Bugs go to GitHub Issues. Questions go to GitHub Discussions. Feature ideas belong here. Read the full guide
Every bug fixed between v2.0.2 and v2.0.3, grouped by the part of PatchMon it affects. Features and internal changes are not listed here, only defects that were corrected. Where a fix closes a reported GitHub issue, the issue is linked on that line. ## Security and access 1. Improved how the client IP address is determined behind a reverse proxy, so rate limiting, login lockouts and activity log entries are now accurate and consistent. A new trusted proxy setting controls which upstream ad...
https://docs.npmjs.com/cli/v11/using-npm/config#min-release-age Around 24 hours for the tests.
Implement Code Rabbit for Bug triaging.
Reorganise the saved views so that Bugs are shown properly sliced by status.
When building the app it should automatically inject the Github Stars, Discord Users, Youtube subs, LinkedIn followers into the app rather than hard coding them
Adding a feedback widget in PatchMon with a toggle (QuackBack integration)
Backdated copying of GH release notes into Feedback portal. This is so we have a single source of truth for Version number and release notes that propogate into the app and this Feedback portal.
Add Contributor License Agreement flow for PRs submitted by community.
Currently code has hard coded version numbers inside, this might be an issue for when we have multiple collaborators and PR Requests. We need to change the flow so that insertion of version numbers is done through GitHub tags properly. Right now this is in place for half the items but not the rest.
What is the installation method of your PatchMon server? Docker ### What is the version of your PatchMon server? 2.0.2 ### Briefly describe the feature Agent binary signing: prevent compromised server from pushing arbitrary root-level code via auto-update ### Detailed description ## Summary The agent auto-update mechanism verifies downloaded binaries using a SHA256 hash, but both the binary and the hash are served by the same PatchMon server. The hash check protects against transm...
