Repository navigation
Tags
Tags
Audit remediation: RECOMMENDATIONS.md priorities 2b, 3, 4, 5 and 8 Eight commits, one per item, closing the hygiene and operations items that did not require a schema or architecture change. They sit on top of 04610cd; the seven commits between the rails-8.1.4 tag and that point were the post-upgrade follow-ups (json/sprockets boot fix, blocking security gates, the bcrypt hash leak, the probe harness, the right_names memo, 4.3 coverage, and the doc update). 60aedf6 2b acknowledge/ackall moved from GET to POST, so protect_from_forgery covers a state-changing action 94654d1 3 Subprocess coverage of the checkpoint/claim/reclaim machinery (4.1 option A) c5d82ab 4 A single malformed line no longer wedges ingestion; puts -> Rails.logger, plus a stdout broadcast so the journal sees it (5.3) bf547e0 5 provision.sh and db/seeds.rb made idempotent; three systemd units; a CI job validating both (5.1) 68a6c39 8 MIT LICENSE (5.4) 58407e9 8 README.md rewritten as operator documentation (5.5) 4ee7458 8 Dead and duplicated code removed (4.2) 078f581 - Closures recorded in RECOMMENDATIONS.md Behaviour changes an operator should know about: - The importer no longer exits on an unparseable line. StandardError lines are logged at warn with their text and byte offset, counted, and recorded as a Statistic series; the pass continues. Non-StandardError still stops the run and rewinds the checkpoint. - Event.search and Event.search_period are one method taking a Range. Anything calling the old two-argument form now raises ArgumentError instead of silently binding a non-Time. - Alert acknowledgement is POST-only; the old GET routes are gone, so any bookmark or script hitting /alerts/acknowledge as GET will now fail. - syslog.pl reads one environment variable, DAD_SYSLOG_DEBUG (opt-in). - export_logs.rb moved to bin/export_logs. Verified at this tag: rake test 237 runs / 696 assertions / 0 failures / 0 errors / 0 skips; cucumber 5 scenarios / 18 steps, all passed; brakeman 0 warnings; bundle-audit no vulnerabilities; assets:precompile and boot clean with jQuery 3 present; bash -n provision.sh and systemd-analyze verify clean; perl -c syslog.pl clean. Co-authored-by: openhands <openhands@all-hands.dev>
Rails 8.1.4 upgrade point The app runs on Rails 8.1.4 (from 7.1.6), via 7.2.3.2 and 8.0.5.1, one commit per minor step. Ruby stays at 3.3.8. Full test suite (194 runs), cucumber (4 scenarios), route/HTTP/model-layer probes and asset output verified against worktrees pinned at each preceding step. Co-authored-by: openhands <openhands@all-hands.dev>