Peter Steinberger
|
0a4c11061d
|
test: stabilize targeted harnesses
- reduce module-reset mock churn in auth/acp tests
- simplify runtime web mock cleanup
- make canvas reload test use in-memory websocket tracking
|
2026-03-30 00:23:38 +01:00 |
|
Peter Steinberger
|
f44d68a4f4
|
test: stabilize model auth label mocks
|
2026-03-28 11:40:40 +00:00 |
|
Josh Avant
|
36d2ae2a22
|
SecretRef: harden custom/provider secret persistence and reuse (#42554)
* Models: gate custom provider keys by usable secret semantics
* Config: project runtime writes onto source snapshot
* Models: prevent stale apiKey preservation for marker-managed providers
* Runner: strip SecretRef marker headers from resolved models
* Secrets: scan active agent models.json path in audit
* Config: guard runtime-source projection for unrelated configs
* Extensions: fix onboarding type errors in CI
* Tests: align setup helper account-enabled expectation
* Secrets audit: harden models.json file reads
* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)
|
2026-03-10 23:55:10 +00:00 |
|
Vincent Koc
|
e4d80ed556
|
CI: restore main detect-secrets scan (#38438)
* Tests: stabilize detect-secrets fixtures
* Tests: fix rebased detect-secrets false positives
* Docs: keep snippets valid under detect-secrets
* Tests: finalize detect-secrets false-positive fixes
* Tests: reduce detect-secrets false positives
* Tests: keep detect-secrets pragmas inline
* Tests: remediate next detect-secrets batch
* Tests: tighten detect-secrets allowlists
* Tests: stabilize detect-secrets formatter drift
|
2026-03-07 10:06:35 -08:00 |
|
Cui Chen
|
e8cb0484ce
|
fix(security): strip partial API token from status labels (#33262)
Merged via squash.
Prepared head SHA: 5fe81704e6
Co-authored-by: cu1ch3n <80438676+cu1ch3n@users.noreply.github.com>
Co-authored-by: grp06 <1573959+grp06@users.noreply.github.com>
Reviewed-by: @grp06
|
2026-03-03 15:11:49 -08:00 |
|
joshavant
|
4e7a833a24
|
feat(security): add provider-based external secrets management
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
0e69660c41
|
feat(secrets): finalize external secrets runtime and migration hardening
|
2026-02-26 14:47:22 +00:00 |
|
joshavant
|
cec404225d
|
Auth labels: handle token refs and share Pi credential conversion
|
2026-02-26 14:47:22 +00:00 |
|