4 Commits

Include renames

Author	SHA1	Message	Date
KyuubiYoru	dc2de76963	feat(server): answer the root path and probe container health ... A bare GET / previously returned an empty 404, which reads as an outage even while the service is healthy. The root now redirects to /diagnostics when the dashboard is enabled and otherwise returns a small JSON status pointing at /health/live. The route is excluded from the OpenAPI description, so the frozen v1 surface is unchanged. The chiseled runtime image ships no shell or curl, so the container healthcheck re-enters the server assembly with --health-probe, which queries the local liveness endpoint and reports through the exit code. Dockerfile and compose both wire the probe (30s interval, 3 retries).	2026-08-31 03:55:17 +02:00
KyuubiYoru	b235670afd	fix(security): pin runtime to .NET 10.0.11 chiseled (#1) ... The 10.0.9 ASP.NET chiseled base shipped Microsoft.NETCore.App 10.0.9, which the release trivy gate flags with six HIGH advisories: CVE-2026-47302, CVE-2026-50524, CVE-2026-50528, CVE-2026-50651 and CVE-2026-57108 (fixed in 10.0.10) plus CVE-2026-62901 (fixed in 10.0.11). Move the runtime stage to 10.0.11-noble-chiseled, pinned by multi-architecture manifest digest as before, so every finding clears in one step. The build stage keeps SDK 10.0.301: the published server is framework dependent, so the shipped runtime comes from the aspnet base alone and the discarded builder layer is never scanned.	2026-08-22 21:20:30 +02:00
KyuubiYoru	cc5793f935	feat(release): add reproducible signed artifacts (#19)	2026-07-16 17:48:21 +02:00
KyuubiYoru	08729ae25c	feat(deployment): add secure Linux runtime (#17)	2026-07-16 15:03:04 +02:00