Commit Graph
10 Commits
Author SHA1 Message Date
austinandClaude Opus 4.8 5db38831f5 Inherit the platform contract tests, and extend the shared Renovate preset
build-and-publish / build (push) Successful in 1m22s
PlatformWebContract asserts what this app must do because it is on the platform: an /api
path matching no controller 404s rather than returning the SPA, health is UP, the liveness
and readiness probes exist, and a client-side route forwards to the shell. That first one
shipped broken to six live sites and was found by typing a URL by hand; now it fails a
build instead.

renovate.json is three lines pointing at austin/renovate-config. The rules were copied per
repo, so they matched only by luck and a change was six edits.

Platform 0.1.9.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01XXKjx7FNyRVAjU8dgB5KhN
2026-07-23 09:46:54 -05:00
austin 8bf9b134fb Update bennett platform to v0.1.7 2026-07-23 12:44:07 +00:00
austinandClaude Opus 4.8 49aeb6ede4 Move search and the front-page decisions out of the browser into Java
build-and-publish / build (push) Successful in 1m19s
Search downloaded every post to every visitor and filtered the list with String.includes,
so it could only ever match what a summary carries — a phrase from the body of a post was
unfindable, and the cost grew with each post published. It is now a query
(/api/posts/search) that searches the body too.

The home page picked 'the latest post' by taking element zero of that list, which was only
correct for as long as the API happened to return posts in that order. /api/home now
decides what leads, what counts as recent, and the tag counts, in one call.

Tag counting moves out of the controller into TagService, shared by both.

The LIKE escaping needed an explicit ESCAPE clause: there is no default escape character to
rely on, and posts are markdown full of literal backslashes — escaping with a backslash
turned a search for '%' into a search for backslashes and matched unrelated posts. Caught by
the new tests.

Also on platform 0.1.6 (contact-form header-injection fix).

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01XXKjx7FNyRVAjU8dgB5KhN
2026-07-23 06:33:41 -05:00
austin c438746197 Update bennett platform to v0.1.5 2026-07-23 08:28:47 +00:00
austin 9b81bd750f Update bennett platform to v0.1.2 2026-07-23 02:28:35 +00:00
austinandClaude Opus 4.8 1a7f0f1980 Bump platform to 0.1.1 (netty HIGH CVE fixes)
build-and-publish / build (push) Successful in 1m24s
Picks up netty 4.2.16.Final, patching CVE-2026-59901/-55831/-55833/-56745 which Trivy
gated on in the previous build.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01XXKjx7FNyRVAjU8dgB5KhN
2026-07-22 21:06:44 -05:00
austinandClaude Opus 4.8 2b772d2931 Pin platform 0.1.0 release and wire up automatic propagation
build-and-publish / build (push) Failing after 1m17s
- parent/BOM now point at the immutable 0.1.0 release instead of a SNAPSHOT
- declare the Gitea Maven registry so Renovate can discover new platform versions
- renovate.json: group platform bumps into one automerged PR
- CI: drop --no-cache (releases are immutable, so caching is safe again) and add
  workflow_dispatch so rebuild-all-apps.sh can force an urgent rebuild

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01XXKjx7FNyRVAjU8dgB5KhN
2026-07-22 21:03:06 -05:00
austinandClaude Opus 4.8 2a0dd1ae6b Restore the app files (prior commit mis-scoped its tar)
build-and-publish / build (push) Failing after 8s
Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-07-22 20:50:58 -05:00
austinandClaude Opus 4.8 eaad7b916e Add admin UI + MinIO image uploads
- Admin API: list/edit posts (incl. drafts, raw markdown), moderate comments, subscribers,
  author bio/links, and presigned image upload to MinIO (bucket is public-read for covers).
- Admin UI at /admin: post editor with cover-image upload, comment moderation, subscriber list.
- Public security switched to authenticated-paths so static assets (/images, /data) stay public.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-07-22 20:50:45 -05:00
austinandClaude Opus 4.8 cbe8a764b0 Rewrite as a Spring Boot app on the Bennett platform
build-and-publish / build (push) Successful in 1m38s
Restores the real backend lost with Supabase (posts, authors, comments, subscriptions, admin) in
Postgres, seeds the existing markdown posts, and rebuilds the site as a Vite/React SPA served by
Spring — keeping the original styling (serif + tan accent) and content.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-07-22 20:35:51 -05:00