Changelog
7c12b59 Merge pull request 'Release v0.11.0' (#454) from release/v0.11.0 into main
b4e72ad Release v0.11.0
f7ff8ee Merge pull request 'fix(justfile): run create-release cargo lock-sync in docker' (#453) from fix/BUNYIP-456-create-release-docker-cargo into main
a0396ef fix(justfile): run create-release cargo lock-sync in docker
4bdcdbf Merge pull request 'chore(deps): collapse the dunite pins onto one merged rev (DEV-495)' (#452) from chore/DEV-495-repin-dunite-merged-revs into main
fc3a2e7 chore(deps): collapse the dunite pins onto one merged rev (DEV-495)
9e8cb9b Merge pull request 'refactor(models): consume dunite-user-core for the account vocabulary (DEV-517)' (#451) from feat/DEV-517-consume-user-core into main
c6ad1c1 refactor(models): consume dunite-user-core for the account vocabulary (DEV-517)
c923d39 Merge pull request 'refactor(stripe): consume dunite-stripe StripeService (DEV-515 pt 2)' (#450) from feat/DEV-515-consume-stripe-service into main
6e54f98 Merge remote-tracking branch 'origin/main' into feat/DEV-515-consume-stripe-service
5ac8fbc refactor(api): map StripeServiceError at the handler call sites (DEV-515 pt 2)
5d88783 refactor(stripe): consume dunite-stripe StripeService (DEV-515 pt 2)
91a3212 Merge pull request 'feat(web): mask secrets/codes by default with an explicit reveal (BUNYIP-371)' (#449) from feat/BUNYIP-371-mask-secrets-screenshare into main
bf2cdf7 fix(web): address BUNYIP-371 review - stronger blur, no-JS reveal, layout
19a23ed docs(web): index the sensitive-reveal handler in the app.js header
8e0d2e7 feat(web): mask secrets/codes by default with an explicit reveal
73ff349 Merge pull request 'docs(e2e): document the TOTP secret invariant + mismatch recovery (BUNYIP-454)' (#448) from docs/BUNYIP-454-e2e-totp-invariant into main
24c8a60 docs(e2e): document the TOTP secret invariant + mismatch recovery
67d0c1a Merge pull request 'refactor(stripe): consume dunite-stripe response DTOs (DEV-515 pt 1)' (#447) from feat/DEV-515-consume-stripe-dtos into main
a800234 Merge remote-tracking branch 'origin/main' into feat/DEV-515-consume-stripe-dtos
34de435 Merge pull request 'fix(e2e): recover the 2FA single-use collision instead of re-submitting (BUNYIP-453)' (#446) from fix/BUNYIP-453-totp-fill-collision-retry into main
64404c1 refactor(stripe): consume dunite-stripe response DTOs (DEV-515 pt 1)
4b80cd7 Merge pull request 'feat(admin): Stripe webhook-endpoint management UI (DEV-518)' (#445) from feat/DEV-518-webhook-endpoint-ui into main
de6291e fix(e2e): recover the 2FA single-use collision instead of re-submitting
675bd68 Merge pull request 'refactor(feedback): consume dunite-feedback (DEV-516)' (#444) from feat/DEV-516-consume-feedback into main
7fd82e0 feat(admin): Stripe webhook-endpoint management UI in bunyip-web (DEV-518)
6765caa refactor(feedback): consume dunite-feedback shared crate (DEV-516)
92cdd11 Merge pull request 'refactor(stripe): consume dunite-stripe-core (DEV-514)' (#443) from feat/DEV-514-consume-stripe-core into main
61e6b7b refactor(stripe): consume dunite-stripe-core for webhook verification (DEV-514)
2f032d9 Merge pull request 'test(e2e): give magic-link.spec the 3x timeout its mail retry needs (BUNYIP-452)' (#442) from test/BUNYIP-452-magic-link-test-slow into main
0793d24 test(e2e): give magic-link.spec the 3x timeout its mail retry needs
6ade9ba Merge pull request 'fix(rate-limit): exempt register-challenge from the per-IP floor (stateless mint)' (#441) from fix/BUNYIP-450-exempt-register-challenge-rate-floor into main
af4b0f9 fix(rate-limit): exempt register-challenge from the per-IP floor
f229dca Merge pull request 'fix(e2e): back off on a 429 from the register-challenge rate floor' (#440) from fix/BUNYIP-449-e2e-register-challenge-429-backoff into main
d11482d Merge pull request 'fix(e2e): reconcile deploy-sync gate paths + log served commit on skip' (#439) from fix/BUNYIP-448-e2e-deploy-sync-gate-paths into main
b3e57d8 fix(e2e): bound register-challenge backoff to the 60s per-test timeout
e9a89bf fix(e2e): track only bunyip-API build paths in the deploy-sync gate
96d8734 fix(e2e): back off on a 429 from the register-challenge rate floor
4748083 fix(e2e): reconcile deploy-sync gate paths + log served commit on skip
fccf43d Merge pull request 'fix(seed): allow 'seed' entitlement source so demo templates load (PMS-709)' (#438) from fix/PMS-709-seed-entitlement-source into main
76eb48d test(seed): regression that demo-msp loads its full dataset (PMS-709)
d9350d3 fix(seed): allow 'seed' as an entitlement source so demo templates load
nrupard released this