a6176341e2
Audit leak-hygiene findings: - The operator's real internal dev-VM/WireGuard IPs (10.10.90.136/.162/.165) were shipped in vite.config.js (hmr.host), lang hint/placeholder strings, a code comment and the CHANGELOG. vite HMR host is now env-driven (VITE_HMR_HOST, dev .env only); all other occurrences are replaced with RFC5737 documentation addresses (203.0.113.x). Tests updated in lockstep. - docs/ is export-ignored from the git tree and named in promote.sh's refuse-to-publish list, but was never .dockerignore'd, so `COPY . .` baked the private docs (with private host/URL refs) into the public image, which the git-tree leak-guard never inspects. Added docs/ (and art/) to .dockerignore. - /update.log (new repo-root update transcript) gitignored. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| Console/Commands | ||
| Events | ||
| Http | ||
| Jobs | ||
| Livewire | ||
| Models | ||
| Notifications | ||
| Providers | ||
| Rules | ||
| Services | ||
| Support | ||