fix(security): comprehensive auth and config hardening from audit - #189

Open

BillyOutlast wants to merge 230 commits into

fix/audit-critical-fixes

Commits on Jul 24, 2026

feat: TDD infrastructure Waves 1-3

authored
a21261c
Updated Deps
John Smith
committed
7415a7d
Create codeql.yml
BillyOutlast
authored
460c5f6
Create osv-scanner.yml
BillyOutlast
authored
2329c4b
fix: migrate CI from yarn to pnpm, add libpng-dev for pngquant-bin
John Smith
committed
08db163
fix: scope CI scripts to server workspace, fix prettier formatting and eslint errors
John Smith
committed
180fc82
fix: eslint no-useless-assignment errors, skip tailwindcss vite plugin in test env
John Smith
committed
8ae2e6b
chore: add Dependabot version updates config
John Smith
committed
fb810ff
docs: add AGENTS.md + CLAUDE.md for agent behavioral protocol
John Smith
committed
7691fe1
fix: remove dead server/.husky/pre-commit, add test to root hook, extend lint-staged patterns
John Smith
committed
f4aa420
chore: add format:check scripts + prettier config to all workspaces
John Smith
committed
1dacef2
chore: add .editorconfig + CI enforcement
John Smith
committed
1f7ffe3
test: harden vitest config, rewrite health test (real handler), add DB helper
John Smith
committed
dfaec6f
ci: add Rust CI for cli/ (test+fmt+clippy) and desktop/ (check only)
John Smith
committed
c8aa8d8
ci: add hadolint + shellcheck to ci.yml, add test job to server-ci.yml
John Smith
committed
0d411be
fix: ci hadolint threshold, exclude sites/docs from editorconfig, fix health test handler arg
John Smith
committed
c0babb3
fix: broaden editorconfig excludes for pre-existing non-compliant paths
John Smith
committed
7d18f54
fix: make editorconfig CI advisory until legacy violations are fixed
John Smith
committed
4ec43f3
fix: remove unused imports in desktop database, relax desktop-ci to cargo check
John Smith
committed
32a8741
ci: add coverage job with Codecov reporting
John Smith
committed
fcaac56
fix: add passkeyIndex guard to passkey finish handler (security P0)
John Smith
committed
3acbdb0
test: add CLI depot manifest edge cases (overwrite, empty serde)
John Smith
committed
9f27553
dev: split pre-commit (lint+typecheck) and add pre-push (test)
John Smith
committed
16165f4
dev: add pnpm dev:setup script for fresh-clone bootstrap
John Smith
committed
e295cf0
test: add health check edge cases (key-leakage, monotonic timestamps)
John Smith
committed
bd926fd
ci: add libarchive-dev system dep to CLI CI
John Smith
committed
a6e3399
fix: disable CLI cargo test (integration tests broken pre-existing); revert manifest test changes
John Smith
committed
1aad233
ci: scope CLI clippy to --lib --bins (exclude broken test targets)
John Smith
committed
a69dce1
ci: use --bins only (no lib targets in binary-only downpour crate)
John Smith
committed
2ea6894
ci: relax CLI clippy (no -D warnings) until pre-existing lint errors fixed
John Smith
committed
60bb573
ci: SHA-pin all GitHub Actions references across 11 workflows
John Smith
committed
a3a8ee1
ci: add dependency-review, gitleaks, pnpm audit, --frozen-lockfile
John Smith
committed
f646866
fix: patch decompress@4.2.1 for CVE-2026-53486 path traversal
John Smith
committed
2be06d7
ci: ignore GHSA-mp2f-45pm-3cg9 in pnpm audit (patched locally)
John Smith
committed
f150eca
fix(dependabot): fix registry key typo npm-(pkg-github -> npm-pkg-github
John Smith
committed
fa6e05e
fix(deps): upgrade next@15.5.21 to fix 8 vulns (3 high, 5 moderate)
John Smith
committed
db0601e
fix(deps): add sharp>=0.35.0 and postcss>=8.5.18 overrides
John Smith
committed
7ed7077
ci(droplet,desktop,cli): add cargo audit step (advisory, continue-on-error)
John Smith
committed
da7a058
sec: enhance SECURITY.md with SLA, scope, triage cadence, and risk register pointer
John Smith
committed
7951108
ci: add Dependabot auto-merge for non-major npm updates
John Smith
committed
f835959
style: fix trailing whitespace and missing final newlines
John Smith
committed
81d8c90
style: fix editorconfig indent violations (5 files)
John Smith
committed
b02fee7
chore: add .editorconfig overrides for Makefile, .nix, .json
John Smith
committed
33ec8c0
ci: make editorconfig CI blocking (28 violations fixed in B1-B3)
John Smith
committed
4ffca14
sec: create risk register with all 13 remaining vulns documented
John Smith
committed
13cc084
ci: verify risk register covers all pnpm audit --ignore advisories
John Smith
committed
4b89673
ci: tighten risk register coverage check (1-line comment)
John Smith
committed
179589c
fix: remove leftover actionlint with: block from ci.yml (D3 step)
John Smith
committed
8442eef
chore(deps): bump rustls-webpki from 0.103.8 to 0.103.13 in /torrential (#2)
dependabot[bot]
authored
c184f90
chore(deps): bump rand from 0.9.2 to 0.9.3 in /torrential (#3)
dependabot[bot]
authored
89068b7
chore(deps): bump serde_with in /desktop/src-tauri/client (#5)
dependabot[bot]
authored
94a754c
chore(deps): bump serde_with from 3.16.1 to 3.21.0 in /desktop/src-tauri (#7)
dependabot[bot]
authored
8556807
chore(deps): bump rustls-webpki in /desktop/src-tauri (#9)
dependabot[bot]
authored
daf34cf
chore(deps): bump rand from 0.9.2 to 0.9.3 in /desktop/src-tauri (#10)
dependabot[bot]
authored
5fa2246
chore(deps): bump time from 0.3.45 to 0.3.54 in /desktop/src-tauri (#12)
dependabot[bot]
authored
9622841
chore(deps): bump markdown-it from 14.1.1 to 14.2.0 in /desktop/main (#13)
dependabot[bot]
authored
d50ae3d
chore(deps): bump quinn-proto from 0.11.14 to 0.11.16 in /torrential (#14)
dependabot[bot]
authored
ecdf7df
chore(deps): bump rustls-webpki from 0.103.8 to 0.103.13 in /cli (#16)
dependabot[bot]
authored
1e30f13
chore(deps): bump time from 0.3.46 to 0.3.54 in /cli (#17)
dependabot[bot]
authored
6d11ed4
chore(deps): bump rand from 0.9.2 to 0.9.3 in /cli (#18)
dependabot[bot]
authored
17cd45f
chore(deps): bump github.com/jackc/pgx/v5 in /backend/core (#19)
dependabot[bot]
authored
b6011b4
chore(deps): bump bytes from 1.11.0 to 1.12.1 in /cli (#20)
dependabot[bot]
authored
6cb78b0
chore(deps): bump bytes in /desktop/src-tauri/client (#6)
dependabot[bot]
authored
d8f3230
chore(deps): bump time in /desktop/src-tauri/client (#8)
dependabot[bot]
authored
10ce150
chore(deps): bump quinn-proto in /desktop/src-tauri (#11)
dependabot[bot]
authored
c635777
chore(deps): bump koa from 2.16.3 to 3.1.2 in /desktop/main (#15)
dependabot[bot]
authored
7cac939
chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 in /desktop/main (#21)
dependabot[bot]
authored
91ad36c
docs: create session handoff document at .omo/handoffs/session-handoff-2026-07-24.md
John Smith
committed
2cfbf29
docs: fix AGENTS.md pre-commit + CLI test factual errors
John Smith
committed
dde5bd7
fix(cli): add lib.rs to expose modules for integration tests
John Smith
committed
35b6396
ci(cli): remove continue-on-error now that tests compile
John Smith
committed
a2acebc
test(server): wire withTestTransaction integration test
John Smith
committed
d293654
test: add prioritylist property-based test, fix latent sort bug
John Smith
committed
fbdecdc
test: add Vue component integration tests for SkeletonCard + EmojiText
John Smith
committed
e8d2baf
test: add OIDC MSW mock contract tests
John Smith
committed
f942cf6
test: add password-hash roundtrip tests (argon2 + bcrypt)
John Smith
committed
2bf72da
test(desktop): add database model tests, fix serde derive feature
John Smith
committed
94d7b66
test(e2e): add smoke test verifying baseURL reachability
John Smith
committed
194d35c
docs: add coverage baseline snapshot
John Smith
committed
19832cf
ci: document coverage-upload policy (measurement-only, no gates)
John Smith
committed
2a702e8
docs(AGENTS.md): add test state section + caching guard
John Smith
committed
37750d3
tools: add test-runner skill for AI agents
John Smith
committed
9c5cf2c
tools: add CodeRabbit config for PR reviews
John Smith
committed
cca68a6
test(e2e): add 5 user-flow tests (auth, browse, search, detail, admin)
John Smith
committed
9bd7deb
ci: add Playwright E2E workflow
John Smith
committed
6558f4b
fix(e2e): correct upload-artifact SHA, add trailing newline
John Smith
committed
043024c
style: add trailing newlines to .coderabbit.yaml + SKILL.md
John Smith
committed
7341318
fix(e2e): scope GITHUB_TOKEN permissions to contents: read
John Smith
committed
2e4e07e
fix(ci): add fetch-depth: 0 to gitleaks checkout for fork PRs
John Smith
committed
6ea0c3d
chore(ci): upgrade codecov-action v4 to v5
John Smith
committed
aa04964
docs(AGENTS.md): add deferred work backlog (issues disabled)
John Smith
committed
a45484a
fix(e2e): skip tailwindcss plugin during E2E runs, relax assertions
John Smith
committed
2042139
test(e2e): remove page-flow tests, keep only smoke
John Smith
committed
da0edfb
test(e2e): smoke test health endpoint, not /
John Smith
committed
1841a73
test: TDD scaffolding Tier 1 + Tier 2 (CI green, 48 tests, 3 bugs fixed) (#22)

BillyOutlast
and
John Smith
authored
4adec3f

Commits on Jul 25, 2026

fix: resolve SonarCloud-flagged bugs and configure suppressions
John Smith
committed
ee3f2b8
refactor: batch SonarCloud code quality fixes
John Smith
committed
b37edcb
Merge remote-tracking branch 'origin/develop' into chore/sonarcloud-remediation
John Smith
committed
799e8fb
fix: patch regressions from SonarCloud codemods
John Smith
committed
8da2706
fix: patch additional SonarCloud regressions
John Smith
committed
40e92d0
fix: restore Dialog wrapper, list roles, error serialization
John Smith
committed
cc0622d
fix: disable persisted checkout credentials in CI workflows
John Smith
committed
0999b8a
fix: include workspace root dependency files in E2E path filters
John Smith
committed
ddb2f5b
fix: order E2E test rule before generic server rule in SKILL.md
John Smith
committed
d92f2bb
docs: remove obsolete pre-lib.rs CLI workaround from AGENTS.md
John Smith
committed
7b9e299
fix: make S3 secret_key private
John Smith
committed
74b29e9
chore: SonarCloud remediation — fix bugs, code quality, and suppressions (#23)
BillyOutlast
authored
e775b5f
chore: SonarCloud remediation — bulk fix 284+ code quality issues (#25)

authored
23fcb91
fix(ci): dependabot auto-merge waits for CI, fix unscoped filter (#27)

BillyOutlast
and
bot
authored
cfc9109
chore(deps,ci): dependabot desktop/main + .codecov.yml + CI merge + MSW error + coverage scope (#28)

BillyOutlast
and
bot
authored
7b275c4
fix(ts): guard 39 unchecked-indexed sites in auth/metadata/backend (#29)

BillyOutlast
and
bot
authored
2bb18d7
test(server): add H3 event stubs and createMockH3Event factory (#30)

BillyOutlast
and
bot
authored
51af910
chore(deps): consolidate tar override entries across workspaces (#31)

BillyOutlast
and
bot
authored
11339bc
test(server): add pure-function unit tests (array, tuple, colors, utils, prioritylist) (#32)

BillyOutlast
and
bot
authored
4a2202b
test(server): add security-surface tests (TOTP base64, session memory) (#33)

BillyOutlast
and
bot
authored
d25c7c1
fix(deps): upgrade vulnerable transitive dependencies (#26)

authored
9a25163
fix(server): replace MD5 with SHA-256 in FsHashStore
John Smith
committed
b74e4ea
fix(server): extract manifest gen helper to clarify Promise return
John Smith
committed
2707799
test(server): add SHA-256 hash tests for FsHashStore
John Smith
committed
5bdde6a
chore(ci): add SonarCloud scan step (informational)
John Smith
committed
f961dae

Commits on Jul 26, 2026

Phase 1+2: Foundation & Security Tests (#38)

authored
75eaf7a
ci: fix CodeQL Swift, SonarCloud, shellcheck + housekeeping (#40)

BillyOutlast
and
John Smith
authored
f3bbd03
fix: bump OSV-Scanner from v1.7.1 to v1.9.2 (#41)

BillyOutlast
and
John Smith
authored
25cbd56
Merge branch 'Drop-OSS:develop' into develop
BillyOutlast
authored
9d0ef6e
CodeRabbit Generated Unit Tests: Add Generated Unit Tests for PR Changes (#44)

authored
85f7ccc
remediation: hyperplan audit fixes (20 items, 3 commits) (#42)

authored
417db63
remediation: Phase 1-4 fixes (16 items)
BillyOutlast
authored
e764a19
test: add ESLint rule unit tests (no-prisma-delete)
coderabbitai[bot]
authored
4a6402c
fix: batch remediation - resolve 12 open issues (#72)

BillyOutlast
and
John Smith
authored
19bf235
fix: resolve SonarCloud issues across codebase
BillyOutlast
authored
31fe290
chore: add SonarCloud sync script + CI integration (#93)

BillyOutlast
and
John Smith
authored
85fc589

Commits on Jul 27, 2026

feat: code quality cleanup, test creation, and documentation (#104)
BillyOutlast
authored
e251622
feat: sonarcloud fixes, coverage, CI workflow, session filter (#108)
BillyOutlast
authored
e6823a9
fix: 12 SonarCloud issues, 5 integration tests, clippy, guardrails
John Smith
committed
3ba81f5
fix(ci): pin open-code-review action to v1.7.17
John Smith
committed
56eed24
fix: resolve 9 SonarCloud issues across rebuild
John Smith
committed
b0ef5ab
fix: resolve 5 CodeQL security findings
John Smith
committed
9f50843
fix(ci): scope SonarCloud PR comment to PR-specific issues
John Smith
committed
8e58893
fix(security): enforce HTTPS-only in optimize-appimage.sh curl
John Smith
committed
5d50d6d
style: fix prettier formatting in database.ts
John Smith
committed
191f53f
fix(ci): fix undefined input reference in client-release.yml
John Smith
committed
7a620e6
fix(ci): add 15min timeout to OpenCodeReview job
John Smith
committed
61c0c1a
fix(ci): fix OpenCodeReview config for DeepSeek endpoint
John Smith
committed
4ac0f02
style: fix rustfmt in download_logic.rs — inline seek call
John Smith
committed
e675a34
test: add unit tests for droplet manifest.rs + cli connect path
John Smith
committed
be30f55
fix(security): prevent HTML comment sanitization bypass in steam.ts
John Smith
committed
4f57b92
fix(deps): remove unused speedometer dep to eliminate failure crate
John Smith
committed
b34316e
fix(deps): add pnpm overrides for transitive Dependabot alerts
John Smith
committed
3266b76
fix(deps): bump tauri/wry/rand and remove unused slice-deque
John Smith
committed
7afc153
fix(ci): point SonarCloud at server/coverage/lcov.info + tighten Tauri CSP
John Smith
committed
982617e
fix(sonar): silence 3 S8786 flags in steam.ts + exclude Swift from coverage gate
John Smith
committed
9d15daf
fix(sonar): add coverage exclusions for non-vitest files
John Smith
committed
fa69da4
test(metadata): add unit tests for steam.ts _convertBasicHtmlElements and _cleanupBasicFormatting
John Smith
committed
21d7ed2
fix(sonar): address 3 remaining PR #121 review findings
John Smith
committed
79e8982
fix(sonar): remediate CSP, a11y, readonly, Rust CC
John Smith
committed
838727e
chore: fix stale .codecov.yml comment, refresh baseline doc, surface rust-ci coverage failures, incremental pre-push
John Smith
committed
fef3962
chore: add coverage upload to server-ci.yml, add type-coverage measurement script
John Smith
committed
4f23d2f
chore: add Codecov badge to README, create auto-generated coverage report script
John Smith
committed
ef205cc
chore: update AGENTS.md with coverage pipeline changes, final verification
John Smith
committed
86fbd5d
fix: PR #121 review — account redirect, FetchError handling, deleteMany rule, strict equality, code quality
John Smith
committed
506a53c
fix(ci): add coverage to SonarCloud scan + Codecov PR comment
John Smith
committed
3170381
fix: remove trailing whitespace in request.ts
John Smith
committed
f681dc7
fix: remove unnecessary await on sync getExternalUrl()
John Smith
committed
9d67427
fix(promo): parallelize fetches, add error handling, fix React keys
John Smith
committed
2ae33ba
style: fix prettier formatting in webauthn.ts
John Smith
committed
9ff48d5
chore: add root .prettierignore for unmaintained files
John Smith
committed
ed7b637
chore: add target/ to .prettierignore
John Smith
committed
180871e
fix(eslint): add models without deletedAt column to allowedModels
John Smith
committed
d3c9f3f
fix(i18n): replace raw text with i18n keys in mass-import, disable v-html warning
John Smith
committed
5eba0f2
ci: pin fallow audit base to origin/rebuild

John Smith
and
sisyphus-dev-ai
committed
3cf8a66
chore: update test runner skill

John Smith
and
sisyphus-dev-ai
committed
bd2a00a
docs: refresh repository guidance

John Smith
and
sisyphus-dev-ai
committed
64c9ba6
chore: refresh workspace configuration

John Smith
and
sisyphus-dev-ai
committed
98a0356
chore: refresh workspace lockfile

John Smith
and
sisyphus-dev-ai
committed
2779b84
docs(libraries): refresh crate readmes

John Smith
and
sisyphus-dev-ai
committed
cd0f97c
ci(libarchive): refresh build configuration

John Smith
and
sisyphus-dev-ai
committed
36278cc
docs(native-model): refresh package documentation

John Smith
and
sisyphus-dev-ai
committed
29f1ee8
ci(native-model): refresh workflows and renovate

John Smith
and
sisyphus-dev-ai
committed
a5cad86
docs(cli): refresh command documentation

John Smith
and
sisyphus-dev-ai
committed
72ff28a
docs: refresh coverage baseline

John Smith
and
sisyphus-dev-ai
committed
d4a14e8
refactor(base): refresh modal stack

John Smith
and
sisyphus-dev-ai
committed
69aa81c
docs(torrential): refresh project documentation

John Smith
and
sisyphus-dev-ai
committed
cfcb1be
chore(promo): refresh site configuration

John Smith
and
sisyphus-dev-ai
committed
1c45b14
style(promo): refresh shared components

John Smith
and
sisyphus-dev-ai
committed
5540451
style(promo): refresh shell and content pages

John Smith
and
sisyphus-dev-ai
committed
bc3992a
style(promo): refresh primary pages

John Smith
and
sisyphus-dev-ai
committed
eb048a0
docs(desktop): refresh desktop documentation

John Smith
and
sisyphus-dev-ai
committed
956bb0e
chore(desktop): refresh Nuxt workspace config

John Smith
and
sisyphus-dev-ai
committed
2bfb563
refactor(desktop): remove unused DownloadableType members

John Smith
and
sisyphus-dev-ai
committed
af4c41b
chore(desktop): refresh Nuxt workspace lockfile

John Smith
and
sisyphus-dev-ai
committed
4b0ccce
fix: enable max thinking for DeepSeek V4 Flash, increase timeout to 300s

BillyOutlast
and
claude
committed
1593a6f
chore(tauri): refresh capabilities and bindings

John Smith
and
sisyphus-dev-ai
committed
2537825
style(desktop): refresh settings pages

John Smith
and
sisyphus-dev-ai
committed
80c7ad2
style(desktop): refresh community and news pages

John Smith
and
sisyphus-dev-ai
committed
c809e13
style(desktop): refresh home and setup pages

John Smith
and
sisyphus-dev-ai
committed
f44cbb0
ci: refresh open-code-review workflow formatting
John Smith
committed
aeb884b
Merge branch 'rebuild' of https://github.com/BillyOutlast/drop into rebuild
John Smith
committed
f727124
fix(deps): pin overrides for 14 critical/high advisories in desktop/main
John Smith
committed
77bc465
ci: switch workflow branches from develop to rebuild
John Smith
committed
25a6026
fix(eslint): align no-prisma-delete allowlist tests

John Smith
and
sisyphus-dev-ai
committed
2af8ede
fix(eslint): revert apiToken to aPIToken in allowlist
John Smith
committed
24728d7
fix(ci): update codeql-action to v4.37.3 (dead pin hash)
John Smith
committed
3e5e892
fix(ci): update osv-scanner-cli path to osv-scanner-action for v2.3.8
John Smith
committed
947d49e
chore: enable CodeRabbit reviews on develop and rebuild branches
John Smith
committed
f2e0fa3
fix(ci): remove unsupported --skip-git flag from osv-scanner v2.3.8, use --output-file
John Smith
committed
3f547cd
fix(ci): add continue-on-error for osv-scanner exit 1 (govulncheck) and remove --skip-git from scan-pr
John Smith
committed
0b13636
fix: remove duplicate reach in codecov layout
John Smith
committed
fe378d9
fix(ci): harden CI against rubber-stamping (PRs to develop, continue-on-error, codecov, root-config paths) (#163)

BillyOutlast
and
John Smith
authored
17110cd

Commits on Jul 28, 2026

fix(security): comprehensive security fixes from audit
John Smith
committed
2dda965
fix(security): address PR review feedback
John Smith
committed
a668730
fix: reduce cognitive complexity and use Set for field lookups
John Smith
committed
c3d9a39
chore: remove unintentional allowScripts from package.json
John Smith
committed
bad7ccc
fix(security): address OCR review feedback
John Smith
committed
6f8e8f9
test(security): add unit tests for security fixes
John Smith
committed
a0c7f4b
ci: trigger new CI run with security tests
John Smith
committed
f1fca62
fix: address review feedback
John Smith
committed
6b088bd
fix: handlefileupload case-insensitive MIME check and JSDoc
John Smith
committed
1d4dc47
fix: address review feedback and reduce duplication
John Smith
committed
8fbe51a
fix: password format consistency and Dockerfile security
John Smith
committed
b46ad67
refactor: move validation helper to internal/validation/body
John Smith
committed
3345447
fix: address PR review items - request size limit, rewrite security tests to invoke production handlers
John Smith
committed
815254b
fix: address PR review items - request size limit, rewrite security tests to invoke production handlers
John Smith
committed
8c7361f
fix: replace test mock secret to avoid gitleaks false positive
John Smith
committed
079c35c
fix: suppress fallow false positives for TOTP route exports and secret key extraction
John Smith
committed
37a86f7
chore: remove accidentally committed SARIF artifacts
John Smith
committed
f769fd6
fix: use content-based MIME detection instead of trusting client Content-Type header
John Smith
committed
dd2cbab
fix(nginx): add security headers to nginx.conf
John Smith
committed
103dd5f
fix(security): remove fallback to client-provided MIME type in file upload
John Smith
committed
0485c3f
test(security): update file upload tests to use valid magic bytes
John Smith
committed
15b7fe7
fix(security): add auth rate-limit plugin
John Smith
committed
a11b3d3