computer-playbook/tests/unit/python/roles at c23f0f0d29622da4a36d6ae375cb95bd360fad88 - computer-playbook - Infinito.Nexus Code Hub

kevinveenbirkenbach/computer-playbook

0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-10 12:47:04 +00:00

Files

T

History

kevinveenbirkenbachandClaude Opus 5.5 c23f0f0d29 Merge five sidetrees into feature/store-i18n

- fix/web-app-docs/codeql-xss (6e045bced8, 92/3): redirect header splitting, DOM-text navigation
- fix/cli/codeql-file-modes (20fae00bdf, 95-97/1-3): owner-only lock and marker files, explicit legend strings, mirror shim import
- fix/roles/codeql-js-hygiene (787f8d9a6d, 92-97/2-3): crypto wrong password, log sanitizer shape, fillStyle save/restore
- fix/svc-ai-agent-broker/codeql-ssrf (eeb9b22ae4, 92/4): platform and relay path from server-side lists, named error paths
- fix/test-e2e-playwright/concurrency-test-load (eb6940a9ad, 95/1): concurrency proven from the trace (gate pass 2 failure)

CodeQL PR #625 alerts #1079 and #957 stay false positives for the operator to dismiss.

🎯 Fix: 92-99 %
💥 Break: 1-4 %
💸 Cost: –
⏱️ Time: –
🛡️ Security: ~100 %
🏆 Score: 88-98
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-05 17:24:11 +00:00

..

…

style(dev-python): fold the env filter onto one line after the rename

2026-11-03 21:47:46 +01:00

svc-ai-agent-broker

fix(svc-ai-agent-broker): select platform and relay path from server-side lists

2026-11-05 17:18:22 +00:00

svc-ai-libretranslate-engine

…

…

svc-ai-ltengine

…

svc-ai-mcp-adapter

…

…

svc-bkp-container-2-local

…

svc-bkp-nfs-2-local

…

svc-bkp-remote-2-local

…

svc-bkp-volume-2-local

…

svc-db-openldap

fix(svc-db-openldap): name the user whose record lacks LDAP entry fields

2026-10-31 11:56:12 +01:00

svc-db-postgres

…

svc-net-firewall

…

…

svc-net-tor-smtp

…

svc-net-wireguard

fix(svc-net-wireguard): dial every endpoint at the IPv4 address it resolves to

2026-11-01 16:53:01 +01:00

svc-opt-keyboard-color

…

svc-opt-ssd-hdd

…

svc-opt-swapfile

fix(svc-opt-swapfile): keep an active swapfile that already meets the requested size

2026-10-31 10:03:15 +01:00

test(svc-runner): read the role files through the ROLE_FILE constants

2026-11-04 21:39:08 +01:00

svc-storage-nfs-server

…

sys-ca-selfsigned

…

sys-ctl-alm-email

…

sys-ctl-cln-bkps

…

sys-ctl-cln-disc-space

feat(cache): share package and tool caches across stacks and release swarm clusters after rescue

2026-10-30 22:04:38 +01:00

sys-ctl-hlth-csp

…

sys-ctl-hlth-disc-space

…

sys-ctl-hlth-journalctl

…

sys-ctl-hlth-msmtp

perf(email): resolve only the requested key in lookup('email')

2026-11-01 09:19:28 +01:00

sys-ctl-hlth-runtime

…

sys-ctl-hlth-volumes

…

sys-ctl-hlth-webserver

…

sys-ctl-rpr-container-hard

…

sys-ctl-rpr-container-soft

…

sys-dns-cloudflare-records

perf(sys-dns-cloudflare-records): poll record jobs every second while collecting

2026-11-05 11:21:37 +00:00

sys-dns-wildcards

…

sys-front-inj-all

perf(plugins): share template_shallow and render the front injectors through it

2026-11-05 12:31:23 +00:00

sys-front-inj-design

fix(tests): clear the four lint failures store-i18n would push

2026-11-05 15:24:20 +00:00

sys-front-inj-logout

feat(network): point logout and peer allowlists at every network a vhost serves

2026-10-30 18:00:24 +01:00

sys-front-inj-matomo

…

Merge remote-tracking branch 'origin/main' into feature/store-i18n

2026-10-30 23:36:38 +01:00

…

sys-stk-backend

…

sys-stk-front-proxy

perf(sys-stk-front-proxy): write the body_filter Lua in the vhost's single contents call

2026-11-05 15:31:05 +00:00

perf(sys-front-inj-design): skip repeat identical stylesheet writes per run

2026-11-05 08:40:44 +00:00

sys-svc-cln-domains

…

sys-svc-compose

fix(merge): run the #1212 rehash before compose pull and every compose up

2026-11-04 21:01:08 +01:00

sys-svc-compose-ca

perf(sys-svc-compose-ca): stop probing images on the swarm no-wrapper path

2026-11-03 16:14:01 +01:00

sys-svc-container

perf(sys-svc-container): roll a single-replica swarm service without a stagger delay

2026-11-03 12:45:15 +01:00

sys-svc-mail-msmtp

…

…

…

sys-svc-webserver-core

test(sys-svc-webserver-core): stub IS_SWARM_MODE for the access-log render

2026-10-31 18:56:30 +01:00

sys-token-store

…

sys-util-git-pull

…

…

test-e2e-playwright

Merge five sidetrees into feature/store-i18n

2026-11-05 17:24:11 +00:00

fix(update): stop retrying the 404 of pacman's optional database signature

2026-11-04 09:06:45 +01:00

web_app_keycloak

…

web-app-baserow

fix(web-app-baserow): keep the idle database connection alive across the swarm VIP

2026-10-30 16:52:50 +01:00

web-app-bigbluebutton

fix(web-app-bigbluebutton): publish every container port once, on the proxy's upstream host

2026-11-03 12:34:22 +01:00

web-app-bookwyrm

…

web-app-confluence

…

web-app-dashboard

fix(web-app-dashboard): build the dashboard image once for all network instances

2026-11-01 09:58:58 +01:00

web-app-decidim

fix(objstore): serve Decidim and Funkwhale object-store files from the app's own origin

2026-11-04 16:17:29 +01:00

web-app-discourse

test(web-app-discourse): build the vars path from ROLE_FILE_VARS_MAIN

2026-11-04 11:20:58 +01:00

fix(web-app-docs): encode line breaks in redirects, navigate by built URLs

2026-11-05 16:54:27 +00:00

web-app-erpnext

fix(web-app-erpnext): seed the standard price lists the skipped setup wizard creates

2026-11-01 16:45:53 +01:00

web-app-espocrm

fix(web-app-espocrm): keep the onion sibling's OIDC callback on its own host

2026-10-30 09:12:23 +01:00

Merge remote-tracking branch 'origin/main' into feature/store-i18n

2026-10-30 23:36:38 +01:00

web-app-flowise

…

web-app-funkwhale

refactor(web-app-funkwhale): drop the same_origin prefix from the module sources

2026-11-04 18:28:29 +01:00

fix(web-app-gitea): converge duplicate LDAP auth sources and keep the bind password off the host argv

2026-11-04 18:10:09 +01:00

test(web-app-gitlab): build the runner-stdin environment with select_autoescape

2026-11-03 21:56:06 +01:00

web-app-homeassistant

fix(web-app-homeassistant): check the realigned owner against the recreated hub

2026-10-30 09:03:47 +01:00

web-app-jellyfin

…

…

fix(platform-admin): create platformadmin on existing installs in six roles

2026-11-01 01:21:20 +01:00

web-app-keycloak

fix(web-app-keycloak): close self-service email takeover

2026-11-01 08:57:17 +01:00

web-app-listmonk

…

web-app-littlejs

…

web-app-magento

fix(web-app-magento): toggle the two-factor modules only when their state is wrong

2026-10-31 18:58:00 +01:00

…

…

fix(tests): clear the four lint failures store-i18n would push

2026-11-05 15:24:20 +00:00

web-app-mediawiki

fix(platform-admin): create platformadmin on existing installs in six roles

2026-11-01 01:21:20 +01:00

test(web-app-moodle): mark the tempdir walk of the auth_oidc sync test

2026-11-03 21:43:54 +01:00

…

web-app-nextcloud

test: satisfy the role-file SPOT and cached-read lints in two new tests

2026-11-01 09:33:20 +01:00

…

web-app-openbao

…

web-app-openclaw

…

web-app-openproject

…

web-app-openwebui

…

web-app-peertube

…

…

web-app-pgadmin

test(web-app-pgadmin): read project files through the cached readers

2026-11-05 16:20:42 +00:00

web-app-prometheus

fix(web-app-prometheus): keep cadvisor's scrape cost flat as containers grow

2026-10-31 18:01:14 +01:00

web-app-semaphore

…

web-app-socialhome

…

web-app-stalwart

perf(web-app-stalwart): batch independent management JMAP reads into one request each

2026-11-03 19:54:58 +01:00

web-app-suitecrm

fix(web-app-suitecrm): keep the onion sibling's SAML login on its own host

2026-10-30 09:32:23 +01:00

test(web-app-taiga): pass a neutral config-append marker in the static URL test

2026-10-31 14:07:46 +01:00

fix(web-app-wazuh): give the manager room for the vulnerability feed and name failing API calls

2026-11-03 12:23:53 +01:00

web-app-weblate

test(web-app-weblate): keep the stand-ins next to the package tests

2026-10-31 19:13:53 +01:00

web-app-wordpress

feat(web-app-wordpress): set admin_email, blogname and the FreedomTranslate options through the options map

2026-11-04 12:53:11 +01:00

…

…

web-opt-rdr-domains

perf(plugins): share template_shallow and render the front injectors through it

2026-11-05 12:31:23 +00:00

web-opt-rdr-www

…

…

web-svc-collabora

fix(web-svc-collabora): let every Nextcloud network sibling frame the editor

2026-10-31 18:42:09 +01:00

…

web-svc-libretranslate

…

fix(web-svc-logout): keep each conductor's sweep on its own network

2026-10-31 10:05:29 +01:00

web-svc-seaweedfs

fix(objstore): serve public bucket files same-origin on every vhost of the consumer

2026-10-30 21:52:35 +01:00

web-svc-translate

…

__init__.py

…