HartmutandClaude Sonnet 4.6 78d50b78d3 fix: script portability and npm security updates ...

Scripts:
- stop.sh: replace Linux-only fuser with cross-platform lsof fallback
- start.sh: parameterize port (APP_PORT) and container name (dynamic lookup)
- app-dev-start.sh: cross-platform stat (GNU -c / BSD -f) and setpriv/su fallback
- deploy-compose.sh: parameterize Docker registry via DOCKER_REGISTRY env var
- harden-postgres.sh: make DB_USER and DB_NAME configurable via env vars

NPM security:
- next: 15.5.12 → 15.5.15 (fixes HTTP request smuggling CVE)
- nodemailer: 8.0.1 → 8.0.5 (fixes SMTP command injection CVEs)
- lodash-es: add pnpm override to force >=4.18.0 (fixes code injection + prototype pollution)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-10 14:06:58 +02:00

..

api

fix: script portability and npm security updates

2026-04-10 14:06:58 +02:00

application

Merge branch 'worktree-agent-a8de1898' - Phase 2A entitlement use-cases

2026-04-09 20:16:38 +02:00

db

fix(security): prevent TOTP replay attacks and fix user enumeration in verifyTotp

2026-04-09 21:41:09 +02:00

engine

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

shared

feat(api): add audit helpers, tool registry, shared tool manifest types, and UI primitives

2026-04-09 21:14:26 +02:00

staffing

fix(merge): resolve post-merge type errors from batch-1 agents

2026-04-09 14:38:32 +02:00

ui

fix(infra): apply missing migrations, fix Dockerfile.dev ui package reference

2026-04-09 20:29:21 +02:00