clawbot

clawbot commented on pull request sneak/webhooker#532

2026-10-15 11:07:33 +02:00

Leave a delivery cut off by a stop for the next start

README.md lines 1320-1321 and 1335 (Rationale, items 2 and 3): "Every delivery attempt is logged with status codes, response bodies, and timing" and "Full request/response logging for ...…

clawbot pushed to issue-530-csp-no-unsafe-inline at sneak/webhooker

2026-10-15 11:07:02 +02:00

08143ed5d8 Drop 'unsafe-inline' from the Content-Security-Policy (closes #530)

clawbot created branch issue-530-csp-no-unsafe-inline in sneak/webhooker

2026-10-15 11:07:02 +02:00

clawbot commented on pull request sneak/webhooker#533

2026-10-15 11:05:08 +02:00

Store delivery and archive times without the monotonic clock reading

Review passed.

Model: opus-5-5

clawbot pushed to issue-242-default-concurrency at sneak/pixa

2026-10-15 11:05:03 +02:00

198f92a5f8 Test that max_concurrent_processing defaults to half the CPUs

clawbot pushed to issue-242-default-concurrency at sneak/pixa

2026-10-15 11:04:42 +02:00

5c795429b8 Test that an invalid PIXA_MAX_CONCURRENT_PROCESSING aborts startup

5d1e3ea871 Escape : and % in the signed and cached path and query (closes #247)

761ade2e36 Accept a chunked upstream body of exactly the maximum size (closes #248)

88e1b1cdfa Allowlist no host in the example config (closes #249)

Compare 4 commits »

clawbot commented on pull request sneak/secret#191

2026-10-15 11:04:35 +02:00

Log the audit fixes in TODO.md

Before review: rebase onto the current next; check every Completed Steps entry against its landing commit in git log v1.0.0-rc2..v1.0.0-rc3 (one entry per landing commit, none missing, none…

clawbot commented on issue sneak/secret#131

2026-10-15 11:04:20 +02:00

Finish 1.0 and tag it; after that, bugfixes only

v1.0.0-rc3 is tagged on next at 4c47b23: a release candidate with no known open bugs (https://git.eeqj.de/sneak/secret/src/tag/v1.0.0-rc3).

Fixed since v1.0.0-rc2, one reviewed PR each:…

clawbot pushed tag v1.0.0-rc3 to sneak/secret

2026-10-15 11:04:10 +02:00

clawbot pushed to issue-254-metrics-route-pattern at sneak/pixa

2026-10-15 11:01:44 +02:00

8ac9738850 Label request metrics by route, not by path (closes #254)

1ae5349d67 Test that metrics label requests by route, not path

5d1e3ea871 Escape : and % in the signed and cached path and query (closes #247)

761ade2e36 Accept a chunked upstream body of exactly the maximum size (closes #248)

88e1b1cdfa Allowlist no host in the example config (closes #249)

Compare 5 commits »

clawbot commented on issue sneak/pixa#242

2026-10-15 10:58:05 +02:00

Memory per image and the default number of images processed at once are not bounded or documented for the container

Plan after sneak's ruling (sneak/pixa#242 (comment)), replacing the cap of 4 in sneak/pixa#261:

The default `max_concurrent_process…

clawbot commented on issue sneak/pixa#253

2026-10-15 10:56:28 +02:00

A source whose first bytes do not match its Content-Type answers 500 and is fetched again on every request

Question: may one case of the existing test TestService_Get_ConcurrentMissesShareAFailure (internal/imgcache/concurrent_misses_internal_test.go) change? CLAUDE.md needs your approval to…

clawbot commented on pull request sneak/pixa#262

2026-10-15 10:54:17 +02:00

Remove expired negative cache rows in the eviction loop (closes #244)

TestCleanExpiredRemovesMoreThanOneBatch stores 1001 expired rows, calls only CleanExpired and wants none left. It fails when CleanExpired returns after its first batch.

The rebase onto…

clawbot pushed to issue-244-clean-expired-negative-cache at sneak/pixa

2026-10-15 10:53:59 +02:00

58da57ca49 Test that CleanExpired removes more than one batch of expired rows

98bce3bb1a Delete expired negative cache rows in batches

01434ecf3b Test that expired negative cache rows are deleted in batches

88fe5c6fed Remove expired negative cache rows in the eviction loop (closes #244)

fe33fc16c7 Test that the eviction loop removes expired negative cache rows

Compare 7 commits »

clawbot opened issue sneak/webhooker#535

2026-10-15 10:49:38 +02:00

A comment in the middleware says the query logger writes client values into statements; it drops them

clawbot commented on pull request sneak/secret#190

2026-10-15 10:49:13 +02:00

A secret mv between vaults unlocks both vaults before taking the lock

Both findings were length only; the PR body and the landing commit were cut to length at merge.

Model: opus-5-5

clawbot deleted branch fix/189-mv-unlock-before-lock from sneak/secret

2026-10-15 10:49:09 +02:00

clawbot pushed to next at sneak/secret

2026-10-15 10:49:09 +02:00

4c47b233bb A secret mv between vaults unlocks both vaults before taking the lock (closes #189)

clawbot merged pull request sneak/secret#190

2026-10-15 10:49:07 +02:00

A secret mv between vaults unlocks both vaults before taking the lock

clawbot closed issue sneak/secret#189

2026-10-15 10:49:07 +02:00

A secret mv between vaults asks for the passphrase while holding the state directory lock