chore(stack): synchronize session revocation with security base - #417

Closed

seonghobae wants to merge 23 commits into

fix/session-revocation-url-token-endpointsfrom

fix/security-hono-csv-hardening

Commits on Jul 31, 2026

fix(security): bump @hono/node-server to 2.0.12 and close CSV formula whitespace bypass
seonghobae
committed
7a6ff36
ci: re-kick Actions after org queue storm (security train #386)
seonghobae
committed
868afdb
fix(security): JWT secret fail-closed + MS Project XML ReDoS removal
seonghobae
committed
1ae3f57
fix(ci): drop vestigial pnpm-lock so OpenCode coverage uses npm
seonghobae
committed
92df38c
fix(security): address CodeRabbit threads blocking merge-scheduler
seonghobae
committed
2b2726a
docs(security): preserve JWT secret across compose restarts
seonghobae
committed
d42c8c1
test(coverage): emit real Istanbul changed-line evidence
seonghobae
committed
73778cc
test(runtime): align coverage Node requirements
seonghobae
committed
c5965e6
fix(runtime): require unflagged node sqlite
seonghobae
committed
a10e6ac

Commits on Aug 2, 2026

Commits on Aug 3, 2026

docs(security): persist JWT signing key across restarts
seonghobae
committed
ba6ff1c
ci(coverage): select npm explicitly for trusted offline evidence
seonghobae
committed
871cde3
docs(security): record release-blocking invariants
seonghobae
committed
ca5be8c
docs(changelog): record security hardening
seonghobae
committed
874a626
ci: repair latest PR 386 review findings
seonghobae
committed
d7d7218
fix(review): harden auth and unsaved draft regressions
github-actions[bot]
committed
5ba6a97
docs(changelog): record review hardening
seonghobae
committed
bd9a515