3 Commits

Author	SHA1	Message	Date
SB Yoon	d46e8d72c9	feat(cli): refuse ephemeral container auto-config writes (#10057) ... * feat(cli): refuse ephemeral container auto-config writes Detect containerized OmniRoute and block CLI/API config writes into throwaway homes unless a bind mount or explicit opt-in is present, and honor compose host-profile CLI_CONFIG_HOME mounts outside the container home. Co-authored-by: Cursor <cursoragent@cursor.com> * chore(changelog): name fragment for #10057 Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: yansigit <yansigit@users.noreply.github.com> Co-authored-by: diegosouzapw <diegosouza.pw@gmail.com>	2026-08-16 00:42:14 -03:00
Diego Rodrigues de Sa e Souza	efc92c6955	ci(quality): merge-integrity fast-gates + pre-flight hermetic mode (#6300) ... Merged into release/v3.8.45. CI merge-integrity fast-gates (changelog-integrity + agent-skills-sync) + pre-flight hermetic mode. O gate novo detectou 11 SKILL.md gerados fora de sync (drift pré-existente no tip: omni-api-keys endpoints, omni-github-skills do #6186) — regenerados neste PR, Merge-integrity GREEN no CI. Reds restantes base-red (dast-smoke/file-size drift/live-data flaky). Testes novos 17/17.	2026-07-05 17:50:10 -03:00
Hernan Javier Ardila Sanchez	fd26e601a2	fix(dashboard): use lightweight ping endpoint for MaintenanceBanner (fixes #3040) (#3043) ... Integrated into release/v3.8.8. Applied review fixes: moved the SELECT 1 into a pingDb() db helper (no raw SQL in route, Hard Rule #5) + the 503 catch no longer leaks err.message (Hard Rule #12). Thanks @herjarsa!	2026-06-01 14:30:17 -03:00