Andrey Antukh 7f8d0fed02 ⬆️ Update JVM dependencies in backend and common ...

Update several JVM dependencies across backend and common:

- passay 1.6.6 -> 2.0.0 (package reorg, ctor-based rules)
- siphash 2.0.0 -> 3.0.0 (SipHasher* renamed to SipHash*)
- lettuce-core, guava, sqlite-jdbc, jsoup, lz4-java, markdown-clj,
  awssdk s3/sts, selmer, jackson-core/databind, shadow-cljs

Adapt passay validation to the new API (moved packages, constructor
configuration) and siphash to the renamed classes. Add tests for
password validation and UUID advisory-lock hashing.

AI-assisted-by: deepseek-v4-flash

2026-08-27 22:51:50 +02:00

..

test_files

Merge remote-tracking branch 'origin/main' into staging

2026-05-10 09:16:41 +02:00

auth_oidc_test.clj

🐛 Fix nitrate sso failure message (#11214)

2026-08-26 17:24:59 +02:00

binfile_test.clj

✨ Persist binfile manifest and emit workspace audit events (#11106) (#11138)

2026-08-21 14:37:21 +02:00

bounce_handling_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

db_test.clj

⬆️ Update JVM dependencies in backend and common

2026-08-27 22:51:50 +02:00

email_blacklist_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

email_sending_test.clj

♻️ Normalize organization naming across Penpot (#10977)

2026-07-31 12:04:10 +02:00

helpers.clj

🐛 Add backend password validation with complexity rules and dictionary check (#11059)

2026-08-06 10:17:14 +02:00

http_assets_test.clj

🐛 Enforce ownership check on tempfile bucket access (#11270)

2026-08-26 13:05:36 +02:00

http_management_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

http_middleware_security.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

http_middleware_test.clj

🐛 Remove internal error details from HTTP error responses (#11288)

2026-08-21 12:43:23 +02:00

loggers_webhooks_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

logical_deletion_test.clj

✨ Inherit subscriptions perks to Nitrate

2026-06-02 09:33:02 +02:00

media_remote_test.clj

🐛 Fix media-remote-test falling back to real config in REPL

2026-08-06 20:53:58 +02:00

media_sanitize_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

media_test.clj

🐛 Sanitize SVG files on upload to prevent XSS

2026-08-05 21:52:59 +02:00

passwords_test.clj

⬆️ Update JVM dependencies in backend and common

2026-08-27 22:51:50 +02:00

rpc_access_tokens_test.clj

🐛 Prevent MCP tokens from being used as access tokens (#10962)

2026-07-31 13:19:45 +02:00

rpc_audit_test.clj

🐛 Fix audit event validation for error reports with string profile-id (#10898)

2026-07-30 07:32:02 +02:00

rpc_auth_test.clj

🐛 Fix session invalidation on logout to prevent token replay (#11317)

2026-08-21 12:55:24 +02:00

rpc_binfile_test.clj

🐛 Validate version parameter in import-binfile (#11107)

2026-08-18 15:13:49 +02:00

rpc_commands_error_reports_test.clj

🐛 Fix audit event validation for error reports with string profile-id (#10898)

2026-07-30 07:32:02 +02:00

rpc_comment_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_cond_middleware_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_doc_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_feedback_test.clj

🐛 Add size limit and rate limiting to send-user-feedback (#10979) (#10990)

2026-08-05 17:35:59 +02:00

rpc_file_snapshot_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_file_test.clj

🐛 Enforce share-link page scope in get-page and get-file-fragment RPC commands (#11284)

2026-08-25 09:37:42 +02:00

rpc_file_thumbnails_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-06-15 13:04:19 +02:00

rpc_font_test.clj

🐛 Add permission checks to WebSocket subscription handlers (#11054)

2026-08-07 11:24:24 +02:00

rpc_management_nitrate_test.clj

🐛 Fix organization invitation schema validation for logo URI (#11238)

2026-08-13 13:15:59 +02:00

rpc_management_test.clj

🐛 Validate content-type on management upload endpoints (#11026)

2026-08-17 12:13:56 +02:00

rpc_media_test.clj

🐛 Add minimum validation for total-chunks in upload session (#11104)

2026-08-18 14:37:51 +02:00

rpc_nitrate_test.clj

🐛 Fix missing warning when moving a team (#11357)

2026-08-26 08:08:40 +02:00

rpc_organization_owner_permissions_test.clj

⚡ Fetch team organization in a single batch (#11140)

2026-08-10 13:43:27 +02:00

rpc_profile_test.clj

🐛 Prevent nil theme in profile updates

2026-08-18 11:18:44 +00:00

rpc_project_test.clj

🐛 Add permission checks to WebSocket subscription handlers (#11054)

2026-08-07 11:24:24 +02:00

rpc_quotes_test.clj

🐛 Add accumulated storage byte quota for media uploads (#11038)

2026-08-26 08:33:20 +02:00

rpc_rlimit_test.clj

🐛 Normalize fractional rate-limit reset durations (#11254)

2026-08-17 15:27:06 +02:00

rpc_team_test.clj

🐛 Fix test formatting for get-team-invitation-token

2026-08-26 14:08:41 +02:00

rpc_viewer_test.clj

Merge remote-tracking branch 'origin/main' into staging

2026-06-01 12:57:39 +02:00

rpc_webhooks_test.clj

🐛 Restrict webhook creation/edit/delete to team members only (#11029)

2026-08-05 17:42:49 +02:00

shell_test.clj

🐛 Fix backend util shell tests

2026-07-09 19:34:15 +02:00

storage_test.clj

✨ Add media-processor service for image and font processing (#10767)

2026-08-05 09:41:48 +02:00

tasks_telemetry_test.clj

✨ Add sso events (#11265)

2026-08-19 07:58:44 +02:00

util_blob_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

util_objects_map_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

util_pointer_map_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

util_ssrf_test.clj

🐛 Mock DNS resolution in SSRF tests for environments without public DNS (#11040)

2026-08-17 11:21:25 +02:00