Files
calendar/apps
Zachariah K. Sharma a461321dbd
Pull Request Labeler / labeler (pull_request_target) Has been cancelled
Pull Request Labeler / apply-labels-from-issue (pull_request_target) Has been cancelled
PR Welcome Bot / Welcome new contributors (pull_request_target) Has been cancelled
PR Update / Trust Check (pull_request_target) Has been cancelled
Validate PRs / Validate PR title (pull_request_target) Has been cancelled
cleanup caches by a branch / cleanup (pull_request) Has been cancelled
/ cleanup-report (pull_request) Has been cancelled
PR Update / Prepare (pull_request_target) Has been cancelled
PR Update / Type Checks (pull_request_target) Has been cancelled
PR Update / Linters (pull_request_target) Has been cancelled
PR Update / Security Audit (pull_request_target) Has been cancelled
PR Update / Check Prisma Migrations (pull_request_target) Has been cancelled
PR Update / Setup Database (pull_request_target) Has been cancelled
PR Update / Analyze Build (pull_request_target) Has been cancelled
PR Update / required (pull_request_target) Has been cancelled
PR Update / Production builds (pull_request_target) Has been cancelled
PR Update / Tests (pull_request_target) Has been cancelled
fix: harden demo-mode guard, availability scope, and image secrets
- Move the demo-mode check into a single shared module so the
  NODE_ENV!=production guard cannot drift; service.ts previously had an
  unguarded copy that could serve fixture data / impersonate the organizer
  in production.
- Restrict getAvailability to unlocked team members so an authenticated
  viewer cannot probe free/busy for arbitrary user ids.
- Pass build-time secrets inline on the build RUN instead of persisting them
  in an image ENV layer.
2026-06-14 13:10:52 -06:00
..
2026-06-08 19:06:52 -06:00