pulse-triage[bot] 7100938fb3 Keep established Proxmox certificate pins during recovery ...

Reject automatic replacement of primary and known member fingerprints. Admit first-use capture only for a declared new member and a typed local verifier failure; preserve concurrent trust, caller-owned configuration and operator-visible mismatch evidence. Validate real changed/restored TLS leaves through startup, recovery and new-member acceptance while retaining guest-command safeguards.

Change-source: pulse-maintainer

2026-10-09 20:06:58 +01:00

..

agents

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

aicontracts

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

audit

Preserve audit evidence in verification and recovery guidance

2026-10-01 20:08:53 +01:00

auth

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

cloudauth

fix(hosted): preserve direct handoff membership continuity

2026-03-26 23:40:02 +00:00

db

fix(ai): preserve diagnostic evidence and proposal boundaries

2026-09-06 01:54:28 +01:00

discovery

Bound discovery probe response bodies

2026-09-01 10:37:26 +01:00

diskinventory

Stop a stale agent SMART row lending a replaced disk its identity (#2658)

2026-10-07 14:01:19 +01:00

edition

Block in-app self-update on the Pro binary to prevent silent downgrade

2026-07-08 10:02:04 +01:00

extensions

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

fsfilters

Avoid per-directory allocations while filtering disk mounts

2026-10-09 17:50:19 +01:00

licensing

Retire Relay labels and upsells inside Pulse

2026-09-29 13:19:54 +01:00

metrics

Remove the summary chart routes no client calls

2026-10-07 23:14:49 +01:00

netutil

Keep guest primary addresses associated with their interfaces

2026-10-09 13:07:08 +01:00

pbs

fix(pbs): reject incomplete alerting measurements

2026-09-05 18:04:21 +01:00

pmg

Honour saved PMG collection scope without inventing recovery

2026-10-08 06:54:46 +01:00

proxmox

Keep established Proxmox certificate pins during recovery

2026-10-09 20:06:58 +01:00

pulsecli

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

reporting

Let only POST narrate single-resource reports with Pulse Assistant

2026-10-07 21:00:34 +01:00

securityutil

Block IPv6 transition addresses in SSRF guards (GHSA-8f8r-p75h-jwq5)

2026-07-31 17:57:26 +01:00

server

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

tlsutil

Keep established Proxmox certificate pins during recovery

2026-10-09 20:06:58 +01:00