Repository navigation

fix: security fixes for 1.1.4 - #49

Merged

freema merged 5 commits into

mainfrom

fix/security-1.1.4

Oct 2, 2026

Commits on Oct 2, 2026

fix(server): enforce tenant ownership on session routes

freema
and
claude
committed
730ee98
fix(webhooks): require developer access for GitLab MR note commands

freema
and
claude
committed
39c6726
fix(git): treat the session workspace as untrusted in server-side git

freema
and
claude
committed
6b09950
fix(subscription): keep tenant sessions off operator credentials

freema
and
claude
committed
34698e1
fix(runner): end Codex option parsing before the prompt

freema
and
claude
committed
8c5e11a