aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2025-02-28wasm: basic String operationsXe Iaso3-0/+28
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-28wasm: split out host-specific bitsXe Iaso2-14/+41
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-28build(deps): bump github.com/goccy/go-json from 0.10.2 to 0.10.5 (#682)dependabot[bot]2-2/+3
Bumps [github.com/goccy/go-json](https://github.com/goccy/go-json) from 0.10.2 to 0.10.5. - [Release notes](https://github.com/goccy/go-json/releases) - [Changelog](https://github.com/goccy/go-json/blob/master/CHANGELOG.md) - [Commits](https://github.com/goccy/go-json/compare/v0.10.2...v0.10.5) --- updated-dependencies: - dependency-name: github.com/goccy/go-json dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-27build(deps): bump github.com/gen2brain/avif from 0.3.1 to 0.4.3 (#680)dependabot[bot]2-3/+3
Bumps [github.com/gen2brain/avif](https://github.com/gen2brain/avif) from 0.3.1 to 0.4.3. - [Commits](https://github.com/gen2brain/avif/compare/v0.3.1...v0.4.3) --- updated-dependencies: - dependency-name: github.com/gen2brain/avif dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-26build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#679)dependabot[bot]2-30/+30
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) from 1.17.59 to 1.17.60. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.17.59...credentials/v1.17.60) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-25build(deps): bump golang.org/x/image from 0.23.0 to 0.24.0 (#678)dependabot[bot]2-3/+3
Bumps [golang.org/x/image](https://github.com/golang/image) from 0.23.0 to 0.24.0. - [Commits](https://github.com/golang/image/compare/v0.23.0...v0.24.0) --- updated-dependencies: - dependency-name: golang.org/x/image dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 (#677)dependabot[bot]2-3/+3
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.2 to 4.0.5. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24build(deps): bump github.com/gen2brain/jpegxl from 0.3.0 to 0.4.4 (#676)dependabot[bot]2-12/+8
Bumps [github.com/gen2brain/jpegxl](https://github.com/gen2brain/jpegxl) from 0.3.0 to 0.4.4. - [Commits](https://github.com/gen2brain/jpegxl/compare/v0.3.0...v0.4.4) --- updated-dependencies: - dependency-name: github.com/gen2brain/jpegxl dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-21valid: fix test namev1.12.0Xe Iaso1-1/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-21wasm: introduce new package for host->guest buffer passingXe Iaso4-4/+65
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-21kube/alrest: harden against upcoming docker hub changesXe Iaso5-4/+66
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14cmd/anubis: cache DNSBL hits in a DecayMapXe Iaso2-12/+84
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14kube/alrest/pocket-id: updateXe Iaso1-1/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14cmd/anubis: enable DNSBL checking via droneblXe Iaso9-31/+254
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14kube: fixesXe Iaso36-6/+384
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14Earthfile: bump to go 1.24Xe Iaso10-37/+60
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-11tigris: UsePathStyle = falseXe Iaso1-0/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-10build(deps): bump github.com/a-h/templ from 0.3.819 to 0.3.833 (#674)dependabot[bot]2-3/+3
Bumps [github.com/a-h/templ](https://github.com/a-h/templ) from 0.3.819 to 0.3.833. - [Release notes](https://github.com/a-h/templ/releases) - [Changelog](https://github.com/a-h/templ/blob/main/.goreleaser.yaml) - [Commits](https://github.com/a-h/templ/compare/v0.3.819...v0.3.833) --- updated-dependencies: - dependency-name: github.com/a-h/templ dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-07build(deps): bump golang.org/x/tools from 0.24.0 to 0.29.0 (#673)dependabot[bot]2-6/+6
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.24.0 to 0.29.0. - [Release notes](https://github.com/golang/tools/releases) - [Commits](https://github.com/golang/tools/compare/v0.24.0...v0.29.0) --- updated-dependencies: - dependency-name: golang.org/x/tools dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-07build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#672)dependabot[bot]2-27/+27
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) from 1.17.55 to 1.17.59. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.17.55...credentials/v1.17.59) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-06build(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.4.0 (#671)dependabot[bot]2-3/+3
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) from 1.3.10 to 1.4.0. - [Release notes](https://github.com/etcd-io/bbolt/releases) - [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.10...v1.4.0) --- updated-dependencies: - dependency-name: go.etcd.io/bbolt dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-05build(deps): bump github.com/prometheus/client_golang (#670)dependabot[bot]2-6/+9
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.19.1 to 1.20.5. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.19.1...v1.20.5) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-04build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.34.0 to 1.36.0 (#669)dependabot[bot]2-3/+3
Bumps [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) from 1.34.0 to 1.36.0. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.34.0...v1.36.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-03add motortown filesXe Iaso10-0/+888
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-03build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.24 (#668)dependabot[bot]2-3/+3
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.22 to 1.14.24. - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.22...v1.14.24) --- updated-dependencies: - dependency-name: github.com/mattn/go-sqlite3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-31build(deps): bump github.com/tetratelabs/wazero from 1.7.2 to 1.8.2 (#667)dependabot[bot]2-3/+3
Bumps [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) from 1.7.2 to 1.8.2. - [Release notes](https://github.com/tetratelabs/wazero/releases) - [Commits](https://github.com/tetratelabs/wazero/compare/v1.7.2...v1.8.2) --- updated-dependencies: - dependency-name: github.com/tetratelabs/wazero dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-30build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.4 (#666)dependabot[bot]2-3/+3
Bumps google.golang.org/protobuf from 1.35.2 to 1.36.4. --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-29build(deps): bump github.com/goreleaser/nfpm/v2 from 2.37.1 to 2.41.2 (#665)dependabot[bot]2-51/+35
Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.37.1 to 2.41.2. - [Release notes](https://github.com/goreleaser/nfpm/releases) - [Changelog](https://github.com/goreleaser/nfpm/blob/main/.goreleaser.yml) - [Commits](https://github.com/goreleaser/nfpm/compare/v2.37.1...v2.41.2) --- updated-dependencies: - dependency-name: github.com/goreleaser/nfpm/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-28build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#664)dependabot[bot]2-33/+33
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) from 1.17.18 to 1.17.55. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.17.18...credentials/v1.17.55) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-27build(deps): bump github.com/ipfs/go-cid from 0.4.1 to 0.5.0 (#663)dependabot[bot]2-3/+3
Bumps [github.com/ipfs/go-cid](https://github.com/ipfs/go-cid) from 0.4.1 to 0.5.0. - [Release notes](https://github.com/ipfs/go-cid/releases) - [Commits](https://github.com/ipfs/go-cid/compare/v0.4.1...v0.5.0) --- updated-dependencies: - dependency-name: github.com/ipfs/go-cid dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-27build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 (#662)dependabot[bot]2-11/+11
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.34.0. - [Commits](https://github.com/golang/net/compare/v0.33.0...v0.34.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-26Create SECURITY.mdXe Iaso1-0/+9
2025-01-26cmd/anubis: forbid bypassing auth by faking the challenge difficultyXe Iaso7-22/+6
This fixes a trivial auth bypass where a user requests a challenge, formulates any nonce they want (such as 42069), and then passes the challenge with difficulty zero. This was fixed by not using the difficulity the client specified and instead using the fixed difficulty at the server level. The difficulty has also been encoded into the challenge in 7bd7b209f4f1. Thanks to Coral Pink for finding this and reporting it over email. Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-26cmd/anubis: bake difficulty into challengeXe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-26cmd/anubis: ship sourcemapsXe Iaso6-1/+9
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-26cmd/anubis: disable video test for nowXe Iaso5-11/+12
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-25cmd/anubis: prepare for more efficient servingXe Iaso4-1/+32
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-25cmd/anubis: minify JS, add video element testXe Iaso8-108/+145
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-25make simpleapp helm templateXe Iaso12-9/+407
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24cmd/anubis: document POLICY_FNAMEXe Iaso1-7/+8
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24cmd/anubis: add rudimentary bot policy supportXe Iaso7-50/+422
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24xess: give minified version in prod, but not in developmentXe Iaso1-2/+8
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24cmd/anubis: don't include Accept-Encoding in challengeXe Iaso2-3/+7
Browsers are known to change the Accept-Encoding header based on what media type is being accepted. I kinda hate this too, but such is life. Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24kube: add ellenjoe configXe Iaso4-0/+85
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24kube/alrest/pocket-id: version bumpXe Iaso1-1/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24build(deps): bump google.golang.org/grpc from 1.64.1 to 1.70.0 (#660)dependabot[bot]2-18/+22
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.1 to 1.70.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.64.1...v1.70.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-23kube/alrest/pocket-id: set proxy buffers according to upstream adviceXe Iaso1-0/+3
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-23build(deps): bump gorm.io/gorm from 1.25.10 to 1.25.12 (#659)dependabot[bot]2-3/+3
Bumps [gorm.io/gorm](https://github.com/go-gorm/gorm) from 1.25.10 to 1.25.12. - [Release notes](https://github.com/go-gorm/gorm/releases) - [Commits](https://github.com/go-gorm/gorm/compare/v1.25.10...v1.25.12) --- updated-dependencies: - dependency-name: gorm.io/gorm dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-22kube/aeacus/headscale: less yoloXe Iaso1-4/+0
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-22kube/aeacus/headscale: bump to 0.24.xXe Iaso1-1/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-05 13:42:36 +0000