534 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
bermudalamb	1355b3076a	Merge pull request 'fix: remove stale single-item demo-checkout tests, add cart integration tests' (#13) from fix/stale-demo-checkout-tests into main ... Reviewed-on: #13	2026-08-14 16:12:29 -05:00
bermudalamb	1c46632e8f	fix: remove stale single-item demo-checkout tests, add cart integration tests	2026-08-14 16:11:20 -05:00
bermudalamb	9de3e6a2fa	Merge pull request 'Fix/cart back navigation' (#12) from fix/cart-back-navigation into main ... Reviewed-on: #12	2026-08-14 15:37:21 -05:00
bermudalamb	1421694a0c	fix: add back-to-shop navigation on cart page	2026-08-14 15:36:30 -05:00
bermudalamb	86f48ed3f8	fix: add back-to-shop navigation on cart page	2026-08-14 15:20:11 -05:00
bermudalamb	cc3798a7f8	Merge pull request 'fix: cart badge not updating after account creation due to stale closure' (#11) from fix/cart-badge-stale-closure into main ... Reviewed-on: #11	2026-08-14 15:15:12 -05:00
bermudalamb	b85cdb9c44	fix: cart badge not updating after account creation due to stale closure	2026-08-14 15:13:55 -05:00
bermudalamb	853a962eb5	Merge pull request 'fix: TypeScript type mismatch between UspsValidationResult and local fallback object' (#10) from fix/usps-type-mismatch into main ... Reviewed-on: #10	2026-08-14 14:49:05 -05:00
bermudalamb	b73b472d80	fix: TypeScript type mismatch between UspsValidationResult and local fallback object	2026-08-14 14:47:52 -05:00
bermudalamb	4f055a2fcd	Merge pull request 'feat: add customer cart with expiry, shipping addresses with USPS validation, and multi-item PayPal checkout' (#9) from feature/cart-shipping-checkout into main ... Reviewed-on: #9	2026-08-14 14:05:09 -05:00
bermudalamb	9ab689e624	feat: add customer cart with expiry, shipping addresses with USPS validation, and multi-item PayPal checkout	2026-08-14 14:02:25 -05:00
bermudalamb	433d7e1db5	Merge pull request 'fix: Dockerfile' (#8) from fix/Dockerfile into main ... Reviewed-on: #8	2026-08-14 10:58:33 -05:00
bermudalamb	845b1f29b9	fix: Dockerfile	2026-08-14 10:58:07 -05:00
bermudalamb	b3835c1e9d	Merge pull request 'chore: replace manual SQL migrations with node-pg-migrate' (#7) from feat/node-pg-migrate into main ... Reviewed-on: #7	2026-08-14 10:05:59 -05:00
bermudalamb	7f4479605a	chore: replace manual SQL migrations with node-pg-migrate	2026-08-14 10:05:09 -05:00
bermudalamb	6ca3366821	Merge pull request 'fix: markdown editor not accepting input due to Form.Item prop injection conflict' (#6) from fix/markdown-editor-not-editable into main ... Reviewed-on: #6	2026-08-14 09:45:22 -05:00
bermudalamb	9325610517	fix: markdown editor not accepting input due to Form.Item prop injection conflict	2026-08-14 09:43:59 -05:00
bermudalamb	83232d6ac2	Merge pull request 'fix: add frontend package-lock.json' (#5) from fix/package-lock into main ... Reviewed-on: #5	2026-08-14 09:27:22 -05:00
bermudalamb	336ad3d5ab	fix: add frontend package-lock.json ... Introduces the `package-lock.json` file to the frontend directory to ensure consistent dependency versions across development environments and deployments. This prevents dependency drift and improves build reliability.	2026-08-14 09:27:22 -05:00
bermudalamb	827f065bb2	Merge pull request 'fix: bound admin image uploads and use a CSPRNG for stored filenames' (#4) from fix/sonarqube-upload-limits-and-weak-rng into main ... Reviewed-on: #4	2026-08-14 09:25:58 -05:00
bermudalambandClaude Opus 5	aba47c81e3	fix: bound admin image uploads and use a CSPRNG for stored filenames ... SonarQube flagged three hotspots in the admin router: multer was configured with no content length limits, and stored filenames were derived from Date.now() plus Math.random(). - Cap the multipart body on every dimension: 6 files, 8 MiB per image, 8 fields, 64 KiB per field. Without limits a single request could fill the uploads volume. - Generate stored filenames with crypto.randomUUID() so paths are not predictable. Image ordering is unaffected; sort_order already drives it. - Wrap the upload middleware to translate MulterError into 413/400 JSON. The app mounts no error handler, so a limit rejection would otherwise surface as an HTML 500. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-14 09:22:45 -05:00
bermudalamb	da240621db	docs: fix local-dev commands for PowerShell, document branching/commit conventions	2026-08-14 08:50:46 -05:00
bermudalamb	01cf325018	Merge pull request 'fix: sonarqube denial of service issue' (#2) from fix/sonarqube-denial-of-service-issue into main ... Reviewed-on: #2	2026-08-14 08:43:37 -05:00
bermudalamb	81118245ce	fix: sonarqube denial of service issue	2026-08-14 08:43:37 -05:00
bermudalamb	7a026b7e82	Merge pull request 'ci: fix Postgres service port conflict in CI' (#3) from fix/fix-workflow-test-scenario-ports into main ... Reviewed-on: #3	2026-08-14 08:42:50 -05:00
bermudalamb	2bff3a231f	ci: fix Postgres service port conflict in CI	2026-08-14 08:41:40 -05:00
bermudalamb	8ffd05f73d	Merge pull request 'fix: move scripts folder to correct location' (#1) from fix/failing-workflows into main ... Reviewed-on: #1	2026-08-14 08:16:26 -05:00
bermudalamb	4b524e0da3	fix: move scripts folder to correct location	2026-08-14 08:15:52 -05:00
bermudalamb	234330e482	Add CI test workflow with job summaries	2026-08-13 19:10:30 -05:00
bermudalamb	f5218782e9	Fix header overflow on mobile viewports	2026-08-13 17:51:15 -05:00
bermudalamb	921022c658	Add backend unit/integration tests, Playwright e2e tests, README, cookie Secure fix	2026-08-13 22:35:38 +00:00
bermudalamb	2adbf24b23	Add SonarQube CI workflow	2026-08-13 21:53:31 +00:00
bermudalamb	8b19d86fdb	Trigger CI	2026-08-13 21:48:11 +00:00
bermudalamb	9be4986dd3	Initial commit: redefined-designs storefront	2026-08-13 21:07:54 +00:00