SnapOtterandGitHub 059af34ace fix(gdpr): stop exporting MFA credentials and gate exports on role authority (#706) ...

The subject-access export selected the whole users row and subtracted only
passwordHash, so profile.json carried totpSecret and recoveryCodesHash. On a
default install DATA_ENCRYPTION_KEY is empty and the TOTP seed is stored as
cleartext base32; recovery codes are 32-bit values behind an unsalted SHA-256.

Name the profile columns instead, add the canManageTargetRole gate the sibling
purge routes already apply, and scope the export status lookup to the user in
the path plus the gdpr-export tool id.

2026-08-01 14:16:36 +08:00

..

ai

chore: prepare the 2.2.0 release (#660)

2026-07-27 22:09:31 +08:00

api

fix(gdpr): stop exporting MFA credentials and gate exports on role authority (#706)

2026-08-01 14:16:36 +08:00

doc-engine

fix(doc-engine): guard sidecar JSON parsing against non-JSON stdout (#532)

2026-07-16 19:26:08 +08:00

docker

fix(docker): harden Postgres readiness checks in compose and startup (#595)

2026-07-21 14:01:02 +08:00

features

fix(ai): pin huggingface-hub so bundle rebuilds cannot strand hub 1.x (#683)

2026-07-30 10:04:15 +08:00

fixtures

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

helpers

fix(fuzz): bound settings-fuzz inputs, cap split tiles, budget the slow codecs, steady flakes (#696)

2026-07-31 06:56:44 +08:00

image-engine

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

infra

ci(ocr): verify the baked trust file, not unset image env vars (#666)

2026-07-29 20:21:16 +08:00

landing

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

media-engine

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

qa

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

scripts

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

security

ci(release): fix the archive tsx path and patch the go-tools x/text HIGH (#665)

2026-07-29 19:05:30 +08:00

shared

ci(nightly): repair five job classes broken by the #649 QA hardening (#695)

2026-07-31 02:09:39 +08:00

web

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

a11y-gate-contract.test.ts

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

e2e-harness-contract.test.ts

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

env-data-dir.test.ts

fix(migrator): correct and harden the 1.x to 2.0 SQLite import (#434)

2026-07-04 15:15:39 +00:00

landing-status-i18n.test.ts

feat(landing): add a live system status indicator to the footer (#641)

2026-07-25 20:52:42 +08:00

landing-status-worker.test.ts

feat(landing): add a live system status indicator to the footer (#641)

2026-07-25 20:52:42 +08:00

legacy-sqlite-fixture.test.ts

fix(migrator): correct and harden the 1.x to 2.0 SQLite import (#434)

2026-07-04 15:15:39 +00:00

palette-contrast.test.ts

feat(landing): add a live system status indicator to the footer (#641)

2026-07-25 20:52:42 +08:00

pipeline-templates.test.ts

feat: pipeline templates, analytics opt-out, 83 conversion presets, positioning + e2e modernization

2026-06-28 18:57:53 +08:00

playwright-api-lifecycle.test.ts

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

playwright-backing-state.test.ts

fix: release QA hardening across processing, media, security, and CI gates (#649)

2026-07-27 15:37:30 +08:00

surface-playwright-harness.test.ts

fix(docs): keep the translated locale trees out of the search index (#662)

2026-07-28 17:08:32 +08:00

wait-for-service.test.ts

fix(api): wait for Postgres and Redis at startup instead of crash-looping (#537)

2026-07-16 22:50:11 +08:00