 Jeppe B
|
98c1c61cbd
|
Merge pull request #77 from copenhagentruckwash/fix-active-wash-endpoint-information-leak
Scope active-wash restore to authenticated customer (my-active-wash)
|
2026-06-01 22:06:25 +02:00 |
|
|
Jeppe B
|
4463a5326a
|
Fix scoped active wash restoration
|
2026-06-01 22:06:14 +02:00 |
|
|
Jeppe B
|
bdb23513a4
|
Merge pull request #76 from copenhagentruckwash/propose-fix-for-security-vulnerability
Harden self-serve vehicle condition mutations
|
2026-06-01 22:05:37 +02:00 |
|
|
Jeppe B
|
ee40f16232
|
Harden self-serve vehicle condition mutations
|
2026-06-01 22:05:27 +02:00 |
|
|
Jeppe B
|
a76944b00c
|
Merge pull request #75 from copenhagentruckwash/fix-sessionstorage-vulnerability-in-invoicing-period
Secure privileged session caches
|
2026-06-01 21:52:53 +02:00 |
|
|
Jeppe B
|
cf074ff893
|
Secure privileged session caches
|
2026-06-01 21:52:42 +02:00 |
|
|
Jeppe B
|
712eb19db5
|
Merge pull request #74 from copenhagentruckwash/propose-fix-for-release-manager-token-leak
Restrict release manager control API origins
|
2026-06-01 21:52:20 +02:00 |
|
|
Jeppe B
|
de9bc9b170
|
Restrict release manager control API origins
|
2026-06-01 21:52:09 +02:00 |
|
|
Jeppe B
|
95e2404307
|
Merge pull request #73 from copenhagentruckwash/fix-unredacted-deployment-failures-exposure
Redact release deployment failure diagnostics
|
2026-06-01 21:27:42 +02:00 |
|
|
Jeppe B
|
2c01feb3be
|
Redact release deployment failure diagnostics
|
2026-06-01 21:27:28 +02:00 |
|
|
Jeppe B
|
f416e0d462
|
Merge pull request #72 from copenhagentruckwash/fix-telemetry-that-leaks-passwords
Redact serialized request bodies and omit failed-request bodies when capture is disabled
|
2026-06-01 21:26:45 +02:00 |
|
|
Jeppe B
|
7f1308c8ce
|
Redact release timeline failed request bodies
|
2026-06-01 21:26:32 +02:00 |
|
|
Jeppe B
|
fd8d45e437
|
Merge pull request #71 from copenhagentruckwash/fix-vulnerabilities-in-release-runtime-urls
Harden release runtime URL trust boundaries
|
2026-06-01 21:25:51 +02:00 |
|
|
copilot-swe-agent[bot]
|
20390342d5
|
Merge origin/master and resolve release timeline spec conflict
|
2026-06-01 19:21:12 +00:00 |
|
|
Jeppe B
|
c47bf229f0
|
Harden release runtime URL trust boundaries
|
2026-06-01 21:14:39 +02:00 |
|
|
Jeppe B
|
3616e197e1
|
Merge pull request #70 from copenhagentruckwash/propose-fix-for-isolated-stack-vulnerability
Prevent active isolated stack reuse during release deploys
|
2026-06-01 21:12:26 +02:00 |
|
|
Jeppe B
|
3d8544de21
|
Prevent isolated stack deployment reuse
|
2026-06-01 21:11:17 +02:00 |
|
|
Jeppe B
|
504abb7a15
|
Merge pull request #69 from copenhagentruckwash/fix-release-subject-autocomplete-exposure
Guard release assignment subject search
|
2026-06-01 21:11:02 +02:00 |
|
|
Jeppe B
|
37021533b9
|
Guard release assignment search by manage permission
|
2026-06-01 21:10:51 +02:00 |
|
|
Jeppe B
|
59eab84f03
|
Merge pull request #68 from copenhagentruckwash/fix-cross-origin-framing-vulnerability-in-nginx
Add anti-framing headers to Coolify Nginx frontend
|
2026-06-01 21:10:26 +02:00 |
|
|
Jeppe B
|
e67033711c
|
Add anti-framing headers to Coolify Nginx config
|
2026-06-01 21:10:14 +02:00 |
|
|
Jeppe B
|
85fd00f020
|
Merge pull request #67 from copenhagentruckwash/fix-metadata-exposure-for-low-privileged-users
Restrict release runtime metadata inspector
|
2026-06-01 21:09:54 +02:00 |
|
|
Jeppe B
|
4f064a1625
|
Restrict release runtime metadata inspector
|
2026-06-01 21:09:42 +02:00 |
|
|
Jeppe B
|
3bf7ada226
|
Merge pull request #66 from copenhagentruckwash/fix-tls-verification-in-dev-proxy
Secure Vite API proxy TLS by default
|
2026-06-01 21:09:15 +02:00 |
|
|
Jeppe B
|
3b90e17a1e
|
Secure Vite API proxy TLS by default
|
2026-06-01 21:09:05 +02:00 |
|
|
Jeppe B
|
c1fb5b72ee
|
Merge pull request #65 from copenhagentruckwash/fix-privilege-escalation-in-daily-report
Guard department lane toggles by wash-lane permission
|
2026-06-01 21:08:43 +02:00 |
|
|
Jeppe B
|
29da26cc08
|
Guard department lane toggles by permission
|
2026-06-01 21:08:32 +02:00 |
|
|
Jeppe B
|
807fc09b1e
|
Merge pull request #64 from copenhagentruckwash/fix-dgnvask-toggle-issue
Fix Døgnvask toggle state with configuration warnings
|
2026-06-01 21:08:03 +02:00 |
|
|
Jeppe B
|
528e4994db
|
Fix Dognvask warning toggle state
|
2026-06-01 21:07:53 +02:00 |
|
|
Jeppe B
|
c339122f4f
|
Merge pull request #63 from copenhagentruckwash/fix-release-gate-binding-to-build
Bind frontend release gate to build id
|
2026-06-01 21:07:33 +02:00 |
|
|
Jeppe B
|
feeef46354
|
Bind frontend release gate to build id
|
2026-06-01 21:07:23 +02:00 |
|
|
Jeppe B
|
066bd14554
|
Merge pull request #62 from copenhagentruckwash/fix-active-wash-refresh-vulnerability
Harden active-wash refresh ownership check
|
2026-06-01 21:06:53 +02:00 |
|
|
Jeppe B
|
bffaa2ab88
|
Fix active wash refresh ownership check
|
2026-06-01 21:06:39 +02:00 |
|
|
Jeppe B
|
31495ea67b
|
Merge pull request #61 from copenhagentruckwash/fix-ftp-deploy-password-exposure
Secure lftp release upload credentials
|
2026-06-01 21:02:13 +02:00 |
|
|
Jeppe B
|
8f2533f1b2
|
Secure lftp release upload credentials
|
2026-06-01 21:02:01 +02:00 |
|
|
Jeppe B
|
13b0742deb
|
Merge pull request #60 from copenhagentruckwash/fix-cropping-issue-in-path-editor
Fix self-serve path editor answer switch layout
|
2026-06-01 20:45:04 +02:00 |
|
|
Jeppe B
|
e2b2d50e5e
|
Fix self-serve path editor answer switch layout
|
2026-06-01 20:19:35 +02:00 |
|
|
Jeppe B
|
55d61e37f3
|
Merge pull request #59 from copenhagentruckwash/fix-e2e-tests-in-i18n-v2-catalog
Fix i18n v2 catalog integrity and split Release Manager source fragments
|
2026-06-01 19:45:57 +02:00 |
|
|
Jeppe B
|
fa19f5a704
|
Fix i18n v2 catalog integrity
|
2026-06-01 19:44:50 +02:00 |
|
|
Jeppe Bundgaard
|
b995031255
|
Enable "Selv vask" button in MobileFooter.vue
|
2026-06-01 19:43:57 +02:00 |
|
|
Jeppe Bundgaard
|
d096444ca0
|
Remove unused lane unavailable warning message from SelfServeLaneStep.vue
|
2026-06-01 19:41:16 +02:00 |
|
|
Jeppe B
|
10358d4f53
|
Merge pull request #58 from copenhagentruckwash/fix-self-serve-path-editor-for-all-departments
Fix self-serve path editor vehicle scope
|
2026-06-01 18:32:11 +02:00 |
|
|
Jeppe B
|
78f41b8380
|
Fix self-serve path editor vehicle scope
|
2026-06-01 18:31:53 +02:00 |
|
|
Jeppe B
|
90d4bc7c04
|
Merge pull request #57 from copenhagentruckwash/fix-bugs-in-start-wash-flow
Harden customer wash start flow
|
2026-06-01 18:01:29 +02:00 |
|
|
Jeppe B
|
b59c17f120
|
Harden customer wash start flow
|
2026-06-01 17:54:42 +02:00 |
|
|
Jeppe Bundgaard
|
c279e7fd38
|
Merge remote-tracking branch 'origin/master'
|
2026-06-01 17:23:06 +02:00 |
|
|
Jeppe Bundgaard
|
8a4fcb3e62
|
Remove unused return messages and cleanup peer dependency flags in package-lock.json
|
2026-06-01 17:22:33 +02:00 |
|
|
Jeppe B
|
680ef7088b
|
Merge pull request #56 from copenhagentruckwash/investigate-playwright-exit-code-1-issue
Stabilize POS email notification E2E setup
|
2026-06-01 17:20:54 +02:00 |
|
|
Jeppe B
|
83935af973
|
Stabilize POS email notification E2E setup
|
2026-06-01 16:45:40 +02:00 |
|
|
Jeppe B
|
37973f8fcb
|
Add x-api-coverage happy path flag to listOrders operation
|
2026-06-01 13:31:48 +02:00 |
|