 Jeppe B
|
3960daa556
|
Add production wash start test matrix
|
2026-06-02 13:42:22 +02:00 |
|
|
Jeppe B
|
aa4d6576f7
|
Merge pull request #108 from copenhagentruckwash/fix-page-crash-issues
Fix wash start recovery from API failures
|
2026-06-02 08:35:28 +02:00 |
|
|
Jeppe B
|
2a46984f9c
|
Merge pull request #109 from copenhagentruckwash/fix-playwright-exit-code-error
Stabilize release sidebar E2E coverage
|
2026-06-02 08:34:47 +02:00 |
|
|
Jeppe B
|
7be9995c87
|
Stabilize release sidebar e2e coverage
|
2026-06-02 08:10:51 +02:00 |
|
|
Jeppe B
|
85529de3f8
|
Fix wash start recovery from API failures
|
2026-06-02 08:07:03 +02:00 |
|
|
Jeppe B
|
114ca9d956
|
Merge pull request #107 from copenhagentruckwash/investigate-and-fix-failing-tests
Resolve failing frontend CI: fix merge conflicts, restore edge cache & tests
|
2026-06-02 07:15:41 +02:00 |
|
|
Jeppe B
|
29f858685a
|
Fix self-serve wash smoke restore fixture
|
2026-06-02 07:15:26 +02:00 |
|
|
Jeppe B
|
4112faf682
|
Fix edge gateway broker config e2e
|
2026-06-02 02:38:37 +02:00 |
|
|
Jeppe B
|
a13b73c414
|
Harden edge gateway service parsing
|
2026-06-02 02:06:32 +02:00 |
|
|
Jeppe B
|
667e93af8f
|
Resolve failing frontend checks
|
2026-06-02 01:13:28 +02:00 |
|
|
Jeppe B
|
54a888026e
|
Merge pull request #104 from copenhagentruckwash/propose-fix-for-price-tampering-vulnerability
Fix trusted booking prices in POS hydration
|
2026-06-02 00:48:56 +02:00 |
|
|
Jeppe B
|
a0fb02baa1
|
Merge pull request #106 from copenhagentruckwash/fix-booking-delete-access-permission
Fix booking delete action visibility
|
2026-06-02 00:47:38 +02:00 |
|
|
Jeppe B
|
c445b932db
|
Fix booking delete action visibility
|
2026-06-02 00:47:19 +02:00 |
|
|
Jeppe B
|
0d590fc9d6
|
Merge pull request #105 from copenhagentruckwash/fix-postinstall-script-vulnerability
Remove unsafe postinstall hook
|
2026-06-02 00:40:46 +02:00 |
|
|
Jeppe B
|
1d4910f947
|
Remove unsafe postinstall hook
|
2026-06-02 00:40:34 +02:00 |
|
|
Jeppe B
|
7e457ed961
|
Fix trusted booking prices in POS hydration
|
2026-06-02 00:39:55 +02:00 |
|
|
Jeppe B
|
34722c6985
|
Merge pull request #103 from copenhagentruckwash/fix-vulnerability-in-pos-order-pricing
Fix POS booking price hydration
|
2026-06-02 00:39:37 +02:00 |
|
|
Jeppe B
|
c5a13b50ab
|
Fix POS booking price hydration
|
2026-06-02 00:39:15 +02:00 |
|
|
Jeppe B
|
387bd50281
|
Merge pull request #102 from copenhagentruckwash/fix-unsandboxed-blob-attachment-previews
Sanitize and sandbox order attachment previews to prevent XSS
|
2026-06-02 00:38:15 +02:00 |
|
|
Jeppe B
|
81016fd898
|
Fix unsafe order attachment previews
|
2026-06-02 00:38:03 +02:00 |
|
|
Jeppe B
|
39fc1612ac
|
Merge pull request #101 from copenhagentruckwash/fix-duplicate-stripe-invoice-submission-issue
Prevent duplicate Stripe invoice queue submissions
|
2026-06-02 00:30:18 +02:00 |
|
|
Jeppe B
|
7ab12a3fff
|
Prevent duplicate Stripe invoice queue submissions
|
2026-06-02 00:29:53 +02:00 |
|
|
Jeppe B
|
b4d869c469
|
Merge pull request #100 from copenhagentruckwash/fix-autosave-to-prevent-infinite-retry-loop
Fix autosave failed-save retry loop
|
2026-06-02 00:28:52 +02:00 |
|
|
Jeppe B
|
799b667828
|
Fix autosave failed-save retry loop
|
2026-06-02 00:28:39 +02:00 |
|
|
Jeppe B
|
ae3513edf3
|
Merge pull request #99 from copenhagentruckwash/fix-repeated-booking-prefetch-flooding-api
Avoid duplicate booking prefetch by honoring exact-plate cache
|
2026-06-02 00:27:37 +02:00 |
|
|
Jeppe B
|
6db1861b78
|
Fix repeated booking prefetch requests
|
2026-06-02 00:27:25 +02:00 |
|
|
Jeppe B
|
a8e839ba18
|
Merge pull request #98 from copenhagentruckwash/fix-mobile-pos-orders-completion-issue
Fix mobile POS order completion
|
2026-06-02 00:27:07 +02:00 |
|
|
Jeppe B
|
b224cf67d1
|
Fix mobile POS order completion
|
2026-06-02 00:26:53 +02:00 |
|
|
Jeppe B
|
222237ab34
|
Merge pull request #96 from copenhagentruckwash/fix-edge-gateway-localstorage-vulnerability
Harden edge gateway workspace cache
|
2026-06-02 00:16:07 +02:00 |
|
|
Jeppe B
|
1e4a776fa5
|
Merge pull request #97 from copenhagentruckwash/fix-auto-selection-of-customer-suggestions
Fix stale POS customer suggestion auto-selection
|
2026-06-02 00:13:59 +02:00 |
|
|
Jeppe B
|
e88a424a7d
|
Fix stale POS customer suggestion auto-selection
|
2026-06-02 00:13:46 +02:00 |
|
|
Jeppe B
|
9450c7902d
|
Harden edge gateway workspace cache
|
2026-06-02 00:08:20 +02:00 |
|
|
Jeppe B
|
75b5883afe
|
Merge pull request #95 from copenhagentruckwash/fix-stripe-email-invoice-payment-misclassification
Fix Stripe email invoice paid validation
|
2026-06-02 00:07:49 +02:00 |
|
|
Jeppe B
|
c26f0184d9
|
Fix Stripe email invoice paid validation
|
2026-06-02 00:07:35 +02:00 |
|
|
Jeppe B
|
cb74b4bbe7
|
Merge pull request #93 from copenhagentruckwash/propose-fix-for-cached-gateway-details-leak
Scope edge gateway cache to session and prevent auth-blind cached fallbacks
|
2026-06-01 23:48:26 +02:00 |
|
|
Jeppe B
|
326eca656f
|
Fix edge gateway cache authorization fallback
|
2026-06-01 23:48:17 +02:00 |
|
|
Jeppe B
|
f0a5058b68
|
Merge pull request #92 from copenhagentruckwash/propose-fix-for-self-hosted-ci-vulnerability
Use GitHub-hosted runners for tests workflow
|
2026-06-01 23:46:15 +02:00 |
|
|
Jeppe B
|
0548018b5c
|
Use GitHub-hosted runners for tests workflow
|
2026-06-01 23:40:30 +02:00 |
|
|
Jeppe B
|
699e10856e
|
Merge pull request #91 from copenhagentruckwash/propose-fix-for-self-hosted-runner-vulnerability
Fix CI runner exposure for pull requests
|
2026-06-01 23:40:09 +02:00 |
|
|
Jeppe B
|
36b399cb2f
|
Fix CI runner exposure for pull requests
|
2026-06-01 23:40:00 +02:00 |
|
|
Jeppe B
|
f613d58727
|
Merge pull request #90 from copenhagentruckwash/propose-fix-for-product-catalog-vulnerability
Restrict vehicle type product edits to superusers
|
2026-06-01 23:35:14 +02:00 |
|
|
Jeppe B
|
feccfada77
|
Restrict vehicle type product edits to superusers
|
2026-06-01 23:35:04 +02:00 |
|
|
Jeppe B
|
4127e66114
|
Merge pull request #89 from copenhagentruckwash/fix-unvalidated-attachment-download-links
Validate self-serve attachment download links
|
2026-06-01 23:34:45 +02:00 |
|
|
Jeppe B
|
b2a9b59399
|
Validate self-serve attachment download links
|
2026-06-01 23:34:34 +02:00 |
|
|
Jeppe B
|
6ffed9c2f2
|
Merge pull request #88 from copenhagentruckwash/fix-lane-toggle-guard-permission-issue
Fix lane toggle permission guards
|
2026-06-01 23:34:14 +02:00 |
|
|
Jeppe B
|
53e193d8d1
|
Fix lane toggle permission guards
|
2026-06-01 23:34:03 +02:00 |
|
|
Jeppe B
|
7835691bc9
|
Merge pull request #87 from copenhagentruckwash/fix-websocket-token-exposure-vulnerability
Secure edge gateway WebSocket session tokens
|
2026-06-01 23:33:44 +02:00 |
|
|
Jeppe B
|
91715541ec
|
Secure edge gateway websocket sessions
|
2026-06-01 23:33:34 +02:00 |
|
|
Jeppe B
|
e3f9e99129
|
Merge pull request #86 from copenhagentruckwash/fix-stored-xss-in-relay-options
Fix select option HTML escaping
|
2026-06-01 23:33:20 +02:00 |
|
|
Jeppe B
|
4634cbad89
|
Fix select option HTML escaping
|
2026-06-01 23:33:10 +02:00 |
|
|
Jeppe B
|
5db2a36da0
|
Merge pull request #85 from copenhagentruckwash/propose-fix-for-relay-failure-issue
Rollback wash start when relay activation fails
|
2026-06-01 22:53:44 +02:00 |
|
|
Jeppe B
|
cd7b273da4
|
Rollback wash start when relay activation fails
|
2026-06-01 22:53:34 +02:00 |
|
|
Jeppe B
|
cbbad1a6e2
|
Merge pull request #84 from copenhagentruckwash/fix-pos-url-order-reassignment-vulnerability
Prevent implicit POS order department changes
|
2026-06-01 22:44:24 +02:00 |
|
|
Jeppe B
|
9661d4efa7
|
Prevent implicit POS order department changes
|
2026-06-01 22:44:14 +02:00 |
|
|
Jeppe B
|
31762c23c5
|
Merge pull request #83 from copenhagentruckwash/fix-unescaped-order-delete-reasons
Fix protected order delete reason escaping
|
2026-06-01 22:43:55 +02:00 |
|
|
Jeppe B
|
c71a6b4d14
|
Fix protected order delete reason escaping
|
2026-06-01 22:43:45 +02:00 |
|
|
Jeppe B
|
e8ddb33f21
|
Merge pull request #82 from copenhagentruckwash/fix-vulnerability-in-edge-broker-config
Secure edge gateway broker configuration
|
2026-06-01 22:28:28 +02:00 |
|
|
Jeppe B
|
ea368d19bb
|
Secure edge gateway broker configuration
|
2026-06-01 22:28:18 +02:00 |
|
|
Jeppe B
|
7ab50b6290
|
Merge pull request #81 from copenhagentruckwash/fix-unredacted-broker-diagnostics-exposure
Redact edge gateway diagnostic secrets
|
2026-06-01 22:27:33 +02:00 |
|
|
Jeppe B
|
fd7cfbd3c3
|
Redact edge gateway diagnostics
|
2026-06-01 22:27:19 +02:00 |
|
|
Jeppe B
|
90725af10a
|
Merge pull request #80 from copenhagentruckwash/fix-ungated-destructive-actions-in-ui
Gate self-serve studio gateway actions and require confirmation for destructive operations
|
2026-06-01 22:26:58 +02:00 |
|
|
Jeppe B
|
d63a62a921
|
Gate self-serve gateway actions
|
2026-06-01 22:26:44 +02:00 |
|
|
Jeppe B
|
4bc5481941
|
Merge pull request #79 from copenhagentruckwash/propose-fix-for-deferred-start-relay-issue
Require successful machine relay activation before marking wash in progress
|
2026-06-01 22:15:16 +02:00 |
|
|
Jeppe B
|
9feede3b0d
|
Require machine relay activation before wash progress
|
2026-06-01 22:15:02 +02:00 |
|
|
Jeppe B
|
5aad9eda8d
|
Merge pull request #78 from copenhagentruckwash/fix-raw-edge-log-context-exposure
Redact edge gateway log context secrets
|
2026-06-01 22:13:42 +02:00 |
|
|
Jeppe B
|
91b15faba6
|
Redact edge gateway log context secrets
|
2026-06-01 22:13:32 +02:00 |
|
|
Jeppe B
|
98c1c61cbd
|
Merge pull request #77 from copenhagentruckwash/fix-active-wash-endpoint-information-leak
Scope active-wash restore to authenticated customer (my-active-wash)
|
2026-06-01 22:06:25 +02:00 |
|
|
Jeppe B
|
4463a5326a
|
Fix scoped active wash restoration
|
2026-06-01 22:06:14 +02:00 |
|
|
Jeppe B
|
bdb23513a4
|
Merge pull request #76 from copenhagentruckwash/propose-fix-for-security-vulnerability
Harden self-serve vehicle condition mutations
|
2026-06-01 22:05:37 +02:00 |
|
|
Jeppe B
|
ee40f16232
|
Harden self-serve vehicle condition mutations
|
2026-06-01 22:05:27 +02:00 |
|
|
Jeppe B
|
a76944b00c
|
Merge pull request #75 from copenhagentruckwash/fix-sessionstorage-vulnerability-in-invoicing-period
Secure privileged session caches
|
2026-06-01 21:52:53 +02:00 |
|
|
Jeppe B
|
cf074ff893
|
Secure privileged session caches
|
2026-06-01 21:52:42 +02:00 |
|
|
Jeppe B
|
712eb19db5
|
Merge pull request #74 from copenhagentruckwash/propose-fix-for-release-manager-token-leak
Restrict release manager control API origins
|
2026-06-01 21:52:20 +02:00 |
|
|
Jeppe B
|
de9bc9b170
|
Restrict release manager control API origins
|
2026-06-01 21:52:09 +02:00 |
|
|
Jeppe B
|
95e2404307
|
Merge pull request #73 from copenhagentruckwash/fix-unredacted-deployment-failures-exposure
Redact release deployment failure diagnostics
|
2026-06-01 21:27:42 +02:00 |
|
|
Jeppe B
|
2c01feb3be
|
Redact release deployment failure diagnostics
|
2026-06-01 21:27:28 +02:00 |
|
|
Jeppe B
|
f416e0d462
|
Merge pull request #72 from copenhagentruckwash/fix-telemetry-that-leaks-passwords
Redact serialized request bodies and omit failed-request bodies when capture is disabled
|
2026-06-01 21:26:45 +02:00 |
|
|
Jeppe B
|
7f1308c8ce
|
Redact release timeline failed request bodies
|
2026-06-01 21:26:32 +02:00 |
|
|
Jeppe B
|
fd8d45e437
|
Merge pull request #71 from copenhagentruckwash/fix-vulnerabilities-in-release-runtime-urls
Harden release runtime URL trust boundaries
|
2026-06-01 21:25:51 +02:00 |
|
|
Jeppe B
|
c47bf229f0
|
Harden release runtime URL trust boundaries
|
2026-06-01 21:14:39 +02:00 |
|
|
Jeppe B
|
3616e197e1
|
Merge pull request #70 from copenhagentruckwash/propose-fix-for-isolated-stack-vulnerability
Prevent active isolated stack reuse during release deploys
|
2026-06-01 21:12:26 +02:00 |
|
|
Jeppe B
|
3d8544de21
|
Prevent isolated stack deployment reuse
|
2026-06-01 21:11:17 +02:00 |
|
|
Jeppe B
|
504abb7a15
|
Merge pull request #69 from copenhagentruckwash/fix-release-subject-autocomplete-exposure
Guard release assignment subject search
|
2026-06-01 21:11:02 +02:00 |
|
|
Jeppe B
|
37021533b9
|
Guard release assignment search by manage permission
|
2026-06-01 21:10:51 +02:00 |
|
|
Jeppe B
|
59eab84f03
|
Merge pull request #68 from copenhagentruckwash/fix-cross-origin-framing-vulnerability-in-nginx
Add anti-framing headers to Coolify Nginx frontend
|
2026-06-01 21:10:26 +02:00 |
|
|
Jeppe B
|
e67033711c
|
Add anti-framing headers to Coolify Nginx config
|
2026-06-01 21:10:14 +02:00 |
|
|
Jeppe B
|
85fd00f020
|
Merge pull request #67 from copenhagentruckwash/fix-metadata-exposure-for-low-privileged-users
Restrict release runtime metadata inspector
|
2026-06-01 21:09:54 +02:00 |
|
|
Jeppe B
|
4f064a1625
|
Restrict release runtime metadata inspector
|
2026-06-01 21:09:42 +02:00 |
|
|
Jeppe B
|
3bf7ada226
|
Merge pull request #66 from copenhagentruckwash/fix-tls-verification-in-dev-proxy
Secure Vite API proxy TLS by default
|
2026-06-01 21:09:15 +02:00 |
|
|
Jeppe B
|
3b90e17a1e
|
Secure Vite API proxy TLS by default
|
2026-06-01 21:09:05 +02:00 |
|
|
Jeppe B
|
c1fb5b72ee
|
Merge pull request #65 from copenhagentruckwash/fix-privilege-escalation-in-daily-report
Guard department lane toggles by wash-lane permission
|
2026-06-01 21:08:43 +02:00 |
|
|
Jeppe B
|
29da26cc08
|
Guard department lane toggles by permission
|
2026-06-01 21:08:32 +02:00 |
|
|
Jeppe B
|
807fc09b1e
|
Merge pull request #64 from copenhagentruckwash/fix-dgnvask-toggle-issue
Fix Døgnvask toggle state with configuration warnings
|
2026-06-01 21:08:03 +02:00 |
|
|
Jeppe B
|
528e4994db
|
Fix Dognvask warning toggle state
|
2026-06-01 21:07:53 +02:00 |
|
|
Jeppe B
|
c339122f4f
|
Merge pull request #63 from copenhagentruckwash/fix-release-gate-binding-to-build
Bind frontend release gate to build id
|
2026-06-01 21:07:33 +02:00 |
|
|
Jeppe B
|
feeef46354
|
Bind frontend release gate to build id
|
2026-06-01 21:07:23 +02:00 |
|
|
Jeppe B
|
066bd14554
|
Merge pull request #62 from copenhagentruckwash/fix-active-wash-refresh-vulnerability
Harden active-wash refresh ownership check
|
2026-06-01 21:06:53 +02:00 |
|
|
Jeppe B
|
bffaa2ab88
|
Fix active wash refresh ownership check
|
2026-06-01 21:06:39 +02:00 |
|
|
Jeppe B
|
31495ea67b
|
Merge pull request #61 from copenhagentruckwash/fix-ftp-deploy-password-exposure
Secure lftp release upload credentials
|
2026-06-01 21:02:13 +02:00 |
|
|
Jeppe B
|
8f2533f1b2
|
Secure lftp release upload credentials
|
2026-06-01 21:02:01 +02:00 |
|