kolaente abfbcb4cf3 fix(migration): bound per-entry zip cap by configured files.maxsize ...

The hard-coded 500 MB per-entry cap meant operators who set a tighter
files.maxsize could not actually enforce it on imports. Derive the cap
from files.maxsize with a floor so data.json / filters.json / VERSION
entries can still be read when the configured limit is tiny.

Clamp the uint64->int64 conversion and the LimitReader cap so absurd
configuration values do not overflow into MinInt64 and cause
io.LimitReader to treat every entry as EOF.

2026-04-09 16:22:56 +00:00

..

auth

fix(security): validate link share JWTs against DB on every request

2026-04-09 15:38:07 +00:00

avatar

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

background

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

dump

chore(lint): suppress known gosec false positives

2026-03-23 16:23:15 +01:00

keyvalue

feat: add generic RememberValue[T] for type-safe keyvalue caching

2026-04-08 08:56:22 +00:00

migration

fix(migration): bound per-entry zip cap by configured files.maxsize

2026-04-09 16:22:56 +00:00