Diego Rodrigues de Sa e Souza 4c5a437d2e feat(dashboard): wildcard-CORS runtime warning + CORS security doc (#5602) ...

Adds docs/security/CORS.md (162-line security guide) + a wildcard-CORS runtime warning
surfaced in the dashboard AuthzSection, wired through cors/origins.ts + the authz-inventory
route. Re-cut onto release/v3.8.44 tip (branch was fossilized; the ApiManagerPageClient
banner half already landed on release). Tests: 20 cors/origins + 9 authz-inventory + 2
banner(vitest). typecheck:core 0, docs-sync/symbols/fabricated/links pass.

Co-authored-by: diegosouzapw <diegosouza.pw@gmail.com>

2026-07-02 22:14:46 -03:00

..

cli-tools

Release v3.8.19 (#3526)

2026-06-09 22:57:12 -03:00

compression

Release v3.8.33 (#4515)

2026-06-22 03:17:02 -03:00

services

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

v1

feat(relay): gate bifrost auto routing by provider manifest (#5870)

2026-07-02 17:54:50 -03:00

webhooks

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

authz-inventory.test.ts

feat(dashboard): wildcard-CORS runtime warning + CORS security doc (#5602)

2026-07-02 22:14:46 -03:00

combo-002-first-field.test.ts

Release v3.8.39 (#5164)

2026-06-28 06:58:29 -03:00

combo-error-response.test.ts

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

compression-engines-route.test.ts

Release v3.8.25 (#3866)

2026-06-15 03:32:11 -03:00

compression-preview-engine.test.ts

Release v3.8.25 (#3866)

2026-06-15 03:32:11 -03:00

context-analytics-engine-route.test.ts

Release v3.8.25 (#3866)

2026-06-15 03:32:11 -03:00

context-combos-default-route.test.ts

Release v3.8.32 (#4418)

2026-06-21 08:56:51 -03:00

discovery-routes.test.ts

feat(discovery): Phase 2 — reporter, /api/discovery/* routes (strict loopback-only) + dashboard UI (#5939)

2026-07-02 22:02:29 -03:00

server-error-message.test.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

settings-audit.test.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

sync-models-readiness.test.ts

fix(ModelSync): shared loopback readiness gate + IPv4 force (#2221)

2026-05-14 00:16:22 -03:00

v1-me-status-route.test.ts

Add self-service API key usage status (#2908)

2026-05-29 13:16:53 -03:00

validated-json-body.test.ts

refactor(api): add validatedJsonBody helper (salvage #5075) (#5931)

2026-07-02 20:27:47 -03:00