Andras Bacsai bafb9a5a8b refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification ... - Auto-generate a 40-char random secret for each manual_webhook_secret_* column on Application creation so new apps are never left with an empty secret. - Add encrypted cast for the four webhook-secret columns; backfill migration re-encrypts existing plaintext values and fills missing ones. - Reject webhook deliveries when the stored secret is empty (GitHub, GitLab, Bitbucket, Gitea manual endpoints). - Bitbucket: require the sha256 algorithm prefix on X-Hub-Signature instead of trusting the client-supplied algo. - GitLab: drop the ?? '' fallback on the token comparison. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-04-19 12:52:23 +02:00
..
Browser	test: add dashboard test and improve browser test coverage	2026-02-11 16:37:40 +01:00
Feature	refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification	2026-04-19 12:52:23 +02:00
Traits	test: setup database for upcoming tests	2024-12-04 12:43:52 +01:00
Unit	fix(git): preserve ssh scheme URLs with custom ports (#9425)	2026-04-14 15:31:31 +02:00
v4	fix(models): replace forceFill/forceCreate with fill/create and add fillable guards	2026-03-31 13:45:31 +02:00
CreatesApplication.php	Fix styling	2024-06-10 20:43:34 +00:00
DuskTestCase.php	Refactor DuskTestCase.php to use a hardcoded base URL	2024-10-17 21:26:06 +02:00
Pest.php	test: add Pest browser testing with SQLite :memory: schema	2026-02-11 15:25:47 +01:00
TestCase.php	init of v4 🌮	2023-03-17 15:33:48 +01:00