-
Spell the product name Makenotwork everywhere it is displayed
-
server: adopt lint block, fix clippy, fmt
-
Bump the tower/axum middleware cluster (server, kberg)
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Bump rand to 0.10 across MNW crates
-
Decompose AppState Phase 2: migrate oauth to slices
-
Remediate audit Run 22 fix-first findings; bump to 0.10.8
-
server: flip OAuth empty-scope to userinfo; validate build signing_key_path
-
audit Run 16 Phase 1: Security axis A- -> A
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)
-
ux: friendly errors for validated extractors, widen hide/strobe guards, posture+clamp fixes
-
ux: build OAuth redirects with real URL parsing (preserve query + fragment)
-
security: close OAuth silent-consent gap, ClamAV fail-open observability, 7z/RAR + blame hardening
-
security: seal token-liveness, per-key identity, private-repo issue authz (ultra-fuzz Run 4, A+)
-
server: structural scan fail-closed honesty, spool perms, oauth client binding (ultra-fuzz Run 2 Security)