sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-06 08:58:05 +00:00

Files

T

Anso 18762fa74b fix(registries): keep registry endpoints local to each instance (#1267 )

Registry credentials are stored and resolved per instance, and the UI
only ever calls registry endpoints with localOnly. The endpoints were
not on the hub-only proxy list, so a scripted request carrying an
x-node-id for a remote node would be forwarded by the remote proxy,
carrying a plaintext registry secret to (or reading stored credentials
from) the remote instance.

Add /api/registries/ to HUB_ONLY_PREFIXES so a remote-targeted registry
request is rejected with 403 before the proxy can forward it, matching
the existing defense-in-depth for the audit log, schedules, and the
global logs feed. Add regression tests for the collection, a sub-path,
and the local pass-through. Correct a stale 409 reference in the guard
comments and test header to the 403 the guard actually returns.

2026-06-01 13:16:56 -04:00

scripts

fix(fleet): resolve getSenchoVersion crash in Docker containers (#396 )

2026-04-06 00:44:36 -04:00

src

fix(registries): keep registry endpoints local to each instance (#1267 )

2026-06-01 13:16:56 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130 )

2026-03-25 00:03:08 -04:00

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889 )