diegosouzapw dcfe0afa6e Merge remote-tracking branch 'origin/release/v3.8.51' into fix/sec-jwt-bootstrap-chain-7pq4

2026-09-15 16:36:07 -03:00

..

classify.test.ts

…

client-api-policy-fallback.test.ts

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

client-api-policy.test.ts

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

credential-export-always-protected.test.ts

fix(auth): close the JWT_SECRET bootstrap chain — real-peer loopback, obsidian always-protected, DATA_DIR vault refusal

2026-09-15 16:33:36 -03:00

csrf.test.ts

…

discovery-routes-local-only.test.ts

…

ip-filter-enforcement-6131.test.ts

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

management-policy.test.ts

fix(auth): close the JWT_SECRET bootstrap chain — real-peer loopback, obsidian always-protected, DATA_DIR vault refusal

2026-09-15 16:33:36 -03:00

oauth-autoimport-local-only.test.ts

chore(providers): retire GPL-derived Raycast and Hailuo integrations (#11691)

2026-08-28 05:16:59 -03:00

peer-stamp.test.ts

fix(authz): trust cf-connecting-ip for via-proxy detection when peer is Cloudflare edge (#11514) (#11643)

2026-08-26 13:39:29 -03:00

pipeline.test.ts

fix(auth): close the JWT_SECRET bootstrap chain — real-peer loopback, obsidian always-protected, DATA_DIR vault refusal

2026-09-15 16:33:36 -03:00

probe-9033-repro.test.ts

test(infra): retry recursive temp-dir removal instead of failing a shard on ENOTEMPTY (#11966) (#11968)

2026-08-29 01:17:40 -03:00

proxy-contract.test.ts

…

proxy-matcher-case.test.ts

…

public-origin.test.ts

…

public-policy.test.ts

test(authz): stop skipping the loopback coverage and re-point the Host-spoofing guard

2026-08-26 08:00:45 -03:00

public-route-exact-match.test.ts

chore(providers): retire GPL-derived Raycast and Hailuo integrations (#11691)

2026-08-28 05:16:59 -03:00

route-guard-local-prefix.test.ts

…

route-guard-skills-collect.test.ts

fix(authz): gate the cli-tools status and skills execution routes to LOCAL_ONLY (#13745)

2026-09-15 13:25:35 -03:00

route-guard-tunnel-processes-local-only.test.ts

fix(authz): restrict tunnel process routes locally (#11531)

2026-08-25 13:12:34 -03:00

route-guard-version-get-exemption.test.ts

test(authz): pin the GET-exemption set by membership, not by count (#11531) (#11580)

2026-08-26 08:10:29 -03:00

route-guard-vnc-session-local-only.test.ts

…

routeGuard.test.ts

fix(security): close round-3 advisories (v7g9, x7vm, j7j4, jcm5) + exposure warning (wmgv) (#11261)

2026-08-23 20:32:42 -03:00

spawn-capable-prefixes-client-safe.test.ts

fix(authz): gate the cli-tools status and skills execution routes to LOCAL_ONLY (#13745)

2026-09-15 13:25:35 -03:00