MrMasterbay 4a702cd742 security: fix web-push IPv6 SSRF bypass + persist-credentials on CI checkouts (Aikido) ...

- push.py _is_internal_or_metadata_host (#469089273): stopped splitting the host on
  ':' (which mangled every IPv6 literal, '::1' -> '', bypassing the block) and unwrap
  IPv4-mapped IPv6 (::ffff:a.b.c.d) so metadata/private checks apply. +6 unit tests.
- docker.yml + release-images.yml (#348463387/#348463388): persist-credentials:false on
  the actions/checkout steps that never push.

2026-08-10 08:36:27 +02:00

..

docker-testing.yml

ci(docker): harden the Testing docker workflow (daily security scan)

2026-08-09 08:46:02 +02:00

docker.yml

security: fix web-push IPv6 SSRF bypass + persist-credentials on CI checkouts (Aikido)

2026-08-10 08:36:27 +02:00

issue-validator.yml

release: v0.9.12.0 — monitoring expansion + perf + security hardening (#513)

2026-05-31 21:26:49 +02:00

pr-target-guard.yml

ci: auto-retarget external PRs opened against main onto Testing

2026-08-09 14:34:08 +02:00

release-images.yml

security: fix web-push IPv6 SSRF bypass + persist-credentials on CI checkouts (Aikido)

2026-08-10 08:36:27 +02:00

test.yml

ci: run tests in an isolated venv (fix ubuntu-24.04 zope namespace shadowing)

2026-07-13 10:24:28 +02:00