tangled-core
Monorepo for Tangled forked from tangled.org/core
Star
Fork
Watch

Commits on master
knot2/resource: warn when one address takes most pre-auth refusals
committed
bobbin/xrpc: forward client address that knot can rate-limit on
committed
knot2/xrpc: read forwarded chain past every listed proxy
committed
crates/trusted-proxies: shared proxy allowlist w/ CIDR & chain travarsal
committed
.tangled: add commit message lint (git hook & ci)
committed
.tangled/workflows: run rust checks and tests
committed
ogre: pluralize files changed count in PR og image
committed
lexicons/repo: allow null languages response
committed
ogre: pluralize metrics
committed
bobbin/resolver: set blobs on legacy issue & pull upgrades
committed
bobbin/xrpc: forward X-Forwarded-For headers to knots
committed
bobbin: install rustls crypto provider explicitly
committed
knot2: create fork pull request links on push
committed
cmd/zoekt-tngl-indexserver: validate branch names & object ids before running git
committed
cmd/prefill-zoekt,zoekt-tngl-indexserver: type repoDIDs & knot URLs via repoident
committed
repoverify,idresolver/mock: extract Describe, resolve knots via KnotURL
committed
repoident: add KnotURL newtype which parses & canonicalizes knot endpoints
committed
docs: fix dark mode on docsite
committed
nix: fix docs builds
committed
knot2/xrpc: honor forwarded-header only from `xrpc.trusted_proxies`
committed
tinybuttercom
docs: use tangled.org (not .sh) for settings link in knot setup
committed
knot2/git: isolate repo open so ambient config can't inject archive filter driver
committed
spindle/models: fix secret masker cutting off lines early
committed
knot2/README.md: remove 'possibility' of upstream. it's happened
committed
knot2/xrpc: tolerate old owner-name file remote
committed
knot2/index: resolve clone path by display name when no rkey
committed
appview/pages: pass resolver instead of nil in tests
committed
spindle/models: hold back a trailing window so secrets split across log writes stay masked
committed
spindle/microvm: bind qmp sockets ourselves at 0600 and pass qemu the fd
committed
spindle/microvm: cap each workflow vm's cpu and io in its cgroup
committed
spindle/microvm: key the activation config cache per repo so tenants can't poison each other's toplevels
committed
spindle/netguard: refuse to dial internal addresses on user-controlled fetches
committed
knot2/ssh: force no compression bc makes no sense
committed
appview/pages/markup: render attached images
committed
appview: upload images as blobs (pulls)
committed
appview: upload images as blobs (issues)
committed
appview/pages/templates: rename blob field name
committed
lexicons: add blobs field to `repo.{issue,pull}`
committed
knot2/xrpc: hidden staging ref read
committed
spindle: fix skipped tests not actually being skipped
committed
knot2/xrpc: forks take upstream's object format
committed
nix: package knot-server and knot-migrate, add a nixos module
committed
appview/{config,state}: gate xrpc router behind TANGLED_XRPC_ENABLED
committed
appview/xrpc: handlers for "private" xrpc service
committed
api,lexicons: all lexicons for "private" xrpc service
committed
knotserver/git: remove `protocol.ext.allow=never`
committed
knotmirror/xrpc/gitea: resolve annotated tags to commits, not tags
committed
knot2: serve legacy basic-auth admin endpoint if secret set
committed
docs: fix nixery env var name
committed
spindle/engines/microvm: treat exited vms as already destroyed instead of erroring out
committed
*: fmt
committed
knotserver: inline knot2 to monorepo
committed
appview/pages/templates: use generic htmx trigger `from:` query
committed
knotmirror/xrpc: skip blob size check on submodules
committed
idresolver,spindle: add regressions tests for all paths that use perms
committed
spindle: reject repo record if repo was already registered under another owner
committed
knotserver/git: validate fork source
committed
spindle: check owner did is a member in processRepo
committed
spindle: check for perm on process pull
committed
bobbin/worker: add cors headers
committed