6 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang Parnerkar	fce9f1cbf1	fix(audit): bump quinn-proto + ignore rmcp DNS-rebinding advisory ... Two new RUSTSEC advisories landed between 2026-06-18 and 2026-06-30 that started failing every PR's `cargo audit` step: - RUSTSEC-2026-0185 (quinn-proto 0.11.14): remote memory exhaustion via unbounded out-of-order stream reassembly. Patched in 0.11.15 (semver- compatible). `cargo update -p quinn-proto`, no API change. - RUSTSEC-2026-0189 (rmcp 0.16.0): DNS rebinding in Streamable HTTP server transport due to missing Host-header validation. Patched in rmcp >= 1.4.0, which is a major API jump from our pin (rmcp shipped 0.x -> 1.x -> 2.x in three months and the migration touches every tool handler + the auth middleware just landed in #92). Added to ignore with justification: our MCP server is exposed at a public hostname behind orca's TLS-terminating ingress with per-tenant bearer auth. The attack model (browser DNS-rebinding into a victim's localhost MCP server) doesn't apply to a public-hostname deployment. Defense-in-depth Host-header validation remains worthwhile, tracked as a multi-hour M7.3 follow-up to migrate rmcp 0.16 -> 2.x. Unblocks #96 and #94.	2026-06-30 17:48:42 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00