Morphit Team
5199375ae9
Some checks failed
morphit-release / Build + publish release tarball (push) Has been cancelled
Bundles the post-beta.28 work: - Keystore/2FA hardening: changePassword no longer drops the YubiKey wrap; CEK_NONCE_BYTES 12->24 (the broken layered/hardware-key write path); first automated 2FA round-trip coverage (enroll->unlock, TOTP enroll/verify/survives password change). - YubiKey transport: full five-defect diagnosis written into transport.ts, plus a fail-closed enrollment-verification gate (verifyYubikeyChallengeResponse / buildVerifiedYubikeyWrap) so a broken transport can't commit a constant/zero-entropy 2FA factor. Transport itself unchanged (hardware-gated). - Post-beta.28 UI/operator batch: AGPL-3.0 FAQ article (10 locales), two-slot i2p, blurtwallet-matching voting power, RPC-list best-first sort + refresh, service-worker cache + desktop update-snackbar fixes, ops-cli alt-network Tor-wipe fix, and the rest of the 14-task batch. Version bumped at all 19 touchpoints; package-lock synced; RELEASE-NOTES added. Gates green; beta -> Forgejo only. |
||
|---|---|---|
| .. | ||
| ansible | ||
| backup | ||
| bunkerweb | ||
| env | ||
| nginx | ||
| postgres | ||
| scripts | ||
| systemd | ||