gitea-mcp

Files

T

mathiasandClaude Opus 5.5 31a3dd3e0e fix(tools): fail closed when the key scan cannot read the input

PR #66 review: json.Decoder.Token() fails on a number outside float64
range (1e999), which json.Unmarshal ignores in an unknown key, so a
decoy key ended the scan and the #65 repro wrote to main. The decoder
now uses UseNumber, and any scan error is a validation error. The
duplicate check folds with strings.EqualFold (as encoding/json does)
instead of ToLower, so long s and the Kelvin sign are caught in nested
objects too.

Refs #65

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-05 07:02:27 +02:00

adminbootstrap

fix(lint): check resp.Body.Close()'s error (errcheck)

2026-09-05 11:27:22 +02:00

allowlist

fix(auth): owner allowlist trusts pass-through-authenticated callers (#59 )

2026-07-22 08:31:43 +02:00

auth

feat(auth): every accepted request names the path that granted it

2026-09-14 20:59:04 +02:00

config

feat(auth): trust the k8s cluster OIDC issuer for ServiceAccount tokens (ADR-0011 D1)