Marc-André BombeckandClaude Opus 4.8 dd3ac3510f test(ssrf): lock the pre-existing moodLog and ntfy host pins ...

Extend the SSRF pin inventory to also assert the requirePublicHost pins
already present on the user/operator-supplied moodLog push/sync webhooks
and the ntfy sender, so the full set of overridable-host egress points
is CI-guarded and a future edit that drops one reds here.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-04 13:26:19 +02:00

..

__tests__

feat(whoop): OAuth connect/callback + HMAC-signed webhook + CSP gating

2026-06-04 01:40:27 +02:00

app

test+a11y: fix mocks/expectations for source-priority + dashboard ids; pair coach-memory spinner with motion-reduce

2026-06-04 13:12:18 +02:00

components

fix(settings): per-fact pending state on coach-memory forget

2026-06-04 13:26:00 +02:00

hooks

feat(insights): unify the derived-metric query hook onto one factory key

2026-06-02 23:13:26 +02:00

lib

test(ssrf): lock the pre-existing moodLog and ntfy host pins

2026-06-04 13:26:19 +02:00

types

chore(release): v1.4.41 — iOS perf hotfix, soft-delete completeness, tree hygiene

2026-05-21 18:36:17 +02:00

instrumentation.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

proxy.ts

feat(whoop): OAuth connect/callback + HMAC-signed webhook + CSP gating

2026-06-04 01:40:27 +02:00