Matthias Riße

**Purpose of PR?**: Fixes #2311. **Does this PR introduce a breaking change?** **If the changes in this PR are manually verified, list down the scenarios covered:**: **Additional information for reviewer?**...

The CI test runs still occasionally hang up and timeout for some reason. This is an attempt at getting some insight into why they don't always pass by recording the...

Use the flask-native global configuration store instead of rolling our own

3

Every Flask app has a `.config` attribute to store configuration. Additionally, for MSColab we have `mscolab_settings`. I think this is redundant, we could just use `app.config` for everything that should...

Push-to-create with Forgejo using HTTPS errors

2

### What is the problem? Forgejo has a feature called "push-to-create", which when enabled will make Forgejo create a repository if it is pushed to but doesn't exist yet. This...

`datalad clone --reckless ephemeral` from anonymous https sets `annex-ignore` for origin

1

### What is the problem? A `datalad clone --reckless ephemeral` using an anonymous https URL makes origin `annex-ignore`, even though a `git annex enableremote origin` immediately afterwards works just fine....

WMS_SERVICE_CACHE should probably not be global

2

Having to reset this here is a good indicator that this variable shouldn't be global. _Originally posted by @matrss in https://github.com/Open-MSS/MSS/pull/2792#discussion_r2050596325_

Use immutable references for external GitHub Actions

11

Referencing third-party actions by version tag can be dangerous if that actions repository is compromised, since git tags are mutable and an attacker can therefore change what gets executed. See...

pytest runs touch $HOME

2

Running the test suite accesses $HOME. Doing ``` HOME=$(mktemp -d) pixi run -e dev QT_QPA_PLATFORM=offscreen pytest -n logical ``` reveals that it creates a "mss" directory in $HOME: ``` $...

`addurls` gets stuck with an unreliable webserver

10

### What is the problem? I am trying to scrape the [HALO Database](https://halo-db.pa.op.dlr.de/) into a dataset. The web service is occasionally rather sluggish. After downloading a few to a few...

DataLad does not honor `annex.security.allowed-url-schemes`

1

### What is the problem? I am trying to point files in a dataset at an SFTP URL using the git-annex web remote and curls support for the sftp:// URL...