3 Commits

Include renames

Author	SHA1	Message	Date
whyour	15d54866a8	feat: migrate SQLite runtime and verify complete upgrade bundles ... Use MikroORM's official Node SQLite dialect with bounded database isolation, preserve legacy schema and data for rollback, and require Node 22.17 or newer. Update Debian runtimes and retain ARMv6 musl compatibility without a SQLite addon. Complete short archive writes, stop orphaned SQL workers after owner death, preserve buffered startup requests, and prestart the archived backend on every platform. Cover real package installation, migration, failure recovery, and legacy database compatibility. Keep authentication storage failures distinct from expired sessions with a pinned Keyv runtime, propagated cache errors, and retryable HTTP 503 responses. Preserve genuine 401 failures and verify legacy cache bytes, initialization safety, and session recovery.	2026-10-22 13:47:26 +08:00
whyour	2cab112391	fix: 加固安全输入边界并修复订阅兼容性 (#3084) ... * fix: harden scoped API inputs and isolate login throttling * fix: close script path gaps and harden security boundaries * fix: preserve subscription aliases and avoid extension eval * fix: allow cancelling invalid historical subscriptions * fix: make script parent validation explicit for CodeQL * fix: limit command execution and clarify trusted path branches * fix: separate diff tool script access from config APIs * fix: clean up obsolete subscription SSH credentials	2026-10-06 18:21:54 +08:00
whyour	4df52094f2	fix: harden authentication and file access security	2026-09-05 18:19:01 +08:00