J8k3
1045fcc3c5
ci(sync): auto-resolve recurring upstream conflicts, fix workflow restore
...
The weekly upstream sync hard-failed whenever upstream touched files the
fork diverges on (README branding) or removed a now-generated file
(tests/operations/index.mjs). It also had a latent bug: the workflow
restore ran 'git checkout HEAD -- .github/workflows/' *after* the merge
had already auto-committed, so HEAD was the merge commit and the restore
was a no-op.
- Merge with --no-commit so HEAD stays the pre-merge fork commit, making
the workflow restore actually keep the fork's workflows.
- Auto-resolve the two recurring conflicts: keep the fork's README, and
honour upstream deletions of generated/gitignored files.
- Fail loudly (and abort the merge) on any other, unexpected conflict
instead of pushing a half-resolved tree.
- Exit cleanly when already up to date.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-15 08:21:03 -04:00
J8k3
6e85321409
Merge upstream/master (v11.1.0) into master
...
Resolved conflicts from the weekly sync that had been failing since
2026-06-08:
- README.md: kept fork branding (cyberchef.jacobmarks.com) and the
[p01]-[p25] payment-recipe links, while adopting upstream's updated
[10] recipe and new [13] entry (rewritten to the fork domain) so the
newly-merged body references resolve.
- tests/operations/index.mjs: accepted upstream's deletion. It is now
auto-generated by generateOpsIndex.mjs during 'grunt configTests'
(and gitignored), so the fork's custom-operation tests are still
discovered from tests/operations/tests/.
- .github/workflows/: restored to the fork's versions, matching the
sync_upstream.yml behaviour (preserves build-and-deploy + sync).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-15 08:17:10 -04:00
Kendall Goto
7a28e0534b
Fix: Reverse highlights unwind incorrectly ( #2022 )
...
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
2026-06-15 10:06:51 +01:00
Shivam Kumar
31808e83d5
Fix Uint8Array concat crash in Parse IPv4 header ( #2409 )
2026-06-15 09:34:25 +01:00
qais
3f62b14d83
Fix typos and documentation errors (bytes→bits, wrong release link, spelling) ( #2404 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-06-15 09:15:40 +01:00
axjp
91178a8e6f
Add integer check for alphabet size ( #2458 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-06-15 09:05:24 +01:00
sky
7f0544e1c6
fix: validate hexdump width upper bound ( #2514 )
2026-06-15 09:02:56 +01:00
GCHQDeveloper581
92ea854ea7
Bump v11.1.0 ( #2558 )
v11.1.0
2026-06-13 09:35:49 +01:00
GCHQDeveloper581
894560f6ce
Security: Add fix, and tests, for Lorem Ipsum DoS issue ( #2557 )
2026-06-13 08:53:15 +01:00
dependabot[bot]
dbcfb06d3e
chore (deps): bump the patch-updates group with 4 updates ( #2552 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 12:21:54 +01:00
dependabot[bot]
86d579b1ec
chore (deps): bump the actions-dependencies group with 2 updates ( #2551 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 12:14:19 +01:00
dependabot[bot]
d7c7ac4aaf
chore (deps): bump the docker-dependencies group with 2 updates ( #2550 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 12:01:28 +01:00
dependabot[bot]
78d558c858
chore (deps): bump protobufjs from 8.5.0 to 8.6.2 in the minor-updates group ( #2553 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 11:46:48 +01:00
GCHQ Developer 85297
9d43334429
Security Policy Update ( #2547 )
2026-06-11 11:36:01 +01:00
GCHQDeveloper581
4bd609a5ee
Fix spurious error messages generated during webpack build ( #2545 )
2026-06-10 12:52:59 +01:00
dependabot[bot]
f30668aeff
chore (deps): bump shell-quote from 1.8.3 to 1.8.4 ( #2543 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 11:41:49 +01:00
Fufu
0c0f330ae2
Implementing ROR13 feature ( #2539 )
2026-06-10 11:21:29 +01:00
J8k3
65fc9618b6
docs(agents): clarify lint runs locally on W: share, not Docker
2026-06-09 23:16:36 -04:00
J L
5105aad91d
New operation improvements ( #1431 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-06-09 09:36:07 +01:00
GCHQDeveloper581
61deeb8165
Npm and yarn/major version updates ( #2527 )
...
Updated versions:
* cspell 10.0.1
* grunt-eslint 26.0.0
* grunt-webpack 8.0.0
* bignumber.js 11.1.2
* cbor 10.0.12
* diff 9.0.0
* protobufjs 8.5.0
* tesseract.js 7.0.0
* ua-parser-js 2.0.10
2026-06-08 14:21:26 +01:00
andreas
d735496641
Update README to reflect AES Decrypt changes ( #2502 )
2026-06-05 20:19:24 +01:00
Harel Katz
c929819189
feat: add Escape Smart Characters operation ( #2391 )
2026-06-05 13:44:20 +01:00
andreas
da202d54f1
feat: Get AES IV from input (QoL) ( #2471 )
2026-06-05 11:23:38 +01:00
Syed Ishmum Ahnaf
20b46bf1a0
fix: validate text encoding options ( #2497 )
2026-06-05 10:47:48 +01:00
dependabot[bot]
3034d63f90
chore (deps): bump the minor-updates group with 5 updates ( #2500 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (removed jq-web update, and added it to dependabot.yml block list)
2026-06-05 10:26:43 +01:00
dependabot[bot]
8a5c60ac74
chore (deps): bump the patch-updates group with 2 updates ( #2499 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 09:47:23 +01:00
dependabot[bot]
5318bab19f
chore (deps): bump nginxinc/nginx-unprivileged from df0e9ed to 0a1e718 in the docker-dependencies group ( #2498 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 09:40:18 +01:00
A Normal Ladd
72ca1aeec7
Add remove ANSI escape codes operation ( #2143 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (additional test case)
2026-06-03 10:57:13 +01:00
GCHQ Developer 85297
89b5c7dee3
Fix option ingredients being overwriten ( #2341 )
2026-06-02 20:35:21 +01:00
github-actions[bot]
8dd1f09d49
Merge remote-tracking branch 'upstream/master'
2026-06-01 11:05:46 +00:00
dependabot[bot]
53d6f0c746
chore (deps): bump qs and express ( #2478 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-30 12:44:28 +01:00
dependabot[bot]
a50e868cb9
chore (deps): bump tmp from 0.2.5 to 0.2.7 ( #2479 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-30 12:38:34 +01:00
dependabot[bot]
bdcd5fa8b1
chore (deps): bump the patch-updates group across 1 directory with 6 updates ( #2463 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 11:31:26 +01:00
dependabot[bot]
bf2e12d141
chore (deps): bump the docker-dependencies group across 1 directory with 2 updates ( #2468 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 11:05:45 +01:00
dependabot[bot]
61c00ae6da
chore (deps): bump terser from 5.46.2 to 5.48.0 ( #2385 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 16:02:34 +01:00
GCHQDeveloper581
5383da81f8
Make dependabot quieter ( #2467 )
...
* group remaining update categories
* add cooldowns
2026-05-28 14:51:05 +01:00
Blank0120
6b780bc507
update sitemap ( #2443 )
2026-05-28 12:59:33 +01:00
GCHQDeveloper581
98bb5f117d
Bump webpack-dev-server to 5.2.4 ( #2417 )
2026-05-28 09:38:25 +01:00
GCHQDeveloper581
772f7866bf
Fix pgp tests ( #2461 )
...
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com> (fix for #2267 )
2026-05-28 09:17:43 +01:00
dependabot[bot]
b47c1c0547
chore (deps): bump the patch-updates group across 1 directory with 4 updates ( #2438 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:33:27 +01:00
dependabot[bot]
3da6a51ef7
chore (deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 ( #2439 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:24:07 +01:00
dependabot[bot]
ea29704a73
chore (deps): bump docker/login-action from 4.1.0 to 4.2.0 ( #2441 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:20:47 +01:00
dependabot[bot]
4de8d338aa
chore (deps): bump docker/metadata-action from 6.0.0 to 6.1.0 ( #2442 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:09:51 +01:00
github-actions[bot]
7830bac871
Merge remote-tracking branch 'upstream/master'
2026-05-25 09:45:00 +00:00
J8k3
db1e72d05c
docs: standardize Session Start and Commit Scope in AGENTS.md
...
Align wording with the shared standard used across all four repos in
this project family. No behavioral change — same rules, consistent text.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 14:07:46 -04:00
J8k3
16a893e70a
test(payment): add 5 golden-value tests for AES ECB, AES CTR, DUKPT TDES CBC
...
Covers the remaining untested cipher profiles in PaymentEncryptData /
PaymentDecryptData. Values are pinned from a clean run against the forge
upstream library, catching regressions in mode selection, IV wiring,
and padding behaviour without re-deriving cryptographic outputs.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 14:05:23 -04:00
J8k3
60a89aa64f
test(payment): add 7 new test cases covering json output shape and TDES cipher profiles
...
JSON output shape (covering recent ksn/bdk additions):
- DUKPT Derive AES Key: IK JSON output includes ksn, iki, counter
- DUKPT Derive TDES Key: IPEK JSON output includes ksn and bdk
Payment cipher coverage (previously only AES CBC was tested):
- Payment Encrypt/Decrypt Data: TDES ECB (APC cross-validated block 1)
- Payment Encrypt/Decrypt Data: TDES CBC (derived from passing re-encrypt chain)
- Payment Encrypt Data: DUKPT TDES ECB Data variant (ANSI X9.24-1; APC variant
mismatch documented in test comment and PAYMENT_RECIPES.md)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 13:03:31 -04:00
J8k3
4ce7860a19
fix(dukpt): add KSN/BDK to JSON output for AES and TDES DUKPT derive operations
...
AES DUKPT IK JSON was missing ksn, iki, counter; working key was missing ksn.
TDES DUKPT IPEK and session key JSON were missing ksn and bdk.
Both now mirror the full derivation context, making json=true self-contained for debugging and cross-validation.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 10:52:43 -04:00
Blank0120
6a3a370bb1
update bson ( #2425 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (update of dependabot excluded packages)
2026-05-23 12:42:40 +01:00
dependabot[bot]
fba4a0a0af
chore (deps): bump webpack from 5.106.2 to 5.107.1 ( #2428 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:47:11 +01:00