Copilot

Use immutable digest for UV container image

1

The Dockerfile referenced the UV tooling image by mutable tag (`ghcr.io/astral-sh/uv:0.9.17`), allowing supply chain attacks if the tag is replaced with a malicious image. **Changes:** - Pin UV image to...

# Description Conducted comprehensive codebase review identifying 88 improvements across code quality, architecture, documentation, security, and maintainability. Implemented 20+ high-priority fixes including error handling, validation, bug fixes, and extensive documentation....

Fix /etc/cron.allow and /etc/cron.deny file permissions to comply with CIS Benchmark

5

- [x] Fix markdown lint issues - [x] Remove extra blank line in CHANGELOG.md (MD012 violation) - [x] Verify all markdown files pass linting ## Changes Summary Fixed markdown linting...

Upgrade CLI tool to .NET 10

2

Upgrades the CLI tool runtime from .NET 8 to .NET 10 and ensures GitHub Actions workflows support the new version. ## Changes **Core Projects** - CLI and all test projects:...

Implement platform matrix-based Docker image builds with multiplatform manifest creation

17

### Proposed changes This PR implements a platform matrix-based approach for building Docker images in GitHub Actions workflows, with artifact-based image sharing and centralized multiplatform manifest creation. #### Problem The...

Refactor Playwright tests to remove hard waits, networkidle usage, and timeout parameters

6

## Proposed Changes Comprehensively removed all hard waits (`waitForTimeout`), unreliable network-state waits (`waitForLoadState("networkidle")`), and explicit timeout parameters from Playwright tests across the entire test suite. Replaced with Playwright's default smart...

Migrate to .NET 8 LTS, consolidate Docker infrastructure, and fix GitHub workflows

6

This PR migrates all F# projects from .NET Core 3.0/3.1 to .NET 8 LTS, consolidates Docker infrastructure, and updates GitHub workflows to use supported runner images. ## F# Projects Migration...

Implements automated building and testing of the zstd-nginx-module across multiple nginx versions and platforms. ## CI Workflow **Matrix testing** across: - Nginx: 1.24.0, 1.25.3, 1.26.0 - Ubuntu: 20.04, 22.04 **Jobs:**...

Implements support for three additional Cross-Origin HTTP security headers as requested in #81: - **Cross-Origin-Opener-Policy (COOP)** - Controls whether a document can share a browsing context group with cross-origin documents...

Fix Content-Type header for Prometheus compliance

3

The PM2 Prometheus exporter was sending an incomplete Content-Type header that caused Prometheus to report scraping errors: ``` Error scraping target: non-compliant scrape target sending blank Content-Type and no fallback_scrape_protocol...