint targets
  Wikid82
  committed
  c1061eb
- chore(frontend): fix import order, duplicate and type-only imports
  Wikid82
  committed
  abef0a4
- refactor(frontend): apply unicorn and sonar lint fixes
  Wikid82
  committed
  5d555d5
- test(frontend): wait for elements with findBy instead of waitFor and getBy
  Wikid82
  committed
  8864d5e
- chore(frontend): resolve unsafe and non-literal regex lint findings
  Wikid82
  committed
  988cc13
- test(frontend): fix testing-library and vitest hygiene findings
  Wikid82
  committed
  3fcf505
- fix: associate form labels with their controls
  Wikid82
  committed
  fe92812
- fix: make clickable overlays keyboard and screen-reader accessible
  Wikid82
  committed
  55e080f
- refactor(frontend): remove effect-driven state sync in hooks and theme context
  Wikid82
  committed
  20d01bd
- refactor(frontend): derive form and dialog state instead of syncing in effects
  Wikid82
  committed
  967640d
- chore: update Semgrep container image to version 1.184.0
  Wikid82
  committed
  9fb4dba
- refactor(frontend): derive list and page state instead of syncing in effects
  Wikid82
  committed
  3d0ade1
- chore: update Playwright image to version 1.65.0
  Wikid82
  committed
  57e827d
- chore: update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.92.0
  renovate[bot]
  authored
  671c2f4
- refactor(frontend): resolve remaining React compiler diagnostics
  Wikid82
  committed
  1c351f3
- chore: update playwright-core to version 1.65.0
  Wikid82
  committed
  00f4105
- chore(docker): sync toolchain image pin to caddy-crowdsec-7b8a6c0bd5a9d6da
  github-actions[bot]
  committed
  3295182
- chore: add a root ESLint config for the Playwright tests
  Wikid82
  committed
  f09e7b9
- chore: clear the root Playwright lint findings
  Wikid82
  committed
  c4db39c
- chore: enforce the lint policy in lefthook and CI
  Wikid82
  committed
  a9e066b
- docs: describe the lint policy
  Wikid82
  committed
  deb4071
- docs: record the QA result for the lint sweep
  Wikid82
  committed
  1285242
- chore(deps): bump @playwright/test to 1.65.0 and sync versions
  Wikid82
  committed
  6ca7a2c
- chore(docker): update golang image digest for backend builder
  Wikid82
  committed
  f4355a0
- chore: update Grype installation instructions and version to v0.121.2
  Wikid82
  committed
  2b99b88
- chore: update SYFT_VERSION to v1.57.0 in workflow files
  Wikid82
  committed
  8cc00bd
- chore(docker): sync toolchain image pin to caddy-crowdsec-bce5079da99f35d0
  github-actions[bot]
  committed
  33aef61
- chore: update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.92.0 (#1857)
  Wikid82
  authored
  b824671
- chore: update Semgrep container image to version 1.184.0
  Wikid82
  committed
  19cd024
- chore: update Playwright image to version 1.65.0
  Wikid82
  committed
  1b57c03
- chore: update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.92.0
  
  renovate[bot]
  authored and
  Wikid82
  committed
  ca476c1
- chore: update playwright-core to version 1.65.0
  Wikid82
  committed
  2ef5e92
- chore(docker): sync toolchain image pin to caddy-crowdsec-7b8a6c0bd5a9d6da
  
  github-actions[bot]
  authored and
  Wikid82
  committed
  16c161d
- chore(deps): bump @playwright/test to 1.65.0 and sync versions
  Wikid82
  committed
  f21e1e8
- chore(docker): update golang image digest for backend builder
  Wikid82
  committed
  be7a477
- chore: update Grype installation instructions and version to v0.121.2
  Wikid82
  committed
  15d710c
- chore: update SYFT_VERSION to v1.57.0 in workflow files
  Wikid82
  committed
  bf3cf60
- chore(docker): sync toolchain image pin to caddy-crowdsec-bce5079da99f35d0
  
  github-actions[bot]
  authored and
  Wikid82
  committed
  f4929fd
- chore: update alpine docker tag to v3.24.4
  renovate[bot]
  authored
  5985986
- chore: add a root ESLint config for the Playwright tests
  Wikid82
  committed
  264be05
- fix(deps): update Alpine image version to 3.24.4 in Dockerfile
  Wikid82
  committed
  bce27a4
- chore(docker): sync toolchain image pin to caddy-crowdsec-d81a5a8c75da92cc
  github-actions[bot]
  committed
  3e8ca93
- chore(docker): sync toolchain image pin to caddy-crowdsec-d81a5a8c75da92cc
  github-actions[bot]
  committed
  642a122
- Merge branch 'development' into chore/lint-sweep
  Wikid82
  authored
  78cf5b9
Commits on Nov 6, 2026
Commits on Nov 7, 2026
Commits on Nov 8, 2026
- chore(docker): update GeoLite2-Country.mmdb checksum
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  e9930a9
- chore(deps): add matchDepTypes for indirect dependencies in renovate configuration
  Wikid82
  committed
  c2ebefe
- chore(docker): update GeoLite2-Country.mmdb checksum (#1878)
  Wikid82
  authored
  1b05127
- chore: propagate changes from main into development (#1879)
  Wikid82
  authored
  3d17b5f
- fix: pin zlib in toolchain image
  Wikid82
  committed
  1382ca1
- chore(docker): refresh bundled proxy toolchain image
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  ea8cc2c
- chore(docker): refresh bundled proxy toolchain image (#1880)
  Wikid82
  authored
  b9aaea2
- fix(ci): add curl retries to Syft download in workflows
  Wikid82
  committed
  7a20d5d
- chore(deps): update Hermes to v0.3.7 and add hermes.sh for module management
  Wikid82
  committed
  52ff8e4
- chore(deps): update gzip dependency to v1.2.10 and add gzip.sh for module management
  Wikid82
  committed
  e8a28c6
- chore(deps): update github.com/gin-contrib/sse to v1.2.1
  Wikid82
  committed
  487bc52
- chore(deps): reorganize scripts for managing Go module dependencies
  Wikid82
  committed
  8e48c42
- chore(deps): update TypeScript to v7.1.0-dev.20261108.1
  Wikid82
  committed
  24963f4
- chore: update alpine:3.24.4 docker digest to f59abe6
  renovate[bot]
  authored
  dc98004
- chore(docker): sync toolchain image pin to caddy-crowdsec-a4f3ac6092c1f0d8
  github-actions[bot]
  committed
  919f71f
- chore: update alpine:3.24.4 docker digest to f59abe6 (#1881)
  Wikid82
  authored
  4f363f5
Commits on Nov 9, 2026
- chore(deps): update react-i18next to version 18.0.1
  Wikid82
  committed
  3aa9088
- chore(deps): update dotenv to version 18.0.10
  Wikid82
  committed
  6860289
- ci: remove chore-based skip rules from docker build workflow
  Wikid82
  committed
  70031b1
- chore(docker): refresh bundled proxy toolchain image
  
  Wikid82
  authored and
  github-actions[bot]
  committed
  dafaf08
- chore(docker): refresh bundled proxy toolchain image (#1883)
  Wikid82
  authored
  c3856d8

Commits

Commits on Nov 3, 2026

Commits on Nov 4, 2026

Commits on Nov 5, 2026