pulse-triage[bot] 96653f81c4 Reject malformed UTF-8 backup-lock evidence before guest reads ...

Do not let encoding/json repair malformed configuration strings into evidence of an absent operation lock. Reject the whole malformed response before a guest command and before publishing its payload, while retaining valid Unicode and ordinary configuration decoding.

Contract-Neutral: Restore the existing malformed-config deferral contract without changing guest commands, lock policy, payloads or public interfaces.
Change-source: pulse-maintainer

2026-10-07 19:05:53 +01:00

..

agents

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

aicontracts

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

audit

Preserve audit evidence in verification and recovery guidance

2026-10-01 20:08:53 +01:00

auth

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

cloudauth

fix(hosted): preserve direct handoff membership continuity

2026-03-26 23:40:02 +00:00

db

fix(ai): preserve diagnostic evidence and proposal boundaries

2026-09-06 01:54:28 +01:00

discovery

Bound discovery probe response bodies

2026-09-01 10:37:26 +01:00

diskinventory

Stop a stale agent SMART row lending a replaced disk its identity (#2658)

2026-10-07 14:01:19 +01:00

edition

Block in-app self-update on the Pro binary to prevent silent downgrade

2026-07-08 10:02:04 +01:00

extensions

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

fsfilters

Keep local disk mounts beside system directories visible

2026-10-07 15:36:53 +01:00

licensing

Retire Relay labels and upsells inside Pulse

2026-09-29 13:19:54 +01:00

metrics

Make the time-major metrics index the unique identity index

2026-09-24 08:45:38 +01:00

pbs

fix(pbs): reject incomplete alerting measurements

2026-09-05 18:04:21 +01:00

pmg

Bound Proxmox API success responses

2026-08-31 21:20:30 +01:00

proxmox

Reject malformed UTF-8 backup-lock evidence before guest reads

2026-10-07 19:05:53 +01:00

pulsecli

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

reporting

Stop reports and resource history calling a moved alert recovered (#2607)

2026-10-07 09:10:57 +01:00

securityutil

Block IPv6 transition addresses in SSRF guards (GHSA-8f8r-p75h-jwq5)

2026-07-31 17:57:26 +01:00

server

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

tlsutil

feat(monitoring): alert on certificate validity

2026-08-06 09:47:03 +01:00