fix(rate-limit): fail closed without trusted client identity - #47

Merged

seonghobae merged 17 commits into

mainfrom

fix/fail-closed-client-identity

Aug 3, 2026

Commits on Aug 3, 2026

fix(rate-limit): fail closed without trusted client identity
seonghobae
committed
db64b5d
test(rate-limit): cover missing and invalid client identity
seonghobae
committed
5f1b9d1
docs(rate-limit): document trusted identity fail-closed boundary
seonghobae
committed
e8f1c1e
docs(changelog): record trusted client identity hardening
seonghobae
committed
9c2e285
fix(deps): pin patched undici release
seonghobae
committed
c76a233
chore(ci): refresh patched undici lockfile
seonghobae
committed
c592a82
fix(deps): refresh lockfile for undici 7.29.0
noema-maintainer[bot]
committed
0f07d5c
docs(changelog): record patched undici advisory response
seonghobae
committed
deaf8b6
fix(rate-limit): validate and canonicalize client IPs
seonghobae
committed
c16e5a1
test(rate-limit): cover canonical IP validation boundary
seonghobae
committed
f4062d3
docs(rate-limit): constrain rollback and canonical identity handling
seonghobae
committed
38f45d8
chore(runtime): require a supported Node.js LTS
seonghobae
committed
032b734
docs(deploy): require supported Node.js LTS runtime
seonghobae
committed
88cb879
docs(changelog): consolidate review-driven hardening notes
seonghobae
committed
34f4e8e
chore(ci): synchronize package runtime metadata
seonghobae
committed
39fde46
chore(runtime): synchronize supported Node.js engine lock
noema-maintainer[bot]
committed
c7a9e06
docs(deploy): add Node.js runtime preflight
seonghobae
committed
a3a37da