kolaente 667f229d8c refactor(files): derive attachment size from content in sibling callers ... Task/project duplication and the Todoist migration were passing stored or API-reported sizes into NewAttachment. Derive the size from the actual buffered content so every caller matches the hardened boundary behaviour (GHSA-qh78-rvg3-cv54 defence-in-depth).		2026-04-09 16:22:56 +00:00
..
auth	fix(security): validate link share JWTs against DB on every request	2026-04-09 15:38:07 +00:00
avatar	fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients	2026-04-09 07:31:08 +00:00
background	fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients	2026-04-09 07:31:08 +00:00
dump	chore(lint): suppress known gosec false positives	2026-03-23 16:23:15 +01:00
keyvalue	feat: add generic RememberValue[T] for type-safe keyvalue caching	2026-04-08 08:56:22 +00:00
migration	refactor(files): derive attachment size from content in sibling callers	2026-04-09 16:22:56 +00:00