v2.16.0 ebd2ab3

history of internal/app/run.go at v2.16.0

2026-02-10

3408f7efix: address second round of review feedback GPG Verifiedbrice
9cbef81refactor: add pkg/version package and use build-time version in telemetry GPG Verifiedbrice
9802b0afix: address code review feedback on telemetry PR GPG Verifiedbrice
b8dcb0efeat(telemetry): add OpenTelemetry instrumentation for traces, metrics, and logs GPG Verifiedbrice

2026-02-09

7123d45fix(app,test): align auth config semantics and stabilize resolver tests GPG Verifiedbrice
6beebf5fix(security): gate admin host and disable local control-plane under auth GPG Verifiedbrice
4dfe8a7fix(app,cli): fail closed on invalid allowlist and log close errors GPG Verifiedbrice
ac68d40merge main into sec/auth-proxy-critical-fixes merge GPG Verifiedbrice
2cefdb1fix(app): expose admin API on proxy listener GPG Verifiedbrice
7026805fix(auth): support local-only mode when auth is disabled GPG Verifiedbrice
92a09fefix(security): enforce always-on auth and block scope/IP escalation GPG Verifiedbnema

2026-02-08

450e4feFallback admin process logs to journalctl when file logging is disabled GPG Verifiedbrice
83fbdd9feat(monitor): add background container monitor and non-blocking AutoStart GPG Verifiedbrice
dbe3920fix(review): address scheduler and backup service nitpicks GPG Verifiedbrice
806527crefactor: resolve lint findings in scheduler and image prune GPG Verifiedbrice
f6bf3a9feat(backup): wire scheduled backup execution and retention GPG Verifiedbrice
b615a35fix(images): address coderabbit review feedback GPG Verifiedbrice
b5442e4feat(app): wire image prune config and scheduler job GPG Verifiedbrice

2026-02-07

99c9ecbfix(deploy): honor explicit zero drain_delay and document instant switch GPG Verifiedbnema
7e326befix(deploy): add signal-based readiness and drain with documented timeouts GPG Verifiedbnema
4fba121fix(deploy): wire drain delay, prevent duplicate invalidation, and update docs GPG Verifiedbnema
1838ab2fix(deploy) synchronous proxy cache invalidation to prevent 503s during zero-downtime deploy GPG Verifiedbrice
1ac3076fix(backup): harden backup flows, scheduler safety, and admin/cli handling GPG Verifiedbrice
28497b7fix(backup): address review hardening and edge cases GPG Verifiedbrice
634f497feat(backup): add postgres backup MVP with admin and CLI flows GPG Verifiedbrice
08d5671feat(registry) add IP/CIDR allowlist middleware for registry access control GPG Verifiedbrice
657aee7fix(app) capture server refs for graceful shutdown, fix lint issues GPG Verifiedtag v2.12.0brice
e3862cbMerge branch 'main' into security/proxy-hardening-top10 merge GPG Unverifiedbnema
874c2dbfix(proxy) address Copilot and CodeRabbit review findings GPG Verifiedbrice
df419f4feat: add native TLS listener support GPG Verifiedbrice

2026-02-06

b6d1cf3fix(server) add graceful shutdown timeout and response/connection limits GPG Verifiedbnema
9b07d6afix(review) correct misleading comments, dead code, and error detection GPG Verifiedbnema
e8e1134fix(tests) use os.Getpid in PID test and add missing test cases GPG Verifiedbnema
0bd5d71fix(deploy): resolve live gordon PID across runtime paths GPG Verifiedbrice
c00c10cfix(registry): make blob chunk upload limit configurable GPG Verifiedbrice
acb0df2fix(logic): invalidate proxy cache on config reload, remove dead code GPG Verifiedbrice
ebd5aeafix(startup): start registry listener before auto-start GPG Verifiedbrice
67442d7fix(deploy): mark auto-start, reload, and config-reload as internal deploy GPG Verifiedbrice

2026-02-02

89e85a9fix(cli): address code review feedback from Copilot and CodeRabbit GPG Verifiedbrice
72d9712fix(app): always resolve log file path and support http.Flusher in logging middleware GPG Verifiedbrice

2026-02-01

41b10a9feat(proxy): make max body size configurable with 512MB default and return 413 on overflow GPG Verifiedbnema
372a0c5fix(security): use trusted-proxy-aware IP extraction in logging and remove CORS from proxy GPG Verifiedbnema

2026-01-31

d2f6768fix(review): address all code review issues from PR GPG Verifiedbnema

2026-01-30

3659333fix(secrets): harden pass storage and auth GPG Verifiedbnema
18f31a9docs(auth): simplify authentication setup GPG Verifiedbnema
5498bc4feat(auth): add token login and registry pull token GPG Verifiedbnema
6ee1d33feat(secrets): add pass-backed domain secrets migration GPG Verifiedbnema

2026-01-28

0df4d83feat(admin): validate image exists in registry before adding route GPG Verifiedbnema

2026-01-18

fb423a0chore: update module path to github.com/bnema/gordon and bump dependencies GPG Verifiedbrice
edb08f9fix(config): remove default auth.type that broke type inference GPG Verifiedbrice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close