Dan Milne

dkam pushed to main at PicoPackage/picopackage

2026-08-13 11:19:24 +00:00

80a0bd83b2 Drop stale exe/pppkg ignore from .standard.yml

dkam pushed to main at PicoPackage/picopackage

2026-08-13 11:18:25 +00:00

6dd57e84f1 Version 0.3.0: resolver/merge/cache refactor, signing design notes

dkam pushed to main at dkam/clinch

2026-07-19 10:40:28 +00:00

126e26685d Bump version to 0.17.1

45a1203647 Fix 500 when deleting an application with device codes

Compare 2 commits »

dkam pushed to main at dkam/clinch

2026-07-19 07:39:14 +00:00

51ddb42bc7 Bump Ruby to 4.0.6 and update gems

808fb06500 Bump version to 0.17.0

8c370d0829 Extract shared token-minting helper for auth-code and device grants

8b146db54e Device code: retry user_code generation on collision

6c4be7199c Extract OidcScopes::SUPPORTED as the shared scope list

Compare 14 commits »

dkam pushed to main at dkam/clinch

2026-06-28 13:10:56 +00:00

c85d25c4b9 Untrack SECURITY_REVIEW_TODO.md and gitignore it

dkam pushed to main at dkam/clinch

2026-06-21 08:29:44 +00:00

1b0d323572 Bump version to 0.16.3

dkam pushed to main at dkam/clinch

2026-06-21 08:09:33 +00:00

d1d626c540 Rework build workflow to trigger on version bump + manual dispatch

dkam pushed tag v0.16.2 to dkam/clinch

2026-06-21 05:46:00 +00:00

dkam pushed to main at dkam/clinch

2026-06-21 05:45:59 +00:00

782e197d91 Fix access check form: use GET so results render

020759bfb3 Fix invalid require-trusted-types-for CSP directive

85f50bfc96 Add GitHub Actions workflow to build and publish image to GHCR

Compare 3 commits »

dkam pushed to main at dkam/clinch

2026-06-21 03:57:44 +00:00

b55139eb1c Fix Sentry config to use Sentry.init API

dkam pushed to main at dkam/clinch

2026-06-21 03:54:10 +00:00

8f578ed3f4 Upgrade Ruby to 4.0.5

aa5736ddab Update gems and fix lint to clear CI failures

Compare 2 commits »

dkam pushed to main at dkam/clinch

2026-06-14 22:26:29 +00:00

49068aa344 Add tests

dkam pushed to main at dkam/clinch

2026-06-14 22:21:30 +00:00

07ea031b61 Remove hardcoded internal IP from production hosts allowlist

dkam pushed to main at dkam/clinch

2026-06-11 13:54:26 +00:00

209c5496d8 Fix asset precompile boot and bump version to 0.16.0

d49e7ce4f5 Move CSP to nonces; remove unsafe-inline from script-src and style-src

44892e3301 Make WebAuthn clone detection actually block, and fix false positives

24266872f9 Revoke access tokens too on refresh-token reuse detection

cd862c7cd7 Filter code params from logs (TOTP, backup, OAuth code, PKCE)

Compare 13 commits »

dkam pushed to main at dkam/clinch

2026-06-07 08:58:14 +00:00

2843790cef Apps index access column + summary + admin access checker

dkam pushed to main at dkam/clinch

2026-06-07 08:33:20 +00:00

0e9ec71013 Link the user show page from the admin users index

fe68f6e81e Use Tailwind dark: toggles for dark-mode icons

Compare 2 commits »

dkam pushed to main at dkam/clinch

2026-06-07 07:15:35 +00:00

c5ab7dc2a5 Compact icon uploader shared between light and dark icon fields

dkam pushed to main at dkam/clinch

2026-06-07 07:05:56 +00:00

bfad9c4e9d Generated monogram fallback + optional dark-mode icon per application

dkam pushed to main at dkam/clinch

2026-06-07 06:46:44 +00:00

5b41db2c6a Fix FileNotFoundError when uploading an SVG icon

dkam pushed to main at dkam/clinch

2026-06-07 06:26:05 +00:00

03dfdbd83a Default-deny access control with group flags and access enumeration

6b58b685c4 Bump version to 0.12.0

a399907dfd Allow assigning applications to a group from the group form

bbfb564e1c Show Clinch, Rails and Ruby versions in sidebar footer; bump to 0.11.0

Compare 4 commits »