Commit graph

  • 7292da816b
    Merge e6d461c0a7 into 3e80f49d31 monkopedia-coder 2026-11-01 06:19:23 -05:00
  • 3fc1cd1ce3
    Merge ce87aa94e4 into 3e80f49d31 monkopedia-coder 2026-11-01 06:19:22 -05:00
  • 3e80f49d31
    relay: throttle wrong integration secrets per (IP, subdomain) (#811) (#819) main monkopedia-coder 2026-11-01 06:01:03 -05:00
  • 3e05f996fe relay: exempt retired secrets from the throttle alongside stale ones (#811) monkopedia-coder 2026-10-31 21:10:47 -04:00
  • 43cdfd0b55 relay: tests for pre-deploy retired secrets staying exempt (#811) monkopedia-coder 2026-10-31 21:04:57 -04:00
  • 9e97ca8aeb relay: stale_secrets list for the throttle exemption; sticky shared-slot failure (#811) monkopedia-coder 2026-10-31 20:38:06 -04:00
  • d562b1e20b relay: tests for stale secrets across re-enable and shared-slot failures (#811) monkopedia-coder 2026-10-31 20:29:52 -04:00
  • ab07d5a364 relay: retired secrets do not count toward the wrong-secret throttle (#811) monkopedia-coder 2026-10-31 14:51:20 -04:00
  • 6153e922a9 relay: tests for retired secrets not counting toward the throttle (#811) monkopedia-coder 2026-10-31 14:44:07 -04:00
  • 5e4b046521 relay: reserve wrong-secret slots before the secret lookup (#811) monkopedia-coder 2026-10-31 08:14:20 -04:00
  • 39b93486e8 relay: regression tests for concurrent wrong-secret bursts (#811) monkopedia-coder 2026-10-31 08:05:43 -04:00
  • 1d0ab145c4 relay: throttle wrong integration secrets per (IP, subdomain) (#811) monkopedia-coder 2026-10-31 07:49:49 -04:00
  • 38b351d098 relay: tests for wrong-secret throttle per (IP, subdomain) (#811) monkopedia-coder 2026-10-31 07:41:25 -04:00
  • 3ed5639d90
    relay: treat an empty secret set as nothing valid (#810) (#817) monkopedia-coder 2026-10-31 07:32:41 -04:00
  • 8837a082e0 Seed fixture device secrets via a test-mode admin endpoint (#810) monkopedia-coder 2026-10-31 06:27:34 -04:00
  • 1bb1958b48 relay: treat an empty secret set as nothing valid (#810) monkopedia-coder 2026-10-31 05:43:45 -04:00
  • 0b49a77a95 relay: add failing regression tests for empty-secret-set fail-open (#810) monkopedia-coder 2026-10-31 05:41:08 -04:00
  • f4b61b19c2
    Send users to install Health Connect instead of crashing (#803) (#806) monkopedia-coder 2026-10-23 12:42:46 -04:00
  • e1b6a5472a Send users to install Health Connect instead of crashing (#803) monkopedia-coder 2026-10-23 12:08:09 -04:00
  • 9e119865e4
    Force the tag fetch in play-upload so tag-push uploads work (#802) monkopedia-coder 2026-10-22 21:51:22 -04:00
  • 7e16c4aa9b Force the tag fetch in play-upload so tag-push uploads work monkopedia-coder 2026-10-22 21:21:41 -04:00
  • 61e3e3dde1
    Bump to v1.0.14 (#801) v1.0.14 monkopedia-coder 2026-10-22 21:09:40 -04:00
  • 758c23899d Bump to v1.0.14 monkopedia-coder 2026-10-22 20:30:02 -04:00
  • b27709ec10
    Run SessionHandler's session work off the caller's thread (#800) monkopedia-coder 2026-10-22 20:29:25 -04:00
  • c5ccad7ba7 Run SessionHandler's session work off the caller's thread monkopedia-coder 2026-10-22 19:59:50 -04:00
  • 69a826f603
    Upload the Google AAB to Play testing tracks from release.yml (#798) monkopedia-coder 2026-10-19 17:50:18 -04:00
  • 763a71dc1d Address review on #798: push-only Play job, fail-closed dry run Monkopedia 2026-10-19 17:23:18 -04:00
  • a52b3fde7a Upload the Google AAB to Play testing tracks from release.yml Monkopedia 2026-10-19 16:41:39 -04:00
  • 43ed76dad4
    Bump to v1.0.13 (#797) v1.0.13 monkopedia-coder 2026-10-19 12:07:52 -04:00
  • 260c0ecf20 Bump to v1.0.13 monkopedia-coder 2026-10-19 11:01:57 -04:00
  • 2a04b5785b
    Make release crash reports decodable: publish R8 mappings, keep r8-map-id in frames (#755) (#794) monkopedia-coder 2026-10-19 11:01:30 -04:00
  • 0f7da38317
    Close the mux stream whenever a device-side session ends (#780) (#796) monkopedia-coder 2026-10-19 10:59:46 -04:00
  • be2d01f1b6 Close the mux stream whenever a device-side session ends (#780) monkopedia-coder 2026-10-19 10:19:31 -04:00
  • b56d31317c release: publish each variant's R8 mapping as a release asset (#755) monkopedia-coder 2026-10-19 10:15:12 -04:00
  • e540104473 relay: keep R8 map id in stack-frame file slot through crash sanitizer (#755) monkopedia-coder 2026-10-19 10:08:48 -04:00
  • 94a9b8b410
    Stop abandoned bridge sessions from pinning IO threads (#778) (#781) monkopedia-coder 2026-10-19 10:06:18 -04:00
  • a8b3318400
    relay: sweep stale devices on last activity, not onboarding age (#787) (#793) monkopedia-coder 2026-10-17 23:49:16 -04:00
  • 977fbe874a relay: keep put_device from reverting last_seen (#787) monkopedia-coder 2026-10-17 23:15:49 -04:00
  • 796939bd24 relay: sweep stale devices on last activity, not onboarding age (#787) monkopedia-coder 2026-10-17 23:14:04 -04:00
  • 8acd0bc13c relay: add last_seen to device records, with failing sweep/ws/renew tests (#787) monkopedia-coder 2026-10-17 23:12:10 -04:00
  • e6d461c0a7 Exclude own notifications from list_active_notifications (#783) fix-783-exclude-own-notifications monkopedia-coder 2026-10-17 23:10:14 -04:00
  • 891ffd143d
    relay: keep a device's bound key across re-registration (#790) monkopedia-coder 2026-10-17 11:01:16 -04:00
  • 4d67b6d6ca
    relay: tolerate ACME challenges that carry no token (#791) monkopedia-coder 2026-10-17 10:46:18 -04:00
  • e6f52bf437 relay: tolerate ACME challenges that carry no token monkopedia-coder 2026-10-17 10:37:20 -04:00
  • edca2685b1 relay: keep a device's bound key across re-registration monkopedia-coder 2026-10-17 10:30:06 -04:00
  • 3982fc8a45
    relay: never reuse or overwrite an existing device record on /register (#789) monkopedia-coder 2026-10-17 10:21:40 -04:00
  • ea7c1e28a0 relay: never reuse or overwrite an existing device record on /register monkopedia-coder 2026-10-17 09:50:05 -04:00
  • a7806b8d3d relay: add create-only device write and test seams for /register monkopedia-coder 2026-10-17 09:47:12 -04:00
  • 27fbe9c504 Stop abandoned bridge sessions from pinning IO threads (#778) monkopedia-coder 2026-10-16 08:50:02 -04:00
  • c97d8976eb Add failing gate: abandoned bridge sessions hold IO threads (#778) monkopedia-coder 2026-10-16 08:32:55 -04:00
  • 625329436b
    Test the read timeout, the other half of #761 (#767) monkopedia-coder 2026-09-15 10:49:19 -04:00
  • a21c894c07
    Bump to v1.0.12 (#766) v1.0.12 monkopedia-coder 2026-09-15 10:38:32 -04:00
  • 65b36a9d55 Test the read timeout, the other half of #761 monkopedia-coder 2026-09-15 10:04:07 -04:00
  • f9a72a114d Bump to v1.0.12 monkopedia-coder 2026-09-15 09:55:24 -04:00
  • 498e6560fe
    Bound the /token request body (#761) (#763) monkopedia-coder 2026-09-15 09:54:42 -04:00
  • 07627fd7e0
    Make refresh-token rotation one transaction (#760) (#762) monkopedia-coder 2026-09-15 09:49:18 -04:00
  • d8fc986aa3
    Refuse rather than hang when a gated setting cannot be read (#751) (#757) monkopedia-coder 2026-09-15 09:25:34 -04:00
  • 85a8f9e7a2 Bound the /token request body (#761) monkopedia-coder 2026-09-15 09:16:55 -04:00
  • 9ec7faa972 Make refresh-token rotation one transaction (#760) fix/token-family-revoke-race coderbot 2026-09-15 09:12:14 -04:00
  • 3783728e2d
    Give the two untested CI gates a self-test, and mechanise the rule (#705) (#759) monkopedia-coder 2026-09-15 00:20:07 -04:00
  • 1fae4ff1ab Revert the temporary no-harness fixture gate Monkopedia 2026-09-14 23:44:07 -04:00
  • adf6a8335f TEMPORARY: a gate with no self-test, to watch #705's check go red in CI Monkopedia 2026-09-14 23:32:20 -04:00
  • e31ae97742 Give the two untested CI gates a self-test, and mechanise the rule (#705) Monkopedia 2026-09-14 23:31:19 -04:00
  • a3f02830c5 Refuse rather than hang when a gated setting cannot be read (#751) fix-751-livebooleansetting-catch Monkopedia 2026-09-14 23:23:01 -04:00
  • fee84e61f4
    Bump to v1.0.11 (#752) v1.0.11 monkopedia-coder 2026-09-14 15:27:30 -04:00
  • 1a4b0e1aeb Bump to v1.0.11 monkopedia-coder 2026-09-14 14:43:56 -04:00
  • 30a906c32d
    Raise targetSdk from 35 to 36 (#745) monkopedia-coder 2026-09-14 14:46:27 -04:00
  • 96aeeeb872
    Cap HTTP framing buffers and make refresh-token rotation atomic (F-Droid audit) (#750) monkopedia-coder 2026-09-14 14:42:16 -04:00
  • 599b8b58ef
    Consult the consent toggles that gate notification actions and DND (#746) (#748) monkopedia-coder 2026-09-14 11:21:24 -04:00
  • 48669b66ed fix(token): rotate refresh tokens with a compare-and-swap Monkopedia 2026-09-14 11:01:36 -04:00
  • 06e1efcf0e fix(bridge): cap HTTP framing so one stream cannot OOM the service Monkopedia 2026-09-14 11:01:24 -04:00
  • a351f38efe Consult the consent toggles that gate notification actions and DND (#746) Monkopedia 2026-09-14 10:48:21 -04:00
  • b130e7441b Raise targetSdk from 35 to 36 Jason Monk 2026-09-11 15:36:54 -04:00
  • 8a45e59dc4
    docs(listing): say the certificate check ships on at 12 hours (#744) monkopedia-coder 2026-09-10 10:32:23 -04:00
  • 51a4a4eb54 docs(listing): say the certificate check ships on at 12 hours Jason Monk 2026-09-10 08:31:00 -04:00
  • abc11ad420
    docs(privacy): name what actually leaves the device (#743) monkopedia-coder 2026-09-09 23:31:30 -04:00
  • c52f07b9bf docs(privacy): name what actually leaves the device Jason Monk 2026-09-09 23:02:49 -04:00
  • 22fe5b55da
    Bump to v1.0.10 (#742) v1.0.10 monkopedia-coder 2026-09-09 13:50:35 -04:00
  • 3ef705597c Pin the version in screenshot fixtures so goldens survive a release Monkopedia 2026-09-09 13:08:54 -04:00
  • b8b2de6a0f Close the second exhaustive-network claim in privacy.md Monkopedia 2026-09-09 12:13:42 -04:00
  • cc449daa7a Bump to v1.0.10 Monkopedia 2026-09-09 12:12:16 -04:00
  • a8b0dbf329
    Let the user stop the security check entirely (#740) (#741) monkopedia-coder 2026-09-09 12:03:07 -04:00
  • ceb6438d91 Cite the approval provenance instead of flagging it unverified (#740) Monkopedia 2026-09-09 11:26:06 -04:00
  • f296d05820 Let the user stop the security check entirely (#740) Monkopedia 2026-09-09 10:59:31 -04:00
  • 91f3220b2d
    Ask before sending a crash report, and remember the answer (#546) (#735) monkopedia-coder 2026-09-08 16:07:26 -04:00
  • 1470eefd2b Leave ACRA disabled at init, not on-in-release (#546) Monkopedia 2026-09-08 15:25:46 -04:00
  • 7af768b34f Ask before sending a crash report, and remember the answer (#546) Monkopedia 2026-09-08 15:15:07 -04:00
  • 8d7e1edf55
    Tell a grep that answered "no" from one that never answered (#716) (#726) monkopedia-coder 2026-09-03 15:32:22 -04:00
  • 17f1afcda5
    Name all three zone-sensitive goldens, measured not inferred (#719) (#723) monkopedia-coder 2026-09-03 07:20:00 -04:00
  • 98dda56368 Tell a grep that answered "no" from one that never answered (#716) coderbot 2026-09-03 07:17:53 -04:00
  • 8cbcc40eb1
    Gate: a broad catch must be preceded by a cancellation clause (#674) (#720) monkopedia-coder 2026-09-03 06:59:24 -04:00
  • 7e87ffb8af Name all three zone-sensitive goldens, measured not inferred (#719) monkopedia-coder 2026-09-03 06:45:51 -04:00
  • 119975ba54 Repoint the backlog rows at #722, and say what the citation check does not do Monkopedia 2026-09-03 06:31:53 -04:00
  • 76e25d32e5 Gate: a broad catch must be preceded by a cancellation clause (#674) Monkopedia 2026-09-03 06:07:03 -04:00
  • 34ed79d120
    Say what the pinned screenshot timestamp actually pins (#712) (#718) monkopedia-coder 2026-09-03 03:52:15 -04:00
  • 538afef8cc
    Enable core library desugaring for :work (#699) (#706) monkopedia-coder 2026-09-03 03:32:38 -04:00
  • 1b27ad2dfe Say what the pinned screenshot timestamp actually pins (#712) Monkopedia 2026-09-03 03:16:11 -04:00
  • ed76ca9516
    Drain the capture scope instead of snapshotting it (#707) (#714) monkopedia-coder 2026-09-03 03:07:28 -04:00
  • cf8bd57732
    Make the sensitive-logging harness report its vacuous cases (#711) (#713) monkopedia-coder 2026-09-03 03:04:40 -04:00
  • 362abfa705
    Re-cite workflow.md by line text, not line number, in the coverage audit (#710) monkopedia-coder 2026-09-03 02:49:47 -04:00