consolidate(web): credential exposure, secret loss, and the update path - #485

Merged

ChuckBuilds merged 14 commits into

mainfrom

consolidate/web

Aug 21, 2026

Commits on Aug 20, 2026

fix(web): stop /config/main handing out every credential it holds
ChuckBuilds
committed
fc6104f
fix(web): stop an unrelated config edit from erasing a plugin's secret

ChuckBuilds
and
claude
committed
95bd8a1
fix(web): stop dumping the config and request headers to the journal

ChuckBuilds
and
claude
committed
f0efdaf
fix(web): stop /config/secrets handing out every credential it holds

ChuckBuilds
and
claude
committed
d2379a1
fix(web): stop reporting "no update" when the update check could not run

ChuckBuilds
and
claude
committed
ec8591e
fix(web): stop the installer chmod stripping exec bits on every update

ChuckBuilds
and
claude
committed
cbfb0e0
fix(web): ask for the restart that makes an update take effect

ChuckBuilds
and
claude
committed
6642a78
Merge branch 'fix/blank-secrets-erase-stored-credentials' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web
ChuckBuilds
committed
e085379
Merge branch 'fix/debug-dump-of-config-and-headers' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web
ChuckBuilds
committed
c7401e1
Merge branch 'fix/update-blocked-by-installer-chmod' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web
ChuckBuilds
committed
b8ef658
Merge branch 'fix/update-check-reports-failure' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web
ChuckBuilds
committed
1cb01c1
Merge branch 'fix/update-prompts-restart' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web
ChuckBuilds
committed
f4db8dc
Merge branch 'fix/config-secrets-leak' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web
ChuckBuilds
committed
7d8d3a5

Commits on Aug 21, 2026

Mask list-shaped secrets element-wise, close two vacuous tests

ChuckBuilds
and
claude
committed
53c61d5

Navigation Menu

Uh oh!

consolidate(web): credential exposure, secret loss, and the update path - #485

consolidate(web): credential exposure, secret loss, and the update path#485
ChuckBuilds merged 14 commits into
mainfrom
consolidate/web

Commits on Aug 20, 2026

fix(web): stop /config/main handing out every credential it holds

fix(web): stop an unrelated config edit from erasing a plugin's secret

fix(web): stop dumping the config and request headers to the journal

fix(web): stop /config/secrets handing out every credential it holds

fix(web): stop reporting "no update" when the update check could not run

fix(web): stop the installer chmod stripping exec bits on every update

fix(web): ask for the restart that makes an update take effect

Merge branch 'fix/blank-secrets-erase-stored-credentials' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web

Merge branch 'fix/debug-dump-of-config-and-headers' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web

Merge branch 'fix/update-blocked-by-installer-chmod' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web

Merge branch 'fix/update-check-reports-failure' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web

Merge branch 'fix/update-prompts-restart' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web

Merge branch 'fix/config-secrets-leak' of https://github.com/ChuckBuilds/LEDMatrix into consolidate/web

Commits on Aug 21, 2026

Mask list-shaped secrets element-wise, close two vacuous tests