Matthew MeszarosandDevin AI 4d8cc01612 feat: verify pinned development image variants through the internal fleet version resolver ...

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-07 07:03:57 +00:00

..

join_token_test.go

feat: charge every password, emailed-code and TOTP attempt atomically before comparing it (Redis INCR+expire script) with a per-account TOTP budget across challenges, put the signed-in password change on the reauth budget, set the per-account login limit to 50 per hour, give tester passwords an expiry (users.password_expires_at, migration 000257) and clear them plus every session on revoke, mint warmblyctl reset links with the password-reset purpose, expire fleet join tokens (7 days default, 30 max, reusable inside the window), derive captcha from the resolved Turnstile secret, refuse weak bootstrap argon2id hashes, make registration codes single-use, rate-limit the v1 invitation lookup, and draw RIDs and user codes without modulo bias

2026-10-04 02:52:22 -07:00

service_test.go

feat: verify pinned development image variants through the internal fleet version resolver

2026-10-07 07:03:57 +00:00

service.go

feat: preserve database readiness failures and cancellation state and normalize pinned development fleet image variants

2026-10-07 07:02:49 +00:00