ajnart d33ed20149 fix(releases): bind token to saved provider:identifier match ...

The token must only be used for repositories that are registered in the
widget's saved options, matched by provider:identifier (not by fragile
cuid2 id). This prevents tokens from being sent to arbitrary providerUrl
values submitted by the caller.

The saved providerUrl is used in preference to the request's providerUrl
when a token is being applied.

2026-07-10 17:53:26 +02:00

..

src

fix(releases): bind token to saved provider:identifier match

2026-07-10 17:53:26 +02:00

package.json

feat(analytics): migrate from Umami to PostHog server-side analytics (#5983)

2026-06-19 21:21:50 +02:00

tsconfig.json

fix(deps): update dependency prettier to ^3.2.5 (#53)

2024-02-08 19:58:56 +01:00