Michel Roegl-Brunner 1a6dbb0bf8 fix(pocketbase-ai-bot): use @pocketbase-bot handle and harden confirm flow ...

- Trigger and all user-facing text now use @pocketbase-bot (the bare
  @pocketbase handle collides with an existing account)
- Confirm flow only trusts a pocketbase-pending marker found in a comment
  authored by this bot app (performed_via_github_app.id == PB_BOT_APP_ID),
  preventing a forged-marker spoof; decoded operations are re-validated
  against the field/op allow-lists before applying (shared sanitizeOperations)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-02 14:03:17 +02:00

..

scripts

Cleanup workflows (#12818)

2026-03-12 14:29:48 +01:00

auto-update-app-headers.yml

Revert from Self Hosted to Ubunut-latest for actions (#5965)

2025-07-14 10:04:35 +02:00

autolabeler.yml

Cleanup: remove frontend, move JSONs to json/ top-level (#12813)

2026-03-12 13:59:18 +01:00

changelog-archive.yml

action: prevent duplicate History section in changelog-archive workflow

2026-02-04 14:04:34 +01:00

changelog-pr.yml

chore(github): improve PR template and cleanup obsolete references | move contribution guide (#9700)

2025-12-05 23:08:58 +01:00

check-node-versions.yml

fix(workflow): only flag node drift when local is behind upstream (#14874)

2026-06-02 10:25:05 +02:00

close_issue_in_dev.yaml

ci(workflows): harden new-script close, slug-match VED issue close, 7-day lock

2026-06-02 11:43:08 +02:00

close-new-script-prs.yml

ci(workflows): harden new-script close, slug-match VED issue close, 7-day lock

2026-06-02 11:43:08 +02:00

close-tteck-issues.yaml

chore: replace helper-scripts.com with community-scripts.com (#13244)

2026-03-24 20:50:40 +01:00

delete-pocketbase-entry-on-removal.yml

chore: fix pocketbase workflows

2026-03-18 16:57:20 +01:00

github-release.yml

Revert from Self Hosted to Ubunut-latest for actions (#5965)

2025-07-14 10:04:35 +02:00

lock-issue.yaml

ci(workflows): harden new-script close, slug-match VED issue close, 7-day lock

2026-06-02 11:43:08 +02:00

pocketbase-ai-bot.yml

fix(pocketbase-ai-bot): use @pocketbase-bot handle and harden confirm flow

2026-06-02 14:03:17 +02:00

pocketbase-bot.yml

fix(pocketbase-bot): recognize /pocketbase command on any line of a comment

2026-06-02 11:52:47 +02:00

push-json-to-pocketbase.yml

workflows: update workflows, templates to support arm64. (#14653)

2026-05-23 07:46:44 +10:00

stale_pr_close.yml

Create stale_pr_close.yml (#12243)

2026-02-24 09:41:06 +01:00

trigger_github_pages_redirect.yml

Add GitHub Actions workflow for Pages redirect

2026-03-11 08:37:46 +01:00

update-script-timestamp-on-sh-change.yml

Update script timestamp handling and dev promotion

2026-03-23 10:37:57 +01:00