Block a user
config: add [platform] section to stack.toml for domain, registry, repo
diag: resolve label IDs dynamically from Gitea API instead of hardcoding
ci: extract hardcoded registry URL from all Woodpecker pipelines
api health: bib reports "degraded" — invalid limit kwarg
api health: bib reports "degraded" — invalid limit kwarg
api health: duckdb reports "down" — wrong path in stack.toml
api health: duckdb reports "down" — wrong path in stack.toml
vuln: zotero — 3 CRITICAL, 39 HIGH
Rebuild results (a10cab2):
Fixed 25 of 42 original vulns:
- GnuPG (CVE-2025-68973): all 9 packages patched via
apt-get upgrade - WebKit (CVE-2025-14174, CVE-2025-43529): all 8 packages…
[P17] Harden api image — apt upgrade, non-root, HEALTHCHECK