nexxo 99b7393361 Stop committing a real password, and say the truth about what carried over ... MailboxSeedMigrationTest.php had the actual .env MAIL_PASSWORD for no-reply@clupilot.com hard-coded into a test fixture — replaced with an obvious dummy. Grepped the whole branch (576cfca..HEAD) and the working tree for that string and for every other real secret value in .env; nothing else leaked. Separately, the seed migration's SECRETS_KEY-missing warning claimed a password "was NOT copied into the mailbox table" even when a vault row already existed and its ciphertext WAS carried across a few lines below, unconditionally on $canEncrypt. An operator debugging a live mail outage would have been sent to re-enter a password that was already sitting in the column. The warning now distinguishes the two cases and says which one actually happened.		2026-07-28 03:49:37 +02:00
..
Feature	Stop committing a real password, and say the truth about what carried over	2026-07-28 03:49:37 +02:00
Support	Prove a mailbox works by actually sending from it	2026-07-28 02:56:47 +02:00
Unit	Make the console's access list reach the proxy, price in euros, and answer errors	2026-07-27 06:51:05 +02:00
Pest.php	Move the one SMTP account into the mailbox table it outgrew	2026-07-28 00:24:54 +02:00
TestCase.php	test: do not reach for Redis from the provisioning queue	2026-07-26 02:20:46 +02:00