Promote nightly to main (2026-10-05) - #1488

Merged

Wikid82 merged 70 commits into

mainfrom

Oct 5, 2026

Commits on Oct 3, 2026

chore: propagate changes from main into development (#1463)
Wikid82
authored
1188b58
refactor: add shared request helpers
Wikid82
committed
3f333e6
fix(security): harden input validation in the API layer
Wikid82
committed
7535a16
refactor: add shared request middleware
Wikid82
committed
8510cb6
fix(security): harden request handling in the API layer
Wikid82
committed
a1ff310
fix(security): harden account management in the API layer
Wikid82
committed
58d5b30
fix(security): harden request validation in the API layer
Wikid82
committed
e9a6c55
docs: update security configuration notes
Wikid82
committed
04e07f9
docs: update account management notes
Wikid82
committed
0fa49c5
docs: update security configuration notes
Wikid82
committed
4033d48
test: add coverage for authentication edge cases
Wikid82
committed
e501538
test: add coverage for authentication edge cases
Wikid82
committed
dbc0fc1
test: update emergency reset rate-limit spec
Wikid82
committed
e2e806a
chore: widen codeql suppression line range
Wikid82
committed
79a1e0a
chore: widen codeql suppression line range
Wikid82
committed
39ae2cf
chore: widen codeql suppression line range
Wikid82
committed
09dccc6
chore: fix test lint warnings
Wikid82
committed
0888108
chore: fix test lint warnings
Wikid82
committed
2b9c7aa
fix(security): harden request handling in the API layer (#1469)
Wikid82
authored
66686ba
fix(security): harden account management in the API layer (#1470)
Wikid82
authored
d0b5b46
chore: merge development into fix/security-hardening-3
Wikid82
committed
1b1e703
fix(security): harden request validation in the API layer (#1471)
Wikid82
authored
9e72b82
chore: add Aikido API key env to Claude settings
Wikid82
committed
52d63f0
chore: harden workflow triggers and checkout credentials
Wikid82
committed
a8e7d5e
deps: pin dnsimple-go to v8.3.1 in Caddy build
Wikid82
committed
e69da96
fix: apply dnsimple-go pin via go get instead of xcaddy --with
Wikid82
committed
98a872e
chore(docker): refresh bundled proxy toolchain image

Wikid82
authored and
github-actions[bot]
committed
dba3150
chore(docker): refresh bundled proxy toolchain image (#1475)
Wikid82
authored
f6c85c6
chore: build and test the powerdns plugin in the workspace
Wikid82
committed
328b6f4
refactor: add shared helper for outbound provider requests
Wikid82
committed
f15fd84
fix(security): harden URL handling in provider integrations
Wikid82
committed
febd3cd
fix: validate DNS provider endpoint addresses
Wikid82
committed
4cfb082
docs: document stricter address checks for provider integrations
Wikid82
committed
afcc35b

Commits on Oct 4, 2026

chore: teach code scanning about the shared outbound request helpers
Wikid82
committed
b847047
chore(docker): set ownership at copy time instead of recursive chown of /app
Wikid82
committed
88440b7
test: handle ignored errors flagged by the full linter set
Wikid82
committed
1315289
chore: ignore plugin build leftovers in the powerdns module
Wikid82
committed
11b9792
chore(deps): bump otelhttp to v0.72.0 and add powerdns to updater
Wikid82
committed
16351cb
fix(security): harden URL handling in provider integrations (#1476)
Wikid82
authored
0804794
chore: update dependency anchore/grype to v0.120.0
renovate[bot]
authored
4312d88
chore(deps): bump eslint-plugin-unicorn to v77
Wikid82
committed
34653e6
chore(deps): bump lucide-react from 1.50.0 to 1.51.0
Wikid82
committed
faea809
chore(deps): override sitemap and uuid in docs site
Wikid82
committed
9353d7e
docs: fix broken links to contributor-only pages in the docs site
Wikid82
committed
b70837d
chore(deps): allowlist unpatched braces and http-cache-semantics advisories in docs site
Wikid82
committed
dc66f2c
chore: update dependency anchore/grype to v0.120.0 (#1484)
Wikid82
authored
c34e060
fix(security): pin pgproto3/v2 to v2.3.3 in crowdsec build
Wikid82
committed
7eb6181
chore: update dependency uuid to v14
renovate[bot]
authored
937a719
chore(docker): refresh bundled proxy toolchain image

Wikid82
authored and
github-actions[bot]
committed
3d88540
chore(docker): refresh bundled proxy toolchain image (#1486)
Wikid82
authored
2f4d88d
Merge branch 'development' into renovate/uuid-14.x
Wikid82
authored
66cb560
chore(docker): update GeoLite2-Country.mmdb checksum

Wikid82
authored and
github-actions[bot]
committed
78b0026
chore: update dependency uuid to v14 (#1485)
Wikid82
authored
c7b284c
chore(ci): stop persisting git credentials in test and scan workflow checkouts
Wikid82
committed
07a8e68
chore(ci): stop persisting git credentials in build and release workflow checkouts
Wikid82
committed
e4e6947
chore(ci): push with an explicit token instead of persisted checkout credentials
Wikid82
committed
bfc1987
Merge branch 'development' into bot/update-geolite2-checksum
Wikid82
authored
cd64466
chore(ci): scope workflow token permissions per job and guard workflow_run against forks
Wikid82
committed
3b4f00b
chore(ci): scope package write permissions to the jobs that publish
Wikid82
committed
d77293e
chore(ci): drop workflow_run trigger from PR security scan
Wikid82
committed
80aab86
chore: move serialize-javascript script to docs-site directory
Wikid82
committed
4a71450
chore(deps): bump http-cache-semantics override to 4.3.0
Wikid82
committed
b4dac5a
chore(docker): update GeoLite2-Country.mmdb checksum (#1487)
Wikid82
authored
37210e2
chore(deps): bump lucide-react from 1.51.0 to 1.52.0
Wikid82
committed
4e5c7b5

Commits on Oct 5, 2026

chore(docs-site): override feed to ^6.0.0 and add update script
Wikid82
committed
518526b
docs: add Aikido security audit report badge to README
Wikid82
committed
735549c
docs: replace example emergency tokens with placeholders
Wikid82
committed
c1f9bf0
test: use obviously fake token in emergency server redaction test
Wikid82
committed
82cc160
docs: scrub example emergency token from archived docs
Wikid82
committed
4da6d86
chore: remove Aikido API key from tracked Claude settings
Wikid82
committed
68a8d2f