1735 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	2a14b551c3	fix(ci): härdat security-workflow	2026-11-10 18:22:25 +00:00
admin	774601c674	fix(ci): gitleaks blockerar pa arbetstradet, historik loggas informativt	2026-11-10 18:50:54 +01:00
admin	bd84389461	fix(ci): härdat security-workflow	2026-11-10 16:58:12 +00:00
admin	979b3841be	fix(ci): härdat security-workflow - pinnade scannrar, volym och bara fynd blockerar	2026-11-10 17:19:58 +01:00
admin	04dad01309	chore(ci): ta bort GitHub Actions-duplicat (SEC-25) ... Gitea Actions (.gitea/workflows) är kanoniskt CI i SIAX. Kvarvarande .github-filer (mallar, dependabot) behålls.	2026-11-10 11:15:03 +01:00
admin	355c1bd133	docs(production): standardiserad produktionsberedskap och gap-analys (2026-11-11)	2026-11-10 11:09:53 +01:00
admin	8fb8940482	docs(runbook): bevisa återställning av källkod från Gitea (DOC-07) ... Källkodsklon från git.siax.io verifierad mot publicerad gren (trädhash identisk). Dataåterställning (databaser/volymer) påstås inte här.	2026-11-10 11:09:46 +01:00
admin	60d455bf93	docs: lägg till README med härledd repoöversikt (DOC-01) ... Första version genererad ur repots egna filer; TODO-punkter kvar för människa.	2026-11-10 11:08:03 +01:00
admin	e7f0070e84	fix(restore): återställ default branch-filer som raderades av docs-publiceringen (7e33543) ... Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.	2026-11-10 09:37:22 +01:00
Claude Code	077251ac94	chore(doctor): undanta verifierade github.com-citat i REPO-01 ... Filerna namnger github.com som beskrivande referens (tredjepartskallor, historiska arkiv-/spegelremotes, mirror-deklarationer) - inte som Git-remote, beroende eller hamtmal. Ingen omskrivning av innehallet: det vore att andra sakliga fakta. REPO-01:s harda gren (github.com-remote i .git/config) undantas inte.	2026-11-10 09:32:07 +01:00
siax-bot	7e33543ca4	Merge pull request 'docs(production): standardiserad produktionsberedskap och gap-analys' (#29) from docs/prod-readiness-siax-20261111 into main	2026-11-10 08:19:19 +00:00
admin	2bee8eb778	docs(production): standardiserad produktionsberedskap och gap-analys ... Lägger docs/production-readiness.md och siax/production-gaps.json enligt SIAX Master Definition of Done. Underlag: git-, kod- och live-evidens 2026-11-11. Nivån är evidensbaserad, inte ett leveransgodkännande.	2026-11-10 09:15:21 +01:00
admin	0fda8cae48	docs(status): standardiserad STATUS.md (mekaniskt verifierad)	2026-11-10 01:35:28 +01:00
Claude Code	1ae17045e7	chore: adopt SIAX Golden Standard docs and configuration ... siax-scaffold genererade saknade standardartefakter (arkitektur, säkerhet, ändringslogg, runbooks, CI, devcontainer, licens m.m.) ur repots faktiska filer. DOC-07 lämnas avsiktligt röd till en verklig restore bevisats.	2026-11-10 00:55:05 +01:00
admin	aaf8f0baab	Merge pull request 'docs(production): standardiserad produktionsberedskap och gap-analys' (#24) from docs/prod-readiness-siax-20261109 into main	2026-11-09 23:01:40 +00:00
admin	b3003f8a65	docs(production): standardiserad produktionsberedskap och gap-analys ... Lägger docs/production-readiness.md och siax/production-gaps.json enligt SIAX Master Definition of Done. Underlag: git-, kod- och live-evidens 2026-11-09. Nivån är evidensbaserad, inte ett leveransgodkännande.	2026-11-09 23:58:28 +01:00
admin	7ef174a478	Merge pull request 'chore(ui): document upstream/legacy component exceptions' (#23) from feat/component-allowlist-20261105 into main	2026-11-05 21:59:01 +00:00
Claude Code	9a3de47b81	chore(ui): document upstream/legacy component exceptions	2026-11-05 22:57:30 +01:00
SIAX Provenance	ca226cce2f	fix(recovery): use the schema-valid 30d retention in accounted's backup record	2026-11-04 03:48:37 +01:00
SIAX Provenance	16a69a0fb9	chore(recovery): record the accounted backup policy and repo restore drill ... Fresh clone restore drill of the canonical Gitea repo (1.8s) and the fleet nightly backup record. This is repo/config restore evidence; it does not claim a database restore.	2026-11-04 03:27:17 +01:00
siax-bot	39c0f75f89	Merge pull request 'fix(deps): next 16.4.1/15.5.28 (GHSA-2464-fhr4-w9xw CRITICAL RCE)' (#20) from fix/next-16.4.1-20261031 into main	2026-10-31 16:53:43 +00:00
admin	d7253f1b77	fix(deps): next 16.4.1 (GHSA-2464-fhr4-w9xw CRITICAL RCE)	2026-10-31 17:51:51 +01:00
siax-bot	49e939f1df	Merge pull request 'fix(deps): patch HIGH/CRITICAL advisories' (#19) from fix/cve-lockfile-2026-09-30 into main ... merge PR #19	2026-10-01 15:52:10 +00:00
Claude CodeandClaude Sonnet 5.5	ddc4cce3eb	fix(deps): next 16.3.3 -> 16.3.6 (GHSA-vcvr-r3jv-pc5j, CRITICAL) ... Remote code execution in next/og ImageResponse, fixed in 16.3.6. Same minor line; the exact pin in package.json moves too and the lockfile follows (next, @next/env, @next/swc-* platform binaries, sharp optional range ^0.35.4). Not fixed here (need a direct-dependency major bump or have no fix): - nodemailer 9.1.1: GHSA-prgh-xp8r-p3m5 / GHSA-v53p-9fqp-m79j fixed only in 10.0.5/10.0.6 (major) - xlsx 0.20.3: GHSA-4r6h-8v6p-xvw6 / GHSA-5pgg-2g8v-p4x9 have no published fix Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-09-30 18:50:50 +02:00
Claude CodeandClaude Sonnet 5.5	0250b4bab2	fix(deps): patch HIGH/CRITICAL advisories ... Lockfile-level update of the packages trivy flags on main, all within their current major: - next 16.3.1 -> 16.3.3 (CVE-2026-75604, CRITICAL) - js-yaml 4.3.1 -> 4.3.2 (CVE-2026-84375) - nodemailer 9.0.5 -> 9.1.1 (GHSA-2x7j-588g-ccc2, GHSA-8m3c-c648-2xjj) - sharp 0.35.3 -> 0.35.5 (GHSA-rgj7-g3m4-5g8c) - undici 6.28.0 -> 6.29.0 (CVE-2026-19534) - brace-expansion -> 1.1.21 / 2.1.7 (CVE-2026-102276, CVE-2026-102278, dev) - minimatch 9.0.5 -> 9.0.9 (CVE-2026-26996/27903/27904, dev) next, js-yaml and nodemailer were exact-pinned, so their pins move too. PINNED_DEPS in the antipattern guard follows nodemailer to 9.1.1; without it the pinned-dep guard fails. Remaining: nodemailer GHSA-v53p-9fqp-m79j is only fixed in 10.x (major bump of a direct dependency, left for a separate reviewed change). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-09-30 17:17:51 +02:00
admin	23f99f94b9	Merge pull request 'fix(pay): PSP-deklaration (Stripe — kodverifierad)' (#18) from fix/pay-consumer-2026-09-29 into main	2026-09-29 22:28:03 +00:00
siax-bot	4269404a2c	fix(pay): payment-consumer-deklaration med äkta PSP-SDK-scope (Stripe webhook/checkout/connect/sync — kodverifierat)	2026-09-30 00:23:36 +02:00
admin	91f17af5c8	Merge pull request 'chore(ci): koppla in SonarQube-analys mot självhostad sonar.siax.io' (#16) from chore/sonarqube-analysis into main	2026-09-28 10:03:14 +00:00
Claude CodeandClaude Sonnet 5	73d24a81cc	chore(ci): koppla in SonarQube-analys mot självhostad sonar.siax.io ... accounted: ny sonar-job i .gitea/workflows/ci.yml (endast push mot main) plus sonar-project.properties. SONAR_TOKEN-secreten sätts INTE av denna commit -- kräver manuell körning, se PR-beskrivningen. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-28 00:58:42 +02:00
admin	b3c8d88f0d	Merge pull request 'ci: add missing timeout-minutes and concurrency guards' (#15) from ci/timeout-and-concurrency-guards into main	2026-09-27 02:31:24 +00:00
Claude CodeandClaude Sonnet 5	f687158138	fix(ci): add timeout-minutes and concurrency guard to masterplan-lock ... Fleet-wide CI-speed pass: masterplan-lock.yml had no job-level timeout-minutes (a hung runner could block indefinitely) and triggers on both push (branches: ["**"]) and pull_request, which runs the same check twice per PR commit. Add a 10-minute timeout for this cheap single-check job and a concurrency group (matching the pattern already used in admin/serv0, admin/s0cial, admin/ppl0, admin/pers0n) to cancel the superseded duplicate run without changing what triggers CI. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-27 04:30:47 +02:00
admin	9228896b62	Merge pull request 'fix(worklist): skattekonto count-test tidsbomb (förfallodatum passerat)' (#14) from fix/skattekonto-count-timebomb into main	2026-09-24 13:17:33 +00:00
Claude Code	5d9b220fa8	fix(worklist): countSkattekontoPaymentDue accepts today — test time-bomb (due date 2026-09-12 expired vs wall clock)	2026-09-24 15:16:46 +02:00
admin	e0d2923d4c	Merge pull request 'fix(ci): use internal pinned action mirrors' (#13) from fix/internal-action-mirrors into main	2026-09-24 12:43:19 +00:00
Claude Code	a909043176	fix(ci): use internal pinned action mirrors (github.com egress flaky from runners)	2026-09-24 14:42:40 +02:00
admin	e60f2af6cd	Merge pull request 'chore(deps): update dependency mailparser to v3.9.28' (#11) from renovate/mailparser-3.x-lockfile into main	2026-09-24 12:11:19 +00:00
admin	c90ccc9c42	Merge branch 'main' into renovate/mailparser-3.x-lockfile	2026-09-24 12:11:15 +00:00
admin	7b0e59257e	Merge pull request 'chore(deps): update dependency vitest to v4.1.11' (#12) from renovate/vitest-monorepo into main	2026-09-24 12:11:12 +00:00
Renovate	14e6aead84	chore(deps): update dependency vitest to v4.1.11	2026-09-24 03:08:10 +00:00
Renovate	4986cfe27b	chore(deps): update dependency mailparser to v3.9.28	2026-09-24 03:07:58 +00:00
Claude Code	48c762f7e0	feat(estate): härlett siax.repo.v3.json (estate-manifest-gen v0) ... Tekniska fält härledda ur checkouten (runtime, gitHost/canonicalRemote, neutrala persistence/observability/reliability — aldrig påstådda). POLICY-FÄLT (tier/category/appId) är neutral-baseline MED appIdJustification som säger att ägaren ska sätta dem (D4) — förgranska och korrigera.	2026-09-24 01:22:27 +02:00
admin	2046ef4089	Merge pull request 'chore(deps): update dependency eslint to v9.39.5' (#8) from renovate/eslint-monorepo into main ... Reviewed-on: sax3l/accounted#8	2026-09-23 21:22:05 +00:00
admin	66e65390c2	Merge branch 'main' into renovate/eslint-monorepo	2026-09-23 21:21:55 +00:00
admin	ac88b1a6a0	Merge pull request 'chore(deps): update dependency jszip to v3.10.2' (#9) from renovate/jszip-3.x-lockfile into main	2026-09-23 21:20:07 +00:00
Renovate	592cfd1ed7	chore(deps): update dependency jszip to v3.10.2	2026-09-23 03:05:16 +00:00
Renovate	3299eeec47	chore(deps): update dependency eslint to v9.39.5	2026-09-23 03:05:13 +00:00
admin	e1484e74f9	Merge pull request 'fix(deps): replace dependency framer-motion with motion' (#4) from renovate/framer-motion-replacement into main	2026-09-22 11:00:36 +00:00
admin	dd1c05f114	Merge branch 'main' into renovate/framer-motion-replacement	2026-09-22 10:20:19 +00:00
admin	5f2df18abe	Merge pull request 'chore(deps): update dependency @supabase/ssr to v0.12.7' (#5) from renovate/supabase-ssr-0.x-lockfile into main	2026-09-22 10:20:18 +00:00
admin	8e8c8f66a4	Merge branch 'main' into renovate/supabase-ssr-0.x-lockfile	2026-09-22 10:20:04 +00:00