-
Report git_sha in Multithreaded's health body
-
Fail the render when the CSRF token cannot be stored
-
multithreaded: add the deleted-threads surface so a deleted thread can come back
-
multithreaded: add restore as its own mod action
-
multithreaded: adopt lint block, fix clippy, fmt
-
multithreaded: bump tower-http, tower_governor, and governor
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: mt audit findings — health 503, SSRF img-proxy e2e, hardening
-
mt: proxy external Fan+ images, static template-500 fallback (ultra-fuzz M-UX1 + UX NOTE)
-
mt: stream image serves, rate-limit, segregate pools, bound governor (ultra-fuzz S1/Mi1/M-Pf1-3)
-
mt: seal resource-in-community behind CommunityScope (ultra-fuzz CHRONIC C1)
-
mt: stop trusting attacker-controlled X-Forwarded-For for rate limiting (ultra-fuzz C1)
-
OAuth maturation + HMAC method+path+nonce (close MT S13)
-
Ultra-fuzz Run #1 remediation: all axes to A-; bump 0.4.0
-
shared/pom-contract: schema-drift guard for /api/health producers
-
Multithreaded v0.3.5 + migration 026: Fan+ perks, signatures, refresh