Commit graph

3 commits

Author SHA1 Message Date
Snider
bdba302441 docs(changelog): add completed P2 items for January 2026
Some checks are pending
CI / PHP 8.2 / Laravel 11.* (push) Waiting to run
CI / PHP 8.3 / Laravel 11.* (push) Waiting to run
CI / PHP 8.4 / Laravel 11.* (push) Waiting to run
CI / PHP 8.3 / Laravel 12.* (push) Waiting to run
CI / PHP 8.4 / Laravel 12.* (push) Waiting to run
Track completed improvements:
- P2-058 to P2-061: Migration fix, webhook timing, API key exposure, payload validation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 19:52:32 +00:00
Snider
ef8a40829f security: fix shell injection in AssetTrackerService
- Add package name validation with strict regex patterns
- Convert all Process::run() calls to array syntax
- Support Composer and NPM package name formats
- Add comprehensive shell injection tests (20 attack patterns)
- Update security docs and changelog

Fixes P2 shell injection vulnerability from security audit.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 12:21:07 +00:00
Snider
e0d2325a20 refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence
Aligns module namespace with Core PHP Framework conventions where
modules live under the Core\Mod\ namespace hierarchy. This follows
the monorepo separation work started in 40d893a.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-27 16:32:55 +00:00