Spaces:

SilverElixir
/

Lumen

Running

App Files Files Community

Lumen / .github

Commit History

Oct 9 13 days ago

11:51
Telegram alert on state-backup failure instead of Actions summary only (audit M11)

SilverElixir

2d6a16c

Oct 6 16 days ago

16:41
Fix adversarial review findings across splitter quotas and backup

SilverElixir

2939738
15:48
Pin CI actions by SHA and harden backup and deploy workflows

SilverElixir

6d81643

Oct 5 17 days ago

00:08
Add owner ban commands, dependabot PR cap, seed docs

SilverElixir

eb80878

Sep 30 22 days ago

22:16
Deploy proxy via OIDC, no token needed

SilverElixir

5f996d4
22:12
Pass DENO_DEPLOY_TOKEN to deployctl steps

SilverElixir

4a1213f
21:52
Deploy proxy to primary and fallback, allow manual runs

SilverElixir

5c17622
15:16
Deploy Deno proxy after green CI when proxy files change

SilverElixir

f415a7d
13:04
CI/deploy hardening: lease push, concurrency, permissions, backup failure step, export snapshot, slimmer image (A11-01, A11-04..A11-07)

SilverElixir

350f2ff

Sep 27 25 days ago

14:22
Medium wave 4: validated env numbers, Upstash backend and shutdown flush tests, deno check/lint in CI, reproducible pip step, docs for missing variables

SilverElixir

7786593
12:09
Security wave 2: gate deploy on push+own repo, 401 and denial logging on admin endpoints, FastAPI schema off, proxy body cap, ownerless pick confined to chat, loud warning about secrets derived from BOT_TOKEN

SilverElixir

1c833d2

Sep 23 29 days ago

15:07
Luna audit fixes: album lock, multilingual routing, streaming budget, quota and persistence hardening

SilverElixir

dd4c939

Sep 21

13:02
Re-audit fixes: typing-indicator regression test, Deno proxy tests in CI

SilverElixir

02a12e4

Sep 20

18:18
Backup to private repo instead of public artifacts (privacy fix)

SilverElixir

535be3d
17:56
Revert guest_message removal (valid Bot API Update field, guest mode) + dependabot grouping

SilverElixir

00454c6
17:31
Merge pull request #2 from S1lverElixir/dependabot/github_actions/actions/setup-python-7⁠

SilverElixir

Unverified signature
65f71c5
17:31
Merge pull request #3 from S1lverElixir/dependabot/github_actions/actions/checkout-7⁠

SilverElixir

Unverified signature
268fc6b
17:11
Move tests to tests/ and proxy to proxy/, update CI and docs paths

SilverElixir

7a11b13
17:00
Bump actions/checkout from 6 to 7⁠

dependabot[bot]

Unverified signature
175920f
17:00
Bump actions/setup-python from 6 to 7⁠

dependabot[bot]

Unverified signature
b52f9e6

Sep 19

16:17
Finish audit leftovers: speed_key dedup, truncate in formatting, honest mime suffixes, filename sanitize, tiger boundary, dead image data, deterministic timing tests, HEALTHCHECK, dependabot (AUD-B-003, AUD-E-005, AUD-E-006, AUD-K-001, AUD-M-001, AUD-M-004)

SilverElixir

f40e9a4
11:06
P0 batch 2: diag budget, HTML truncation at source, TTL caps, tokenless register_link, backup 14d, CI permissions (AUD-J-002, AUD-F-001, AUD-G-001, AUD-D-001, AUD-D-007, AUD-M-001)

SilverElixir

93783a6

Aug 28

14:54
Add files via upload

SilverElixir

Unverified signature
462def5

Aug 16

10:34
Add files via upload

SilverElixir

Unverified signature
0aec245
10:32
Add files via upload

SilverElixir

Unverified signature
747424c
05:21
Add files via upload

SilverElixir

Unverified signature
19c2bb6

Aug 15

13:07
Add files via upload

SilverElixir

Unverified signature
39b6703
13:07
Add CI workflow for testing and dependency checks

SilverElixir

Unverified signature
2e6f061

Commit History

Oct 9 13 days ago

Telegram alert on state-backup failure instead of Actions summary only (audit M11)

Oct 6 16 days ago

Fix adversarial review findings across splitter quotas and backup

Pin CI actions by SHA and harden backup and deploy workflows

Oct 5 17 days ago

Add owner ban commands, dependabot PR cap, seed docs

Sep 30 22 days ago

Deploy proxy via OIDC, no token needed

Pass DENO_DEPLOY_TOKEN to deployctl steps

Deploy proxy to primary and fallback, allow manual runs

Deploy Deno proxy after green CI when proxy files change

CI/deploy hardening: lease push, concurrency, permissions, backup failure step, export snapshot, slimmer image (A11-01, A11-04..A11-07)

Sep 27 25 days ago

Medium wave 4: validated env numbers, Upstash backend and shutdown flush tests, deno check/lint in CI, reproducible pip step, docs for missing variables

Security wave 2: gate deploy on push+own repo, 401 and denial logging on admin endpoints, FastAPI schema off, proxy body cap, ownerless pick confined to chat, loud warning about secrets derived from BOT_TOKEN

Sep 23 29 days ago

Luna audit fixes: album lock, multilingual routing, streaming budget, quota and persistence hardening

Sep 21

Re-audit fixes: typing-indicator regression test, Deno proxy tests in CI

Sep 20

Backup to private repo instead of public artifacts (privacy fix)

Revert guest_message removal (valid Bot API Update field, guest mode) + dependabot grouping

Merge pull request #2 from S1lverElixir/dependabot/github_actions/actions/setup-python-7⁠

Merge pull request #3 from S1lverElixir/dependabot/github_actions/actions/checkout-7⁠

Move tests to tests/ and proxy to proxy/, update CI and docs paths

Bump actions/checkout from 6 to 7⁠

Bump actions/setup-python from 6 to 7⁠

Sep 19

Finish audit leftovers: speed_key dedup, truncate in formatting, honest mime suffixes, filename sanitize, tiger boundary, dead image data, deterministic timing tests, HEALTHCHECK, dependabot (AUD-B-003, AUD-E-005, AUD-E-006, AUD-K-001, AUD-M-001, AUD-M-004)

P0 batch 2: diag budget, HTML truncation at source, TTL caps, tokenless register_link, backup 14d, CI permissions (AUD-J-002, AUD-F-001, AUD-G-001, AUD-D-001, AUD-D-007, AUD-M-001)

Aug 28

Add files via upload

Aug 16

Add files via upload

Add files via upload

Add files via upload

Aug 15

Add files via upload

Add CI workflow for testing and dependency checks