Commit Graph

Select branches

Hide Pull Requests

audit-remediation

chore/remove-mobile-subdir

ci/backend-deploy-guard

ci/extend-deploy-approval-window

db/baseline-schema

feat/2fa-login-gate

feat/adopt-cloud-functions

feat/pez-20-badge

feat/unified-p2p-identity

feature/multisig-signing-portal

fix/audit-gate-prod-only

fix/function-authorization

fix/pex-rebrand-and-submodule-update

fix/remove-dead-email-verification

fix/repair-missing-db-functions

main

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#4

#5

#6

#7

#8

#9

Mono Color

• b289bbc0ae ops: make the drift check see rulesets, not just branch protection (#36) main SatoshiQaziMuhammed 2026-08-01 21:04:26 -07:00
• 39b71a428e ci: make the approval notification able to fail (#35) SatoshiQaziMuhammed 2026-08-01 19:39:11 -07:00
• 78fd8b0514 ops: stop requiring an approval that nobody can give (#34) SatoshiQaziMuhammed 2026-08-01 10:31:51 -07:00
• 338472629d fix(auth): put the captcha challenge where the user is looking (#33) SatoshiQaziMuhammed 2026-08-01 06:16:44 -07:00
• c26eeee12c feat(auth): require a captcha on the endpoints that send mail (#32) SatoshiQaziMuhammed 2026-08-01 03:45:51 -07:00
• 35884cb8c9 ci: put the approve button back in Telegram (#31) SatoshiQaziMuhammed 2026-08-01 02:30:20 -07:00
• 7c9fbfb4b2 ci: one approval per deploy, not two (#30) pezkuwichain 2026-08-01 00:55:13 -07:00
• f9d784f3de Merge pull request #29 from pezkuwichain/feat/2fa-login-gate SatoshiQaziMuhammed 2026-07-31 23:07:22 -07:00
• e8dd9f6c99 feat(auth): actually ask for 2FA at login feat/2fa-login-gate pezkuwichain 2026-07-31 22:02:40 -07:00
• a3fde0dc9d Merge pull request #28 from pezkuwichain/db/baseline-schema SatoshiQaziMuhammed 2026-07-31 20:26:56 -07:00
• cec1dcf9be Merge pull request #27 from pezkuwichain/fix/remove-dead-email-verification SatoshiQaziMuhammed 2026-07-31 20:26:51 -07:00
• e18ba679be db: replace the migration history with a baseline of the live schema db/baseline-schema pezkuwichain 2026-07-31 18:49:59 -07:00
• c0e1326c4b fix(security): remove the dead email-verification function fix/remove-dead-email-verification pezkuwichain 2026-07-31 11:04:13 -07:00
• b20cfc84ef Merge pull request #26 from pezkuwichain/ci/extend-deploy-approval-window SatoshiQaziMuhammed 2026-07-31 07:27:48 -07:00
• 7482421f3d ops: capture branch protection and the deploy environment as code ci/extend-deploy-approval-window pezkuwichain 2026-07-31 02:07:21 -07:00
• e4abb38757 ci: gate deploys on a GitHub Environment instead of a hand-rolled wait loop pezkuwichain 2026-07-30 18:36:12 -07:00
• 6b368d9735 ci: widen the deploy approval window from 30 minutes to 6 hours pezkuwichain 2026-07-30 16:23:38 -07:00
• c4b22d0a14 Merge pull request #25 from pezkuwichain/fix/repair-missing-db-functions SatoshiQaziMuhammed 2026-07-30 14:56:21 -07:00
• 658c99b9bb fix(db): repair functions their migrations recorded but never created fix/repair-missing-db-functions pezkuwichain 2026-07-30 09:16:01 -07:00
• e95907ec87 Merge pull request #24 from pezkuwichain/fix/function-authorization SatoshiQaziMuhammed 2026-07-30 04:25:26 -07:00
• 0fe8c85dfe fix(security): identify the caller from their token, not the request body fix/function-authorization pezkuwichain 2026-07-30 04:05:03 -07:00
• 46669aa72d Merge pull request #23 from pezkuwichain/feat/adopt-cloud-functions SatoshiQaziMuhammed 2026-07-30 02:40:23 -07:00
• dc8533d707 feat(supabase): adopt two-factor-auth, notifications-manager, email-verification feat/adopt-cloud-functions pezkuwichain 2026-07-30 02:17:29 -07:00
• 8cc3935b91 Merge pull request #22 from pezkuwichain/ci/backend-deploy-guard SatoshiQaziMuhammed 2026-07-30 02:05:16 -07:00
• 9e10eee977 Merge remote-tracking branch 'origin/main' into ci/backend-deploy-guard ci/backend-deploy-guard pezkuwichain 2026-07-30 00:45:09 -07:00
• 08fd9d2b34 i18n(ar,ckb,fa,kmr): complete multisig operations and bridge withdrawal copy pezkuwichain 2026-07-29 20:34:46 -07:00
• cff5ae8032 fix(social): point KurdMedia links at the canonical accounts pezkuwichain 2026-07-29 20:26:00 -07:00
• c117b023b1 feat(wallet): surface multisig operations shortcut to bridge signatories pezkuwichain 2026-07-29 20:26:00 -07:00
• 88f1eb7245 chore(images): drop unused assets, recompress HEZ token logo pezkuwichain 2026-07-29 20:24:52 -07:00
• ee384064c1 i18n(en,tr): add multisig operations strings, correct bridge withdrawal copy pezkuwichain 2026-07-29 20:24:51 -07:00
• 30cca41d37 ci(supabase): deploy edge functions through the ownership gate pezkuwichain 2026-07-29 20:22:03 -07:00
• bb0b7d4183 Merge pull request #21 from pezkuwichain/ci/backend-deploy-guard SatoshiQaziMuhammed 2026-07-25 21:26:56 -07:00
• 90f94df24b ci: make backend indexer deploy self-contained + config-gated pezkuwichain 2026-07-25 20:57:56 -07:00
• 3d786f47d3 Merge pull request #20 from pezkuwichain/audit-remediation SatoshiQaziMuhammed 2026-07-25 18:30:22 -07:00
• 85b2c48025 ci: automated Telegram-gated Supabase deploy (edge functions + migrations) audit-remediation pezkuwichain 2026-07-25 17:53:31 -07:00
• 193ef34c3e ci: exclude Deno supabase tests from vitest sweep pezkuwichain 2026-07-25 16:50:13 -07:00
• 5cf55aecbf ci: exclude Deno edge functions and migration tests from web eslint pezkuwichain 2026-07-25 16:30:01 -07:00
• 3c7c4192b9 docs(backend): track backend deploy runbook (gitignored *.md override) pezkuwichain 2026-07-25 11:02:16 -07:00
• 80d273ff11 ci/cd(backend): offline test suite + Dockerize + audit-grade deploy (b + c) pezkuwichain 2026-07-25 11:01:47 -07:00
• 20a5602167 test(p2p): DB-backed proof of financial RLS + escrow REVOKE enforcement pezkuwichain 2026-07-25 10:20:38 -07:00
• cd9bc577ae test(p2p): DB-backed proof of the trade fund-routing freeze trigger (BYPASS #1) pezkuwichain 2026-07-25 10:15:28 -07:00
• a0492a41ac docs(p2p): track the security deploy runbook (ordered migrations, edge functions, secret names) pezkuwichain 2026-07-25 02:46:40 -07:00
• 25ed29edcb security(p2p): freeze trade/offer fund-routing columns + atomic release (2 verify-found bypasses) + tests pezkuwichain 2026-07-25 02:44:02 -07:00
• 165cb47c64 security(p2p): close escrow-RPC anon-drain (release/lock behind signed edge functions) pezkuwichain 2026-07-25 00:21:20 -07:00
• a8f41cd47f security(p2p): fix withdrawal BOLA, financial RLS exposure, admin dispute escrow pezkuwichain 2026-07-25 00:09:03 -07:00
• 27b4057bd4 chore(ci/build): typecheck gate, npm ci, backend CI, dep+vuln fixes, hygiene pezkuwichain 2026-07-24 23:43:37 -07:00
• 1c6ff3d578 fix(web): correct asset IDs/decimals + chain routing, string-BigInt amounts, presale signer pezkuwichain 2026-07-24 22:55:54 -07:00
• 686eecc09e fix(web): repair 6 dead internal links + harden forum markdown against stored XSS pezkuwichain 2026-07-24 22:43:30 -07:00
• 0651b80eb7 fix: sync renewal topup with the live bridge config (10K -> 200K wUSDT) pezkuwichain 2026-07-19 01:48:13 -07:00
• dd58fe9164 Add multisig pending-operations UI, fix broken multisig address calc, new signing portal feature/multisig-signing-portal pezkuwichain 2026-07-14 07:19:34 -07:00
• fe3c65a706 governance: redesign Assembly into on-chain parliament landing (6 languages) pezkuwichain 2026-06-30 23:27:19 -07:00
• ed07878646 fix(auth): make password reset work via Supabase native recovery flow (#19) pezkuwichain 2026-06-24 16:58:12 -07:00
• 7dddae633a identity: remove unused issueDate const (lint fix) pezkuwichain 2026-06-20 18:28:38 -07:00
• a92d61db8a identity: redesign e-ID + passport to match the Digital Kurdistan brand pezkuwichain 2026-06-20 17:53:56 -07:00
• 6e55418703 assets: add pezkuwi-global-union image (for upcoming Global Union surface) pezkuwichain 2026-06-20 06:35:35 -07:00
• 56b442fdff chore(web): drop dead bundled docs — app uses external docs.pezkuwichain.io pezkuwichain 2026-06-20 06:05:51 -07:00
• 35d7ab38fa i18n: translate the P2P/Buy-Sell nav label per language pezkuwichain 2026-06-20 05:57:19 -07:00
• 070d682759 feat(p2p): rename Finance tile to P2P/Buy-Sell + add 'Buy with Visa' nav action pezkuwichain 2026-06-19 17:37:14 -07:00
• cd56ab8fb6 feat(social): replace Help tile with Loto (Newroz) → loto.pex.mom pezkuwichain 2026-06-19 17:32:57 -07:00
• b012fcaaac fix(security): patch ws (high DoS) and dompurify (XSS) via npm audit fix pezkuwichain 2026-06-15 18:07:37 -07:00
• 7a1d3e7917 feat(social): wire DKS Rojname → news.pex.mom and Events → kurdishtts.pezkiwi.app pezkuwichain 2026-06-15 17:54:19 -07:00
• 2ee3caac0d fix(ci): audit only production deps in the deploy gate (--omit=dev) (#18) pezkuwichain 2026-06-12 23:39:55 -07:00
• 51eecf9e08 fix(ci): audit only production deps in the deploy gate (--omit=dev) fix/audit-gate-prod-only pezkuwichain 2026-06-12 23:39:38 -07:00
• 78e93e9766 feat(web): PEZ-20 badge on PEZ & USDT balance cards (#17) pezkuwichain 2026-06-12 23:28:05 -07:00
• 920ddbf065 feat(web): PEZ-20 badge on PEZ and USDT balance cards feat/pez-20-badge pezkuwichain 2026-06-12 21:34:49 -07:00
• 83d66feacc fix(ci): unblock deploy pipeline (audit gate + orphan submodule) (#16) pezkuwichain 2026-06-11 18:42:45 -07:00
• a9786b2e70 fix(ci): unblock deploy pipeline (audit gate + orphan submodule) pezkuwichain 2026-06-11 18:41:54 -07:00
• d6ace14e70 fix(web): live collator/nominator counts after AHM + reliable B2B redirect (#15) pezkuwichain 2026-06-11 16:41:14 -07:00
• 2cbfd21539 fix(cosign): explicit GHCR login before sign + verify pezkuwichain 2026-05-09 13:41:29 +03:00
• f7c070e45b fix(deps): drop invalid create-ecdh override (max version is 4.x not 5.x) pezkuwichain 2026-05-09 12:27:07 +03:00
• 06ed9734c6 ci(security): Faz 3 + ekstra — runner consolidation, auto-rollback, cosign, SRI, dep cleanup pezkuwichain 2026-05-09 12:08:49 +03:00
• d93d4c6cd0 fix(docker): correct dist path after WORKDIR=/build/web pezkuwichain 2026-05-08 21:39:07 +03:00
• faba2dee5d fix(docker): build context = pwap root so shared/ is reachable pezkuwichain 2026-05-08 20:44:19 +03:00
• ca3976fe62 ci(security): Faz 1+2 — Telegram CEO gate, image-based deploy, hardened audits pezkuwichain 2026-05-08 20:32:48 +03:00
• 7fea37eb5d ci(deploy): allow workflow_dispatch to trigger deploy jobs pezkuwichain 2026-05-08 15:06:19 +03:00
• 68379dcf3a ci(deploy): mirror web build to pex.mom for geo-redundancy pezkuwichain 2026-05-08 14:07:35 +03:00
• 56f276af1b fix(wallet): add 20s timeout to web3Enable to prevent indefinite hang pezkuwichain 2026-05-05 13:12:36 +03:00
• f024d21cf5 fix(wallet-modal): add loading state for extension connect, fix Play Store link pezkuwichain 2026-05-05 08:28:52 +03:00
• 67bc28cff4 docs(readme): fix exchange URL to pex.network, add pex.mom as alt website pezkuwichain 2026-05-04 00:36:26 +03:00
• d7fa9dd570 docs(readme): update URLs to app.pezkuwichain.io, pex.mom, docs.pezkuwichain.io pezkuwichain 2026-05-04 00:34:22 +03:00
• 428b058cbc chore: add res/ to .gitignore (internal-only resources) pezkuwichain 2026-05-04 00:28:44 +03:00
• 0b5e318538 fix(deps): npm audit fix — patch 14 high/moderate vulnerabilities in web/ pezkuwichain 2026-05-04 00:16:27 +03:00
• 568507ab98 chore: remove leftover dev artifacts (screenshots, Zone.Identifier, PS1 script, PDFs) pezkuwichain 2026-05-04 00:08:25 +03:00
• 198f53b96f fix(config): point production WS endpoint to rpc.pezkuwichain.io pezkuwichain 2026-05-03 02:00:40 +03:00
• 9babb94e07 fix(auth): add pexsecBot for Telegram login on app.pezkuwichain.io pezkuwichain 2026-05-01 23:32:25 +03:00
• ef6a7b2583 feat(i18n): add landing page translations for Sorani, Arabic, and Farsi pezkuwichain 2026-05-01 19:32:29 +03:00
• d446d711ba fix(web): replace AppLayout footer with identical LandingPageDesktop footer pezkuwichain 2026-05-01 16:49:12 +03:00
• d1af76f444 fix(web): remove ArrowRightLeft icon from trading button + match bottom tab bar to pre-login design pezkuwichain 2026-05-01 16:16:09 +03:00
• 914d914b74 fix(lint): remove unused bodyOnly prop from LandingPageDesktop pezkuwichain 2026-05-01 15:38:04 +03:00
• 8f57224700 feat(web): restore authenticated desktop home layout with modern section cards pezkuwichain 2026-05-01 15:36:31 +03:00
• 1e047eba91 fix(ci): set SSH port 2222 for DEV VPS deploy pezkuwichain 2026-05-01 14:09:27 +03:00
• 14d6da24db Merge pull request #14 from pezkuwichain/redesign SatoshiQaziMuhammed 2026-05-01 10:22:36 +03:00
• 346a30fcbb fix(lint): remove unused keyMaterial variable + stale eslint-disable in LandingPageDesktop pezkuwichain 2026-05-01 10:16:37 +03:00
• bac4148020 feat(web): authenticated home redesign + Telegram OAuth + SMTP pezkuwichain 2026-05-01 10:10:40 +03:00
• 709d408983 feat(landing): desktop landing page redesign pezkuwichain 2026-04-30 23:30:09 +03:00
• 69789548e7 fix: prevent 'API not ready' on mobile by blocking wallet connect until blockchain initializes feat/unified-p2p-identity pezkuwichain 2026-04-27 15:00:58 +03:00
• 86ff43e206 feat: write p2p_user_id to tg_users on Telegram wallet link pezkuwichain 2026-04-27 13:31:22 +03:00
• 18d41743e8 chore: remove mobile/ from monorepo, suspend CI mobile job pezkuwichain 2026-04-27 03:10:41 +03:00
• 09da6e80b7 chore: remove mobile/ from monorepo, suspend CI mobile job chore/remove-mobile-subdir pezkuwichain 2026-04-27 03:06:15 +03:00
• 0d71433cc1 chore: exchange submodule pex.network release + shared images pezkuwichain 2026-04-27 02:34:50 +03:00