ST_Consultancy/Davar
3
0
Fork 0
Code Issues Pull requests 1 Projects Releases 14 Packages Wiki Activity Actions
14 releases 14 tags
  • v0.1.13 66e11e6792

    v0.1.13
    All checks were successful
    CI / backend-test (push) Successful in 4m8s
    Details
    CI / webui-test (push) Successful in 1m19s
    Details
    Release / build-and-release (push) Successful in 1m11s
    Details
    Stable

    Ghost released this 2026-10-18 14:38:57 +02:00 | 97 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    Davar v0.1.13

    • Harden the browser UI: disable htmx script-tag/eval handling, and honor
      X-Forwarded-Proto: https from a loopback TLS-terminating proxy when setting
      the session cookie's Secure flag.
    • Bound the command-line event stream: a stalled SSE connection is cancelled
      after 90 seconds of silence (the daemon heartbeats every 20–30 seconds).
    • Cap Store.PutBlob at the 64 MiB MIME limit so no caller can write an
      unbounded blob.
    • Refactor the CLI: one resolveFolderRoute grammar drives dispatch and leaf
      help, account paths go through accountPath, and routine account/folder
      verbs are declared once and shared by dispatch, Cobra, and usage text.
    • Centralize account API path building in the REST handlers and web UI.
    • Run the Playwright web UI suite in Forgejo CI (with Go, Node, and Chromium),
      enforce a 65% total-coverage floor, and fix the suite's navigation-race
      teardown.
    • Add the code review report and clarify the original-styling CSS contract,
      userinfo URL handling, and folder unread shadowing behavior.
    • Refresh the AUR davar-bin package to v0.1.12 (now superseded by this
      release's assets).

    No breaking command or API changes. Linux amd64 and arm64 executables and
    SHA-256 checksums are attached. See README.md for commands and
    packaging/aur/davar-bin for Arch installation.

    Downloads