clawbot 1a642844ac Narrow the egress claims to non-public metadata addresses ...

The ALLOWED_EGRESS_CIDRS startup warning no longer calls the listed
blocks private/reserved, and says a public cloud metadata address such
as 168.63.129.16 is reachable once it, or a block covering it, is
listed. The README, the AllowedEgressCIDRs field comment and the
checkIP doc comment now say the allowlist cannot open metadata
endpoints at non-public addresses, not every metadata endpoint.

Model: opus-5-5

2026-09-29 07:54:14 +00:00

..

banner

Add a webhooker resetpw subcommand and a bootstrap banner (closes #208) (#239)

2026-08-20 08:01:42 +02:00

ciscript

Mark superseded commits honestly instead of skipped (closes #152)

2026-08-18 00:31:55 +02:00

config

Narrow the egress claims to non-public metadata addresses

2026-09-29 07:54:14 +00:00

database

Open each event database once when callers race (closes #291)

2026-09-29 04:37:30 +02:00

datadir

Consolidate the data directory mode into one owner (closes #288)

2026-09-21 10:01:51 +02:00

delivery

Narrow the egress claims to non-public metadata addresses

2026-09-29 07:54:14 +00:00

globals

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

gormlog

Log SQL with placeholders, never bound values (closes #207) (#222)

2026-08-20 07:20:59 +02:00

handlers

Say max_retries is the total attempt count, not a retry count (closes #316)

2026-09-21 18:33:09 +02:00

healthcheck

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

lifecycle

Set fx.StopTimeout inside the container stop grace (closes #134)

2026-08-18 00:12:51 +02:00

logfield

Route GORM's logger through slog and bound it (closes #178)

2026-08-18 07:17:43 +02:00

logger

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

metrics

Resubmit a stored event as a new undelivered event (closes #250)

2026-08-24 00:53:37 +02:00

middleware

Default WEBHOOKER_ENVIRONMENT to prod (closes #307)

2026-09-28 12:47:31 +02:00

reqtls

Default WEBHOOKER_ENVIRONMENT to prod (closes #307)

2026-09-28 12:47:31 +02:00

resetpw

Add an egress CIDR allowlist to the SSRF guard (closes #204) (#217)

2026-08-20 10:34:42 +02:00

server

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00

session

Default WEBHOOKER_ENVIRONMENT to prod (closes #307)

2026-09-28 12:47:31 +02:00

versionscript

Stamp the build version into the binary (closes #253)

2026-08-24 03:15:20 +02:00