boban 3a67aa99ec fix(auth): rotate remember_token on reset + atomic recovery-code use ... Address Codex security review: - ForgotPassword + clusev:reset-admin now rotate remember_token, so a stolen remember-me cookie cannot survive a password reset (the email-token path already did this). - useRecoveryCode reads/checks/removes under a row lock (DB transaction + lockForUpdate), so two concurrent requests can't both spend the same one-time code (replay). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 17:04:12 +02:00
..
Console/Commands	fix(auth): rotate remember_token on reset + atomic recovery-code use	2026-06-14 17:04:12 +02:00
Events	fix(blade): garbled header on every signed-in page + private metrics channel (v0.4.1)	2026-06-14 08:34:07 +02:00
Http	fix(i18n): localize error pages thrown before SetLocale middleware	2026-06-14 15:32:20 +02:00
Jobs	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
Livewire	fix(auth): rotate remember_token on reset + atomic recovery-code use	2026-06-14 17:04:12 +02:00
Models	fix(auth): rotate remember_token on reset + atomic recovery-code use	2026-06-14 17:04:12 +02:00
Providers	feat(domain): change the panel domain from the dashboard (v0.4.0)	2026-06-14 01:38:16 +02:00
Services	fix(ssh): require an exec marker in the connection probe	2026-06-14 10:46:59 +02:00
Support	i18n: complete DE/EN localization (modals, shell, backend) + v0.3.0	2026-06-13 23:27:42 +02:00