Oliver Jensen 7e8683aef0 feat(auth): screen the login password inline and restrict the session on a fresh breach hit ... A breach found during a login previously only flagged the account for the NEXT login, handing out one free unrestricted 24h session. The HIBP screen is now awaited before the session key is minted (worst case one 5s window per user per 24h, fail-open unchanged), so a fresh hit restricts the current session and the dashboard routes straight to change-password. Also repairs two casualties of merge f5e47974db that the layout tests caught: the lost usePathname import and a call to migratedHref, which staging renamed to uiHref.		2026-09-11 21:55:31 +02:00
..
litellm-dashboard	feat(auth): screen the login password inline and restrict the session on a fresh breach hit	2026-09-11 21:55:31 +02:00
Dockerfile	fix(docker): bump nginx runtime to 1.31.5-alpine3.24 and pin digest to resolve critical CVEs (#39561)	2026-09-03 08:46:07 -07:00
nginx.conf	fix(ui): boot the UI image as an arbitrary uid by anchoring nginx writes under /tmp (#37982)	2026-08-24 11:57:36 -07:00