Neil baa02c91e3 fix(relay): cap HTTP request bodies before they are buffered, including chunked ones (#36562) ...

* fix(relay): cap HTTP request bodies before they are buffered, including chunked ones

Every relay POST route checked only the Content-Length header before calling req.json(), so a chunked request with no Content-Length was buffered and parsed whole. /v1/resolve does that before any authentication. Enforce Hono's bodyLimit app-wide at RELAY_PROTOCOL_LIMITS.maxHttpBodyBytes (4 KiB, the limit every route already declares), with the cell reserve and demote routes keeping their own 16 KiB limit; push already does the same.

* test(relay): prove a 6 KiB reserve body reaches its route

2026-10-30 20:58:45 -07:00

..

connector

fix(cloud): patch relay, push and connector images to Node 24.22.2 and current Alpine fixes (#36560)

2026-10-30 20:53:22 -07:00

push

fix(cloud): patch relay, push and connector images to Node 24.22.2 and current Alpine fixes (#36560)

2026-10-30 20:53:22 -07:00

relay

fix(relay): cap HTTP request bodies before they are buffered, including chunked ones (#36562)

2026-10-30 20:58:45 -07:00

relay-fence-broker

test: trim redundant coverage and fix vacuous assertions (#32305)

2026-10-23 03:52:51 -07:00