2026-04-30
| 0c0cc56 | Merge pull request #182 from bnema/feature/public-acme-tls merge GPG Unverifiedtag v2.31.0-dev11 | bnema | ||
| 67091c0 | Address public TLS review findings GPG Verified | brice |
2026-04-29
| 48b6401 | Tighten public TLS renewal cleanup GPG Verified | brice | ||
| 8c0f7e8 | Harden public TLS certificate persistence GPG Verified | brice | ||
| 32d0f87 | Centralize HTTP-01 token validation GPG Verified | brice | ||
| 8070205 | Resolve public TLS PR review comments GPG Verified | brice | ||
| 3d6e47e | Address public TLS review findings GPG Verified | brice | ||
| 289a830 | Clean up public ACME TLS review issues GPG Verified | brice | ||
| 745d4bc | clean up public TLS test fake copy GPG Verified | brice | ||
| a7df376 | address CodeRabbit public ACME TLS findings GPG Verified | brice | ||
| b85bb4e | simplify public ACME TLS implementation GPG Verified | brice | ||
| ed49430 | add public ACME TLS support GPG Verified | brice | ||
| 574f9a2 | Merge pull request #181 from bnema/remove-security-hardening-regression-doc merge GPG Unverified | bnema | ||
| 83b28ca | docs: remove internal security regression matrix GPG Verified | brice |
2026-04-28
| f49cffc | Merge pull request #180 from bnema/fix/proxy-preserve-route-host merge GPG Unverifiedtag v2.31.0-dev10 | bnema | ||
| 93ddb1b | Preserve route host for managed proxy targets GPG Verified | brice | ||
| bf863eb | Merge pull request #178 from bnema/refactor/rename-rollback-to-pin merge GPG Unverified | bnema | ||
| c50d21b | docs: fix pin command note — remote is optional, not required GPG Verified | brice | ||
| 90c5cb7 | refactor(cli): route pin command output through cliWriteLine/cliWritef, wrap errors GPG Verified | brice | ||
| 9dd1391 | docs: fix stale rollback comment in index and add --json flag to pin docs GPG Verified | brice | ||
| e4bd401 | chore: finalizer pass — update rollback references in README and docs, simplify validateTagExists GPG Verified | brice | ||
| 9dd6453 | docs(cli): rename rollback docs to pin GPG Verified | brice | ||
| 07567de | test(cli): rename rollback tests to pin GPG Verified | brice | ||
| b1fd1ce | refactor(cli): rename rollback command to pin GPG Verified | brice |
2026-04-26
| 062dcae | Merge pull request #177 from bnema/security-hardening-audit-fixes merge GPG Unverifiedtag v2.31.0-dev9 | bnema | ||
| aba13a4 | fix: harden pass migration auto-fixes GPG Verified | brice | ||
| c573276 | fix: apply CodeRabbit auto-fixes GPG Unverified | coderabbitai[bot] | ||
| c69eeb8 | fix: apply CodeRabbit auto-fixes GPG Unverified | coderabbitai[bot] | ||
| a40ece3 | fix: apply CodeRabbit auto-fixes GPG Unverified | coderabbitai[bot] |
2026-04-25
| 225cbb6 | fix: address coderabbit security review GPG Verified | brice | ||
| e73e6fc | fix: harden install and supply chain defaults GPG Verified | brice | ||
| 56bea54 | fix: harden image pulls and container runtime GPG Verified | brice | ||
| 07c8b0c | chore: mark x sys as direct dependency GPG Verified | brice | ||
| 7f90f82 | fix: redact config and secure unsafe secrets GPG Verified | brice | ||
| 3520c0f | fix: scope volume pruning and unique backup files GPG Verified | brice | ||
| 9167cd9 | fix: harden autoroute env files and host canonicalization GPG Verified | brice | ||
| 826b93d | fix: gate and redact admin logs GPG Verified | brice | ||
| 8488ad1 | fix: limit cumulative registry blob uploads GPG Verified | brice | ||
| 26d49b5 | docs: add security hardening regression matrix GPG Verified | brice |
2026-04-16
| ec8c5b9 | Merge pull request #175 from bnema/feat/routes-list-status merge GPG Unverifiedtag v2.31.0-dev8 | bnema |
2026-04-15
| bb8a06b | fix(cli): trim route status spacing GPG Verified | brice | ||
| 187ed78 | fix(cli): clean up aggregate routes output GPG Verified | brice | ||
| cc460f4 | fix(cli): preserve route show health errors GPG Verified | brice | ||
| 6577047 | fix(cli): preserve routes loader errors GPG Verified | brice |
2026-04-14
| 4648a7b | fix(cli): surface route health probe errors GPG Verified | brice | ||
| 3567896 | fix(cli): surface unresolved route targets GPG Verified | brice | ||
| a0c8f05 | feat(cli): split routes inventory from route status GPG Verified | brice |
2026-04-12
| 9ef6929 | docs: clarify push domain override examples (#174) GPG Unverifiedtag v2.31.0-dev7 | bnema | ||
| 9287455 | refactor(cli): make push image-first (#173) GPG Unverified | bnema | ||
| 5569831 | fix(routes): tighten route handling and unify reload behavior (#167) GPG Unverified | bnema |