-
Notifications
You must be signed in to change notification settings - Fork 24
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Release automation ships a stale Cargo.lock: lock-sync the release PR and build --locked in CI
bugSomething isn't workingSomething isn't workingkind:ciCI, release, or packaging pipelineCI, release, or packaging pipelinesev:mediumDegraded but workaround existsDegraded but workaround existsStatus: Open.#242 In Gitlawb/node;ci(release): unanchored tag validation glob lets a multiline dispatch input inject step outputs
kind:ciCI, release, or packaging pipelineCI, release, or packaging pipelinesev:mediumDegraded but workaround existsDegraded but workaround existsStatus: Open.#239 In Gitlawb/node;ci(release): docker backfill repoints :latest/:X.Y backward, and manifest publishes any digests present
kind:ciCI, release, or packaging pipelineCI, release, or packaging pipelinesev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundStatus: Open.#238 In Gitlawb/node;ci: npm-publish trusted publishing has no environment/branch gate, so workflow_dispatch can publish arbitrary content
kind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundStatus: Open.#234 In Gitlawb/node;Extract the identity-key module and the bounded name-probe loop from lib.rs
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:refactorRestructure, behavior preservedRestructure, behavior preservedsev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-haveStatus: Open.#232 In Gitlawb/node;Pin the identity key directory to 0700 and create marker files 0600
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:identityDID/UCAN, http-sig auth, push authorizationDID/UCAN, http-sig auth, push authorizationStatus: Open.#231 In Gitlawb/node;Parse GITLAWB_ICAPTCHA_INSECURE value so =0/=false disables the loopback relaxation
kind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:apiNode REST API request/response surfaceNode REST API request/response surfaceStatus: Open.#227 In Gitlawb/node;GET /ipfs/{cid} leaks raw sqlx/DB error text in the 500 body to unauthenticated callers (sibling of #106)
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:securityVulnerability fix or hardeningVulnerability fix or hardeningsev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivessubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#226 In Gitlawb/node;Replication object-set filter duplicated across pinata_object_list_for_refs and resolve_drain_object_list (fail-closed drift risk)
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:refactorRestructure, behavior preservedRestructure, behavior preservedsev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncsubsystem:visibilityPath-scoped visibility and content withholdingPath-scoped visibility and content withholdingStatus: Open.#225 In Gitlawb/node;test(git-remote): run_bounded clean-exit path lacks a Windows descendant reap (Unix-only cfg)
kind:testTest coverage or harnessTest coverage or harnesssev:lowCosmetic, cleanup, or nice-to-haveCosmetic, cleanup, or nice-to-havesubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncStatus: Open.#222 In Gitlawb/node;gl whoami reports registered: false on a failed trust lookup, not just a genuine 404
crate:glgl — the contributor CLIgl — the contributor CLIkind:bugDefect fix — wrong or unsafe behaviorDefect fix — wrong or unsafe behaviorsev:mediumDegraded but workaround existsDegraded but workaround existssubsystem:apiNode REST API request/response surfaceNode REST API request/response surfacesubsystem:identityDID/UCAN, http-sig auth, push authorizationDID/UCAN, http-sig auth, push authorizationStatus: Open.#220 In Gitlawb/node;Implement the reconciliation sweep the replication path already assumes as a durability backstop
crate:nodegitlawb-node — the serving node and REST APIgitlawb-node — the serving node and REST APIkind:featureNew capability or surfaceNew capability or surfacesev:highMajor break or real security/trust risk, no easy workaroundMajor break or real security/trust risk, no easy workaroundsubsystem:replicationMirror, replica, and cross-node syncMirror, replica, and cross-node syncsubsystem:storageBlob/object store, Arweave, IPFS, archivesBlob/object store, Arweave, IPFS, archivesStatus: Open.#218 In Gitlawb/node;