Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
This commit adds a new feature that lets server administrators set a maximum number of stores each non-admin user can create, both globally and per-user. It is a new restriction/control feature, not a fix for an existing vulnerability. The…
New authorization/enforcement logic added (store creation quota)Server admins explicitly exempted from quotaSQL CTE performs conditional insert based on role and count
This commit changes how the wallet transactions page reads its paging settings (skip/count). Instead of taking them directly from the URL, it routes them through a shared helper called ParseListQuery that also reads and saves user preferen…
Parameter binding change for paging controlsStandardization onto shared preference/cookie helperNo input validation or authorization changes visible in diff
This commit introduces a new, more narrowly-scoped permission called 'CanSendStoreEmail' and applies it to the store email-sending API. Previously, sending store emails required the broader 'CanModifyStoreSettings' permission, which also a…
Principle of least privilege: separates email-sending capability from full store settings modificationAuthorization policy change on a sensitive API endpoint (store email sending)New permission registered with both unscoped and scoped display labels
This commit changes several BTCPay Server API endpoints so that callers no longer need to supply a store ID when working with existing invoices, payment requests, and pull payments. The server now looks up the store automatically from the …
API route simplification removes explicit storeId parameter for resource-scoped operationsAuthorization still relies on existing resource-level middleware/filters and unchanged policy attributesNo new access-control logic is introduced in the diff
This commit adds a simple optional comment field to the wallet send screen in BTCPay Server. Users can type a short note (up to 200 characters) when preparing a transaction, and that note is saved alongside the transaction after it is broa…
This commit adds a new admin-only feature that lets store administrators manually edit subscription start and expiration dates for subscribers, both through the web interface and the API. It is a normal feature addition, not a vulnerabilit…
New privileged admin/API capability added (manual date override)Authorization enforced by existing subscription management policyServer-side date validation present (expiration after start)
This commit fixes a store dashboard widget that displays wallet balance charts and numbers. The changes ensure chart labels are rendered correctly (especially the last data point) and convert API timestamps from Unix seconds into ISO date …
This commit adds a feature that lets BTCPay Server administrators download and update language translation packs from a GitHub repository. The code fetches JSON translation files over the internet, stores them in the server's database, and…
Server-side HTTP request to third-party GitHub raw content domain based on admin-supplied language selectionDownloaded JSON is parsed and persisted into database-backed localization dictionaries without visible schema or signature validationNo code signing, checksum verification against a trusted source, or content-type validation is present in the diff
This commit is a routine internationalization (i18n) refactor. It marks more user-interface text strings in BTCPay Server's web pages as translatable and updates the default translation dictionary. There is no security-relevant change to a…
This commit removes the old Selenium browser-automation test suite and its supporting infrastructure from the BTCPay Server project. It deletes test files, package references, Docker services, and CI job definitions, and updates two commen…
This commit adds a CI safety check that refuses to build Docker images unless the current Git commit has a valid GPG signature. It is a hardening improvement, not a fix for an active vulnerability. There is no indication in the commit or t…
GPG signature verification added to CI pipeline before Docker image build/pushRelease checklist updated to require signed commits and avoid GitHub UI mergesNo product code or cryptographic logic changes; purely CI/release-process hardening