docs(changelog): add 2026-05-14 quiet-day entry #38

Closed

documentation-specialist wants to merge 2 commits from docs/changelog-2026-05-14 into main

Author	SHA1	Message	Date
documentation-specialist	5830875200	docs(changelog): add 2026-05-14 entry — OFFSEC-006 + canvas a11y + CI hardening Secret scan / secret-scan (pull_request) Successful in 1m0s Details CI / build (pull_request) Successful in 2m57s Details ## 2026-05-14 - 🔒 Security: OFFSEC-006 tenant slug SSRF + token exfiltration fix (core#933) - 🔧 Fixes: canvas WCAG AA round 3 (core#936, #949) - 🧹 Internal: CI hardening + test coverage additions + _sanitize_a2a aliases Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 04:16:42 +00:00
documentation-specialist	cece1d6e03	docs(changelog): add 2026-05-13 daily entry CI / build (pull_request) Successful in 4m19s Details ## New features - Docker HEALTHCHECK for workspace containers (core#883) ## Documentation - Security hub backfill: OWASP link + severity table (docs#35) - MOLECULE_URL → MOLECULE_API_URL rename (docs#34) - Remote workspaces graceful shutdown docs (docs#29) - PLATFORM_URL defaults corrected to host.docker.internal (docs#32) - Dev channel tagged-form requirement clarified (docs#30) - MCP server tool registry corrected: 29→87 tools (mcp-server#5) - CWE-22 path traversal regression documented (docs#31, core#810) - EC2 Instance Connect IAM permission documented (docs#33) ## Internal - Platform hardening across molecule-core (handlers, CI, tests, canvas a11y) - CI tooling migration (.github → .gitea) - SaaS ADMIN_TOKEN self-heal on startup Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-14 00:07:00 +00:00

Author

SHA1

Message

Date

documentation-specialist

5830875200

docs(changelog): add 2026-05-14 entry — OFFSEC-006 + canvas a11y + CI hardening

Secret scan / secret-scan (pull_request) Successful in 1m0s

Details

CI / build (pull_request) Successful in 2m57s

Details

## 2026-05-14
- 🔒 Security: OFFSEC-006 tenant slug SSRF + token exfiltration fix (core#933)
- 🔧 Fixes: canvas WCAG AA round 3 (core#936, #949)
- 🧹 Internal: CI hardening + test coverage additions + _sanitize_a2a aliases

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-14 04:16:42 +00:00

documentation-specialist

cece1d6e03

docs(changelog): add 2026-05-13 daily entry

CI / build (pull_request) Successful in 4m19s

Details

## New features
- Docker HEALTHCHECK for workspace containers (core#883)

## Documentation
- Security hub backfill: OWASP link + severity table (docs#35)
- MOLECULE_URL → MOLECULE_API_URL rename (docs#34)
- Remote workspaces graceful shutdown docs (docs#29)
- PLATFORM_URL defaults corrected to host.docker.internal (docs#32)
- Dev channel tagged-form requirement clarified (docs#30)
- MCP server tool registry corrected: 29→87 tools (mcp-server#5)
- CWE-22 path traversal regression documented (docs#31, core#810)
- EC2 Instance Connect IAM permission documented (docs#33)

## Internal
- Platform hardening across molecule-core (handlers, CI, tests, canvas a11y)
- CI tooling migration (.github → .gitea)
- SaaS ADMIN_TOKEN self-heal on startup

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-14 00:07:00 +00:00

docs(changelog): add 2026-05-14 quiet-day entry #38

2 Commits