fdd5c7a418
All checks were successful
build-and-release / build (developers) (push) Successful in 5m31s
build-and-release / build (catering-services) (push) Successful in 5m56s
build-and-release / build (employees) (push) Successful in 6m23s
build-and-release / build (companies) (push) Successful in 6m31s
build-and-release / build (cron) (push) Successful in 6m38s
build-and-release / build (customers) (push) Successful in 7m19s
build-and-release / build (gateway) (push) Successful in 1m28s
build-and-release / build (fitness-trainers) (push) Successful in 2m2s
build-and-release / build (jobs) (push) Successful in 1m12s
build-and-release / build (graphic-designers) (push) Successful in 2m20s
build-and-release / build (job-seekers) (push) Successful in 2m24s
build-and-release / build (photographers) (push) Successful in 2m20s
build-and-release / build (makeup-artists) (push) Successful in 2m55s
build-and-release / build (tutors) (push) Successful in 2m15s
build-and-release / build (payments) (push) Successful in 3m48s
build-and-release / build (ugc-content-creators) (push) Successful in 2m35s
build-and-release / build (social-media-managers) (push) Successful in 4m46s
build-and-release / build (video-editors) (push) Successful in 2m41s
build-and-release / build (users) (push) Successful in 8m7s
- Require admin role on role/module/permission management endpoints that previously accepted any authenticated user (privilege escalation) - Add server-side captcha generation/verification (Redis-backed, single-use, 5 min TTL) enforced on register/login for users and employees services - Untrack .env.test111 (contained a live SMTP key) and harden .gitignore against future .env commits - Stop logging OTP codes in plaintext - Restrict jobs service CORS to an explicit origin allowlist - Mask PayU merchant secret/salt in payment-gateway-config responses, preserving the stored value on save when the field is left unchanged - Bump vulnerable transitive dependencies (quinn-proto, rustls-webpki, anyhow) via cargo update; switch aws-sdk-s3 off the legacy rustls feature Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| activity_logs.rs | ||
| admin.rs | ||
| admin_ai.rs | ||
| admin_email.rs | ||
| ai.rs | ||
| ai_auto.rs | ||
| ai_credits.rs | ||
| ai_phase4.rs | ||
| ai_prompts.rs | ||
| approvals.rs | ||
| auth.rs | ||
| config.rs | ||
| coupons.rs | ||
| dashboard.rs | ||
| external_roles.rs | ||
| internal.rs | ||
| kb.rs | ||
| mod.rs | ||
| modules.rs | ||
| notifications.rs | ||
| onboarding.rs | ||
| payment_gateway.rs | ||
| permissions.rs | ||
| pricing.rs | ||
| profile.rs | ||
| reviews.rs | ||
| role_meta.rs | ||
| roles.rs | ||
| settings.rs | ||
| support.rs | ||
| user_roles.rs | ||
| verifications.rs | ||