Hartmut 5eb3ad17b5 ci: force memory rate limiter in tests and set placeholder AUTH_SECRET ...

Unit Tests fix: when REDIS_URL is set but Redis briefly drops, the rate
limiter switches to a degraded in-memory backend with max/10 limits and
accumulates state across test files, breaking ~120 api router tests with
"Rate limit exceeded". Setting RATE_LIMIT_BACKEND=memory pins the limiter
to the full-capacity memory backend for unit tests (which don't need
distributed counters anyway).

Build fix: next build collects page data for /api/auth routes, which
validates AUTH_SECRET at boot. CI_AUTH_SECRET comes from a Gitea secret
that isn't configured, so it was empty and builds aborted. Use a
placeholder string ≥32 chars inline — the real secret is only required
in deploy workflows, not here.

2026-04-12 19:24:30 +02:00

..

workflows

ci: force memory rate limiter in tests and set placeholder AUTH_SECRET

2026-04-12 19:24:30 +02:00

CODEOWNERS

ci: add dependency audit step and CODEOWNERS

2026-04-11 08:31:45 +02:00

dependabot.yml

feat: Sprint 2 — test coverage, Dependabot, coverage gates, E2E expansion

2026-03-19 21:29:58 +01:00

SECURITY.md

fix(api): validate rolePresets with RolePresetsSchema before DB cast

2026-04-11 08:35:02 +02:00