Juri db5ae3c33d docs(dependencies): clarify socket.yml is registry-side scan, not CI gate (#12664) ...

* docs(dependencies): clarify socket.yml is registry-side scan, not CI gate

* docs(dependencies): add changelog fragment for socket.yml scope note

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

---------

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

2026-09-18 12:22:09 -03:00

..

AGENTROUTER_WAF.md

fix(resilience): recover idle-capacity limiter wedges early (#9041)

2026-08-11 04:30:29 -03:00

BAN_DETECTION.md

fix(providers): retire common ChatGPT Web provider (#11754)

2026-08-28 06:52:46 -03:00

CLI_TOKEN.md

fix(security): generate a random per-install CLI token salt (#13679) (#13909)

2026-09-17 10:45:43 -03:00

COMPLIANCE.md

chore(startup): remove server-init.ts, a module nothing imports (#10780)

2026-08-20 10:27:26 -03:00

CORS.md

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

EGRESS_POLICY.md

fix(docs): keep operator-internal security writeups out of public /docs (#13136)

2026-09-11 19:28:02 -03:00

ERROR_SANITIZATION.md

fix(security): harden public error boundaries (#12506)

2026-09-03 21:31:13 -03:00

GUARDRAILS.md

fix(video): re-anchor transcript log-redaction so PII/credential maskers can't reopen the leak (#12150 P1 follow-up) (#12503)

2026-09-02 18:32:51 -03:00

INFERENCE_AUTH_POSTURE.md

feat(security): warn at boot when the inference server is exposed anonymously (#13820)

2026-09-18 11:33:39 -03:00

meta.json

feat(security): warn at boot when the inference server is exposed anonymously (#13820)

2026-09-18 11:33:39 -03:00

MITM-TPROXY-DECRYPT.md

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

PUBLIC_CREDS.md

[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)

2026-08-12 08:40:18 -03:00

ROUTE_GUARD_TIERS.md

fix(auth): close the JWT_SECRET bootstrap chain — real-peer loopback, obsidian always-protected, DATA_DIR vault refusal (#13791)

2026-09-15 16:58:24 -03:00

SOCKET_DEV_FINDINGS.md

docs(dependencies): clarify socket.yml is registry-side scan, not CI gate (#12664)

2026-09-18 12:22:09 -03:00

STEALTH_GUIDE.md

fix(sse): add first-byte watchdog to the TLS-fingerprint transport (#12656) (#13272)

2026-09-11 22:06:09 -03:00

SUPPLY_CHAIN.md

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00