d30dc28b8c
Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway ( #42370 )
...
* Secrets: harden exec SecretRef validation and reload LKG coverage
* Tests: harden exec fast-exit stdin regression case
* Tests: align lifecycle daemon test formatting with oxfmt 0.36
2026-03-10 13:45:37 -05:00
dc78725d47
test: stabilize exec resolver timeout fixture
2026-03-08 03:50:41 +00:00
42e3d8d693
Secrets: add inline allowlist review set ( #38314 )
...
* Secrets: add inline allowlist review set
* Secrets: narrow detect-secrets file exclusions
* Secrets: exclude Docker fingerprint false positive
* Secrets: allowlist test and docs false positives
* Secrets: refresh baseline after allowlist updates
* Secrets: fix gateway chat fixture pragma
* Secrets: format pre-commit config
* Android: keep talk mode fixture JSON valid
* Feishu: rely on client timeout injection
* Secrets: allowlist provider auth test fixtures
* Secrets: allowlist onboard search fixtures
* Secrets: allowlist onboard mode fixture
* Secrets: allowlist gateway auth mode fixture
* Secrets: allowlist APNS wake test key
* Secrets: allowlist gateway reload fixtures
* Secrets: allowlist moonshot video fixture
* Secrets: allowlist auto audio fixture
* Secrets: allowlist tiny audio fixture
* Secrets: allowlist embeddings fixtures
* Secrets: allowlist resolve fixtures
* Secrets: allowlist target registry pattern fixtures
* Secrets: allowlist gateway chat env fixture
* Secrets: refresh baseline after fixture allowlists
* Secrets: reapply gateway chat env allowlist
* Secrets: reapply gateway chat env allowlist
* Secrets: stabilize gateway chat env allowlist
* Secrets: allowlist runtime snapshot save fixture
* Secrets: allowlist oauth profile fixtures
* Secrets: allowlist compaction identifier fixture
* Secrets: allowlist model auth fixture
* Secrets: allowlist model status fixtures
* Secrets: allowlist custom onboarding fixture
* Secrets: allowlist mattermost token summary fixtures
* Secrets: allowlist gateway auth suite fixtures
* Secrets: allowlist channel summary fixture
* Secrets: allowlist provider usage auth fixtures
* Secrets: allowlist media proxy fixture
* Secrets: allowlist secrets audit fixtures
* Secrets: refresh baseline after final fixture allowlists
* Feishu: prefer explicit client timeout
* Feishu: test direct timeout precedence
2026-03-06 19:35:26 -05:00
2d67c9b2a0
fix: repair Feishu reset hook typing and stabilize secret resolver timeout
2026-03-03 05:06:08 +00:00
282b107e99
test(perf): speed up cron, memory, and secrets hotspots
2026-03-03 00:43:01 +00:00
4bfbf2dfff
test(refactor): dedupe secret resolver posix fixtures and add registry cache regression
2026-03-03 00:05:39 +00:00
a5b81d1c13
test(perf): remove long exec-delay sleep in secret resolver tests
2026-03-02 23:56:30 +00:00
a78ec81ae6
fix: align exec no-output timeout defaults ( #32235 ) (thanks @bmendonca3)
2026-03-02 22:47:03 +00:00
be578b43d3
secrets: default exec no-output timeout to timeoutMs
2026-03-02 22:47:03 +00:00
b1c30f0ba9
refactor: dedupe cli config cron and install flows
2026-03-02 19:57:33 +00:00
a49afd25ea
fix(secrets): ignore stdin EPIPE from fast-exit exec resolvers
2026-03-02 15:47:21 +00:00
fd4d157e45
test(config): reuse fixtures for faster validation
2026-03-02 09:47:29 +00:00
29c3ce9454
[AI-assisted] test: fix typing and test fixture issues ( #31444 )
...
* test: fix typing and test fixture issues
* Fix type-test harness issues from session routing and mock typing
* Add routing regression test for session.mainKey precedence
2026-03-02 00:41:21 -08:00
1443bb9a84
chore(tsgo/lint): fix CI errors
2026-03-02 03:03:11 -05:00
45888276a3
test(integration): dedupe messaging, secrets, and plugin test suites
2026-03-02 07:13:11 +00:00
656121a12b
test: micro-optimize hot unit test files
2026-03-02 05:33:07 +00:00
7671c1dd10
test(secrets): cover skill migration and symlinked exec command flow
2026-02-26 14:47:22 +00:00
f46b9c996f
feat(secrets): allow opt-in symlink exec command paths
2026-02-26 14:47:22 +00:00
06290b49b2
feat(secrets): finalize mode rename and validated exec docs
2026-02-26 14:47:22 +00:00
86622ebea9
fix(secrets): enforce file provider read timeouts
2026-02-26 14:47:22 +00:00
b84d7796be
test(secrets): skip strict file-permission resolver tests on windows
2026-02-26 14:47:22 +00:00
bde9cbb058
docs(secrets): align provider model and add exec resolver coverage
2026-02-26 14:47:22 +00:00
4e7a833a24
feat(security): add provider-based external secrets management
2026-02-26 14:47:22 +00:00
Josh Avant
Peter Steinberger
Vincent Koc
bmendonca3
Gustavo Madeira Santana