pulse-triage[bot] a090a67756 Keep guest-agent admission single-attempt for password sessions ...

The generic password-session client retries once after a 401; that implicit retry can bypass a fresh lock check inside a guest admission. Disable it only for QGA commands, retain the refusal, and prove healthy guest reads plus unchanged ordinary API session recovery.

Contract-Neutral: Completes the documented no-replay guest admission rule without adding a contract or surface; adds password refusal and healthy recovery controls.
Change-source: pulse-maintainer

2026-10-03 14:21:03 +01:00

..

agents

Fix MD RAID spare counts without hiding member failures

2026-10-01 19:56:47 +01:00

aicontracts

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

audit

Preserve audit evidence in verification and recovery guidance

2026-10-01 20:08:53 +01:00

auth

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

cloudauth

fix(hosted): preserve direct handoff membership continuity

2026-03-26 23:40:02 +00:00

db

fix(ai): preserve diagnostic evidence and proposal boundaries

2026-09-06 01:54:28 +01:00

discovery

Bound discovery probe response bodies

2026-09-01 10:37:26 +01:00

diskinventory

fix(unifiedresources): merge PVE and agent rows for the same RAID array volume

2026-08-28 06:20:10 +01:00

edition

Block in-app self-update on the Pro binary to prevent silent downgrade

2026-07-08 10:02:04 +01:00

extensions

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

fsfilters

fix(alerts): stabilize noisy lifecycle signals

2026-08-29 17:32:17 +01:00

licensing

Retire Relay labels and upsells inside Pulse

2026-09-29 13:19:54 +01:00

metrics

Make the time-major metrics index the unique identity index

2026-09-24 08:45:38 +01:00

pbs

fix(pbs): reject incomplete alerting measurements

2026-09-05 18:04:21 +01:00

pmg

Bound Proxmox API success responses

2026-08-31 21:20:30 +01:00

proxmox

Keep guest-agent admission single-attempt for password sessions

2026-10-03 14:21:03 +01:00

pulsecli

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

reporting

fix(patrol): preserve refusals and expose measured summary evidence

2026-09-05 22:29:48 +01:00

securityutil

Block IPv6 transition addresses in SSRF guards (GHSA-8f8r-p75h-jwq5)

2026-07-31 17:57:26 +01:00

server

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

tlsutil

feat(monitoring): alert on certificate validity

2026-08-06 09:47:03 +01:00