Skip to content

backport: carry fork release fixes onto v2.93.0 as 2.93.3 - #17

Merged
jack-o-mania merged 14 commits into
releases/v2.93.0from
backports/v2.93.0/fork-carryover
Nov 5, 2026
Merged

jack-o-mania merged 14 commits into
releases/v2.93.0from
backports/v2.93.0/fork-carryover

Conversation

@jack-o-mania

@jack-o-mania jack-o-mania commented Nov 4, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Moves the fork's release line to upstream v2.93.0 (the newest stable release at least seven full days old) and carries the fork's deployed 2.91.x changes onto it, producing 2.93.3. Version mirrors advance once per feature on the fixed releases/v2.93.0 branch.

The stored-pool-accounts fix from the 2.91 line is not carried because upstream already ships it in 2.93.0 (lidge-jun#7551).

The GUI behavior matches the remembered-login change already shipped on the 2.91 line; its existing login form evidence is shown here:
Admin-login form from the source change

Verification

  • bun run typecheck with pinned Bun 1.4.4: passed.
  • 268 focused runtime tests (search admission, reserve ingress, link management, loopback listener admission and integration, test-layout guards, release-version line): passed.
  • GUI tests/api-auth-memory.test.ts (14 tests) and GUI production build: passed.

The full suite is left to PR CI.

Checklist

  • Scope stays focused and avoids unrelated cleanup.
  • Docs or release notes were updated when needed.
  • Security-sensitive changes were reviewed for secrets, auth, and unsafe defaults.

Co-authored-by: Aleksei Chistiakov aleks00799@gmail.com
Co-authored-by: jack-o-mania aleks00799+jack@gmail.com
Co-authored-by: Codex codex@localhost

alexalok and others added 10 commits November 4, 2026 11:39
(cherry picked from commit be4f7a7)
(cherry picked from commit 4d73fac)
(cherry picked from commit 77be0e3)
(cherry picked from commit b0bcc06)
(cherry picked from commit 7ecd6ce)
(cherry picked from commit 001eb14)
(cherry picked from commit 299e471)
(cherry picked from commit 27f9af3)
* fix(search): accept validated Hub bearer admission

* test(search): shard admission layout registration

* test(search): align Reserve ingress with Hub bearer admission

---------

Co-authored-by: Codex <codex@localhost>
(cherry picked from commit f9206d4)
(cherry picked from commit c7014ad)
(cherry picked from commit 354ead9)
(cherry picked from commit 733583f8d4cf687eef5c0059c2010e106e5482f3)
(cherry picked from commit c0263ad)
(cherry picked from commit 4928434)
@github-actions github-actions Bot added the intake: hygiene-blocked Deterministic PR hygiene checks failed label Nov 4, 2026
@github-actions

github-actions Bot commented Nov 4, 2026

Copy link
Copy Markdown

⚠️ Deterministic hygiene checks failed.

  • missing_coauthor_credit — This pull request says it reimplements, supersedes, carries, or rebases another author's pull request, but no Co-authored-by trailer names that author. Prose in a commit body is not read by anything; the trailer is what GitHub counts. Add it to the description or a commit, or obtain attribution-approved. Paths: #1.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@github-actions github-actions Bot added the bug Something isn't working label Nov 4, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 4, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-05T16:36:29.271134Z 86e26e6 Manual request
🔒 Security Review ✅ Completed 2026-11-05T16:39:13.385491Z 86e26e6 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@github-actions

github-actions Bot commented Nov 4, 2026 •

Copy link
Copy Markdown

✅ READY

  • all PR quality gates passed.

Hygiene

✅ Deterministic PR hygiene checks passed.

@github-actions
github-actions Bot marked this pull request as draft November 4, 2026 11:52
@github-actions github-actions Bot removed the intake: hygiene-blocked Deterministic PR hygiene checks failed label Nov 4, 2026
@github-actions
github-actions Bot marked this pull request as ready for review November 4, 2026 11:54
@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 620b99717f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread gui/src/api.ts Resolved

@grok-o-mania grok-o-mania Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Grok review (620b997).

Backports the fork's 2.91.x changes onto releases/v2.93.0 as 2.93.3: the fork-only backport target rule in enforce-pr-target.yml (same-repo backports/vX.Y.Z/* into the matching releases/vX.Y.Z, no main compare in the fork), fork-scoped release tag ancestry via package.json.opencodexFork, standalone search skipping the forwarding guard only for an ingress-validated bearer admission (the sidecar resolver still substitutes stored credentials), a one-year remembered admin token in localStorage that is saved only after server validation and cleared on 401, expiry, or logout, IPv4 loopback aliases counting as trusted management locality without exempting data-plane API keys, plus the matching docs, structure entries, version mirrors and tests.

No issues found. Checked for bugs and AGENTS.md compliance.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

A standalone or Hub dashboard that requires the admin token remembers it for a year, but both sign-out buttons were gated on a minted ocx_session_ credential. The remembered token could only be removed by clearing browser data. Show the control for typed admin-token logins as well and wire it to the existing remembered-token cleanup.
@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Swish!

Reviewed commit: 0e0f18a20e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 0e0f18a20e

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. You're on a roll.

Reviewed commit: 8b32033263

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Swish!

Reviewed commit: f3ee7a9384

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Leaves the remembered-login test file identical to the 2.91 line so the retained local remembered-admin-login patch still verifies against this release.
@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: f3ee7a9384

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Nice work!

Reviewed commit: 86e26e66de

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 86e26e66de

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@jack-o-mania

Copy link
Copy Markdown
Collaborator Author

grok review

@jack-o-mania
jack-o-mania merged commit 74da451 into releases/v2.93.0 Nov 5, 2026
31 checks passed
@jack-o-mania
jack-o-mania deleted the backports/v2.93.0/fork-carryover branch November 5, 2026 16:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants