v2.31.0-dev13 0d280f4

2026-05-01

0d280f4Merge pull request #184 from bnema/feat/global-dns-acme-dns01 merge GPG Unverifiedtag v2.31.0-dev13bnema
51f9860Add DNS resolver validation context GPG Verifiedbrice
ae10fc7Normalize DNS resolver validation GPG Verifiedbrice
f4879b5Harden DNS config validation GPG Verifiedbrice
0b16d6aDocument global DNS config for ACME GPG Verifiedbrice
0537081Wire DNS config into ACME DNS-01 GPG Verifiedbrice
68f340dAdd global DNS config defaults GPG Verifiedbrice
6a38a35Merge pull request #183 from bnema/feature/acme-http-onboarding-hardening merge GPG Unverifiedtag v2.31.0-dev12bnema
86e5b3bMake ACME cursor persistence best effort GPG Verifiedbrice
90ab417Simplify Gordon onboarding routes GPG Verifiedbrice
d200400Address ACME onboarding review feedback GPG Verifiedbrice

2026-04-30

b026f15Address ACME hardening review feedback GPG Verifiedbrice
d015ae1Simplify ACME onboarding hardening GPG Verifiedbrice
345260eFix ACME hardening plan headings GPG Verifiedbrice
e407583Harden ACME HTTP onboarding flow GPG Verifiedbrice
0c0cc56Merge pull request #182 from bnema/feature/public-acme-tls merge GPG Unverifiedtag v2.31.0-dev11bnema
67091c0Address public TLS review findings GPG Verifiedbrice

2026-04-29

48b6401Tighten public TLS renewal cleanup GPG Verifiedbrice
8c0f7e8Harden public TLS certificate persistence GPG Verifiedbrice
32d0f87Centralize HTTP-01 token validation GPG Verifiedbrice
8070205Resolve public TLS PR review comments GPG Verifiedbrice
3d6e47eAddress public TLS review findings GPG Verifiedbrice
289a830Clean up public ACME TLS review issues GPG Verifiedbrice
745d4bcclean up public TLS test fake copy GPG Verifiedbrice
a7df376address CodeRabbit public ACME TLS findings GPG Verifiedbrice
b85bb4esimplify public ACME TLS implementation GPG Verifiedbrice
ed49430add public ACME TLS support GPG Verifiedbrice
574f9a2Merge pull request #181 from bnema/remove-security-hardening-regression-doc merge GPG Unverifiedbnema
83b28cadocs: remove internal security regression matrix GPG Verifiedbrice

2026-04-28

f49cffcMerge pull request #180 from bnema/fix/proxy-preserve-route-host merge GPG Unverifiedtag v2.31.0-dev10bnema
93ddb1bPreserve route host for managed proxy targets GPG Verifiedbrice
bf863ebMerge pull request #178 from bnema/refactor/rename-rollback-to-pin merge GPG Unverifiedbnema
c50d21bdocs: fix pin command note — remote is optional, not required GPG Verifiedbrice
90c5cb7refactor(cli): route pin command output through cliWriteLine/cliWritef, wrap errors GPG Verifiedbrice
9dd1391docs: fix stale rollback comment in index and add --json flag to pin docs GPG Verifiedbrice
e4bd401chore: finalizer pass — update rollback references in README and docs, simplify validateTagExists GPG Verifiedbrice
9dd6453docs(cli): rename rollback docs to pin GPG Verifiedbrice
07567detest(cli): rename rollback tests to pin GPG Verifiedbrice
b1fd1cerefactor(cli): rename rollback command to pin GPG Verifiedbrice

2026-04-26

062dcaeMerge pull request #177 from bnema/security-hardening-audit-fixes merge GPG Unverifiedtag v2.31.0-dev9bnema
aba13a4fix: harden pass migration auto-fixes GPG Verifiedbrice
c573276fix: apply CodeRabbit auto-fixes GPG Unverifiedcoderabbitai[bot]
c69eeb8fix: apply CodeRabbit auto-fixes GPG Unverifiedcoderabbitai[bot]
a40ece3fix: apply CodeRabbit auto-fixes GPG Unverifiedcoderabbitai[bot]

2026-04-25

225cbb6fix: address coderabbit security review GPG Verifiedbrice
e73e6fcfix: harden install and supply chain defaults GPG Verifiedbrice
56bea54fix: harden image pulls and container runtime GPG Verifiedbrice
07c8b0cchore: mark x sys as direct dependency GPG Verifiedbrice
7f90f82fix: redact config and secure unsafe secrets GPG Verifiedbrice
3520c0ffix: scope volume pruning and unique backup files GPG Verifiedbrice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close