shadowdao and Claude Sonnet 5.5
764bb27d54
Merge upgrade-compat: seamless in-place upgrade from Boundary
...
ci / check (push) Successful in 21m11s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 11:14:31 -07:00
shadowdao and Claude Sonnet 5.5
d07030a10b
Make in-place upgrade from HashiCorp Boundary seamless
...
Linux packages: migrate /etc/boundary.d to /etc/threshold.d without
clobbering, reuse the boundary service user, carry over service
enablement with a boundary.service alias, provide a boundary command.
Docker: accept /boundary/config.hcl, boundary command, /boundary symlink.
CLI: deprecation notice when invoked as boundary (stderr only).
Dev mode: also create *.threshold.dev aliases.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 11:12:29 -07:00
shadowdao and Claude Sonnet 5.5
80ece9c4fc
Bump moby/sys/user to v0.4.1; document accepted test-only docker/docker findings
...
ci / check (push) Successful in 7m13s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:49:41 -07:00
shadowdao and Claude Sonnet 5.5
de2ee74928
CI: don't run on tag pushes
...
ci / check (push) Failing after 18m6s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:37:57 -07:00
shadowdao and Claude Sonnet 5.5
f4b9a16788
Merge plugins/threshold-forks: repoint plugin mains at Threshold forks
...
ci / check (push) Failing after 17m43s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:37:42 -07:00
shadowdao and Claude Sonnet 5.5
5fdfc8c2cc
Repoint plugin mains at Threshold forks and renamed sdk
...
- boundary host/storage plugin mains use repo.anhonesthost.net/CyberCoveLLC/threshold-plugin-{aws,azure,gcp,minio}
- all mains import threshold/sdk (no more duplicate proto registrations)
- main module paths renamed under repo.anhonesthost.net/CyberCoveLLC/threshold
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:37:42 -07:00
shadowdao and Claude Sonnet 5.5
44fd64f588
api: depend on published sdk v0.1.0 (drop local replace)
...
ci / check (push) Failing after 5m49s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:35:07 -07:00
shadowdao and Claude Sonnet 5.5
a5ba9460e5
Merge rebrand/phase-b: rename Go module path to repo.anhonesthost.net/CyberCoveLLC/threshold
...
ci / check (push) Failing after 19m6s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:34:24 -07:00
shadowdao and Claude Sonnet 5.5
962d708fdd
Rename Go module paths to repo.anhonesthost.net/CyberCoveLLC/threshold
...
Rename root, api and sdk module paths (imports, go.mod, go_package,
ldflags, build scripts, buf configs) and regenerate protobuf/gateway
code with the project's pinned toolchain. Wire identifiers unchanged.
api gets a local replace for sdk; root/api/sdk require v0.1.0.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:33:41 -07:00
shadowdao and Claude Sonnet 5.5
443e483a16
Merge rebrand/phase-a: Threshold CLI/binary, packaging, docs, legacy fallbacks
...
ci / check (push) Failing after 12m27s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:23:51 -07:00
shadowdao and Claude Sonnet 5.5
613415624e
Merge security/go-1.26.9: Go 1.26.9, x/net, AWS SDK bumps, Gitea CI
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:23:50 -07:00
shadowdao and Claude Sonnet 5.5
9220d2d6a5
Ignore plugin main binaries produced by go build
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:23:47 -07:00
shadowdao and Claude Sonnet 5.5
b30dead452
Bump golang.org/x/net to v0.60.0 (GO-2026-6603/6610/6611/6612/6617) and gofmt
...
Go fuzz test / Fuzz grants.Parse (push) Successful in 4m29s
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:21:04 -07:00
shadowdao and Claude Sonnet 5.5
ab4ed3c9e5
Rebrand user-visible CLI text; add legacy fallbacks for keyring, cache dir and version prefix
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:20:06 -07:00
shadowdao and Claude Sonnet 5.5
3559b33595
CI: consolidate matrix into a single job to spare the shared runner pool
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 10:08:07 -07:00
shadowdao and Claude Sonnet 5.5
19fde0dbca
CI: skip vet composites analyzer (pre-existing upstream test warnings)
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 09:56:35 -07:00
shadowdao and Claude Sonnet 5.5
4cb3bda43a
Add fork notice, NOTICE file, README/CONTRIBUTING rewrite; drop HashiCorp logo assets
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 09:53:17 -07:00
shadowdao and Claude Sonnet 5.5
5f5d35b9ff
Rename binary to threshold and update build/release packaging
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 09:53:13 -07:00
shadowdao and Claude Sonnet 5.5
306960d24b
Add THRESHOLD_* env var support with BOUNDARY_* fallback
...
Introduce api.Getenv/api.LookupEnv which prefer THRESHOLD_X and fall back to legacy BOUNDARY_X; use them for user-facing env var reads.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 09:45:44 -07:00
shadowdao and Claude Sonnet 5.5
96606a98d9
Add Gitea Actions CI: build, vet, govulncheck, osv-scanner
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 09:38:02 -07:00
shadowdao and Claude Sonnet 5.5
cc16bf9f74
Bump Go to 1.26.9 and patch known vulnerabilities
...
- go directive and .go-version 1.26.5 -> 1.26.9 in all 14 modules
(clears Go stdlib advisories in net/http, crypto/tls, html/template,
net/textproto, encoding/xml, encoding/asn1, net/url)
- golang.org/x/net v0.58.0 -> v0.60.0
- aws plugin: aws-sdk-go-v2 eventstream v1.7.8, s3 v1.97.3
govulncheck: 0 reachable vulnerabilities across all modules.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-12 09:37:24 -07:00