[#63] Security: Conduct formal third-party security audit#80

Closed

szamaniai wants to merge 151 commits into

FlossWare:mainfrom

szamaniai:monai/solution-63-20260602-204700

Commits on May 30, 2023

Commits on May 31, 2023

Initial version
sfloess
committed

Commits on Jun 30, 2023

Commits on Aug 28, 2023

WIP - Latest
Flossy
committed

Commits on Sep 25, 2023

WIP - Latest
Flossy
committed

Commits on May 16, 2026

refactor: complete refactoring to Java 21 with X.Y versioning and CI/CD

Flossy
and
claude
committed
feat: Add interactive terminal UI for Nexus

Flossy
and
claude
committed
feat: Add intelligent caching for Nexus API queries

Flossy
and
claude
committed
docs: Add comprehensive caching documentation and tests

Flossy
and
claude
committed
feat: Add optional UI default values from properties file

Flossy
and
claude
committed
refactor: Rename project from nexus to jnexus

Flossy
and
claude
committed
fix: Update RUNNING.md with correct JNexusUI class name

Flossy
and
claude
committed

Commits on May 18, 2026

feat: Add Swing/AWT GUIs and comprehensive improvements

Flossy
and
claude
committed

Commits on May 19, 2026

feat: Add interactive credential collection and save functionality

Flossy
and
claude
committed
feat: Add table-based GUI with sortable columns and row selection

Flossy
and
claude
committed
feat: Add summary row and Enter key shortcuts

Flossy
and
claude
committed
docs: Update all documentation with UI mockups and new features

Flossy
and
claude
committed
feat: Add "All" option to repository dropdown and display config file

Flossy
and
claude
committed
fix: Auto-populate Repository field with first repository from list

Flossy
and
claude
committed
docs: Update documentation for Repository field auto-population

Flossy
and
claude
committed
feat: Display Nexus URL in GUIs for server visibility

Flossy
and
claude
committed
feat: Replace Repository text field with dropdown and add MB column

Flossy
and
claude
committed
docs: Update documentation for UI enhancements

Flossy
and
claude
committed
fix: Use numeric sorting for file size columns in Swing GUI

Flossy
and
claude
committed
feat: Move totals from table to status area in Swing GUI

Flossy
and
claude
committed
feat: Add gigabytes column and GB display in status area

Flossy
and
claude
committed

Commits on May 20, 2026

feat: Add advanced search, filtering, and statistics capabilities

Flossy
and
claude
committed
fix: Add packagecloud repository for jcurses dependency resolution

Flossy
and
claude
committed
Automated Version Bump 1.1 [ci skip]
Version Bump
committed
test: Add comprehensive unit tests for enhanced features

Flossy
and
claude
committed
Automated Version Bump 1.2 [ci skip]
Version Bump
committed

Commits on May 22, 2026

feat: Add Android module foundation with multi-module Gradle structure

Flossy
and
claude
committed
Automated Version Bump 1.3 [ci skip]
Version Bump
committed
test: Add unit tests to jnexus-core module

Flossy
and
claude
committed
Automated Version Bump 1.4 [ci skip]
Version Bump
committed
feat: Add Android mobile app with full feature parity

Flossy
and
claude
committed
Automated Version Bump 1.5 [ci skip]
Version Bump
committed
ci: Add Android build and release workflows

Flossy
and
claude
committed
Automated Version Bump 1.6 [ci skip]
Version Bump
committed
docs: Update CLAUDE.md for multi-module Android architecture

Flossy
and
claude
committed
Automated Version Bump 1.7 [ci skip]
Version Bump
committed
fix: Update Android workflows to use JDK 17 for Gradle 9.5.1

Flossy
and
claude
committed
Automated Version Bump 1.8 [ci skip]
Version Bump
committed
fix: Update jnexus-core and jnexus-android to Java 17

Flossy
and
claude
committed
Automated Version Bump 1.9 [ci skip]
Version Bump
committed
fix: Add isCached() and getCacheAge() to NexusHttpClient interface

Flossy
and
claude
committed
Automated Version Bump 1.10 [ci skip]
Version Bump
committed
fix: Add JUnit Platform Launcher dependency to jnexus-core

Flossy
and
claude
committed
Automated Version Bump 1.11 [ci skip]
Version Bump
committed
fix: Add gradle.properties with AndroidX enabled for jnexus-android

Flossy
and
claude
committed
Automated Version Bump 1.12 [ci skip]
Version Bump
committed
fix: Add root gradle.properties for AndroidX configuration

Flossy
and
claude
committed
Automated Version Bump 1.13 [ci skip]
Version Bump
committed
fix: Disable Jetifier to support Java 21 dependencies

Flossy
and
claude
committed
Automated Version Bump 1.14 [ci skip]
Version Bump
committed
feat: Upgrade build toolchain to Java 21

Flossy
and
claude
committed
Automated Version Bump 1.15 [ci skip]
Version Bump
committed
fix: Remove explicit Java toolchain to resolve dependency conflict

Flossy
and
claude
committed
Automated Version Bump 1.16 [ci skip]
Version Bump
committed
fix: Upgrade Android Gradle Plugin to 8.7.3 for JDK 21 support

Flossy
and
claude
committed
Automated Version Bump 1.17 [ci skip]
Version Bump
committed
feat: Add Android resource files (icons, strings, themes)

Flossy
and
claude
committed
Automated Version Bump 1.18 [ci skip]
Version Bump
committed
fix: Add Material Icons Extended and opt-in for experimental APIs

Flossy
and
claude
committed
Automated Version Bump 1.19 [ci skip]
Version Bump
committed
fix: Remove incomplete UI screen files to enable successful build

Flossy
and
claude
committed
Automated Version Bump 1.20 [ci skip]
Version Bump
committed
feat: Implement complete Android UI with all screens

Flossy
and
claude
committed
Automated Version Bump 1.21 [ci skip]
Version Bump
committed
fix: Correct method names and forEach usage in StatsScreen
Flossy
committed
Automated Version Bump 1.22 [ci skip]
Version Bump
committed
fix: Resolve Credentials class name conflict with OkHttp
Flossy
committed
Automated Version Bump 1.23 [ci skip]
Version Bump
committed
fix: Fully qualify second Credentials reference in NexusClientOkHttp
Flossy
committed
Automated Version Bump 1.24 [ci skip]
Version Bump
committed
fix: Wrap JSONException in IOException for checked exception handling
Flossy
committed
Automated Version Bump 1.25 [ci skip]
Version Bump
committed
feat: Add ProGuard rules for release builds
Flossy
committed
Automated Version Bump 1.26 [ci skip]
Version Bump
committed
fix: Upload APKs even when tests fail
Flossy
committed
Automated Version Bump 1.27 [ci skip]
Version Bump
committed
fix: Use debug APK for releases (auto-signed)
Flossy
committed
Automated Version Bump 1.28 [ci skip]
Version Bump
committed
docs: Add release badges and quick download section to README
Flossy
committed
Automated Version Bump 1.29 [ci skip]
Version Bump
committed
docs: Update CHANGELOG and Android README to reflect completion
Flossy
committed
chore: Bump Android version to 1.2.1
Flossy
committed
fix: Skip desktop CI when only Android/docs change
Flossy
committed
fix: Also ignore main.yml changes in desktop CI
Flossy
committed
docs: Update CI-CD.md and RUNNING.md with Android workflows and mobile UI
Flossy
committed
chore: Update version to 1.2 (X.Y format, not X.Y.Z)
Flossy
committed
feat: Add native iOS/iPadOS/macOS apps with SwiftUI

Flossy
and
claude
committed
docs: Add comprehensive competitive analysis comparing JNexus to alternatives
Flossy
committed

Commits on May 24, 2026

Commits on May 25, 2026

feat: Add progress callbacks for long-running operations - Fixes #11

Flossy
and
claude
committed
test: Add comprehensive security integration tests - Fixes #9

Flossy
and
claude
committed
test: Add comprehensive error handling edge case tests - Fixes #14

Flossy
and
claude
committed
feat: Implement AES-256-GCM password encryption - Fixes #2

Flossy
and
claude
committed
docs: Update security documentation for password encryption

Flossy
and
claude
committed
refactor: Replace local CredentialEncryption with jencrypt library
Flossy
committed
docs: Update SECURITY.md for jencrypt integration
Flossy
committed
feat: Add URL encoding for repository names and continuation tokens - Fixes #20
Flossy
committed
fix: Improve retry logic to include HTTP 408 and 429 - Fixes #5
Flossy
committed
refactor: Desktop now uses jnexus-core for data models - Fixes #17 (partial)

Flossy
and
claude
committed
refactor: NexusClient now implements NexusHttpClient interface - Fixes #17 (Stage 2)

Flossy
and
claude
committed
docs: Update CHANGELOG for v1.31 - ADRs and partial #17/#18 fixes
Flossy
committed
refactor: NexusService uses NexusHttpClient interface - Progress on #17/#18

Flossy
and
claude
committed
fix: Cross-platform improvements - resource leaks, security, thread-safety, error handling, and testing

Flossy
and
claude
committed
fix: Build consistency, security, and iOS safety improvements

Flossy
and
claude
committed
feat: Add accessibility features to Swing GUI and unify versioning - Fixes #42, #46

Flossy
and
claude
committed
test: Add UI test coverage for all GUI classes - Fixes #38

Flossy
and
claude
committed
feat: Add i18n/l10n foundation with English resource bundle - Partial #45

Flossy
and
claude
committed
feat: Complete i18n/l10n implementation with 4 languages - Fixes #45

Flossy
and
claude
committed
fix: Use specific DateTimeParseException instead of broad Exception - Fixes #47

Flossy
and
claude
committed
feat: Implement all iOS unit tests with URLProtocol mocking - Fixes #48

Flossy
and
claude
committed
fix: Security and code quality improvements - Fixes #50, #51

Flossy
and
claude
committed
perf: Reuse thread pool for regex validation - Fixes #53

Flossy
and
claude
committed

Commits on May 26, 2026

Add CODE_OF_CONDUCT.md and GPL v3.0 LICENSE

Flossy
and
claude
committed
Add pragmatic 100% test coverage enforcement

Flossy
and
claude
committed

Commits on May 28, 2026

Add automated quality gate workflow

Flossy
and
claude
committed
perf: Implement HTTP connection pooling and HTTP/2 optimization - Fixes #64

Flossy
and
claude
committed
feat: Add code complexity metrics and quality analysis tools - Fixes #73

Flossy
and
claude
committed
feat: Add SBOM generation and security.txt - Fixes #70

Flossy
and
claude
committed
docs: Formalize API versioning strategy and compatibility policy - Fixes #65

Flossy
and
claude
committed
Rename project: jnexus → nexus-java

Flossy
and
claude
committed
Reset version to 1.0

Flossy
and
claude
committed
Fix cross-project dependencies

Flossy
and
claude
committed

Commits on May 29, 2026

Fix documentation references to use new artifact names

Flossy
and
claude
committed

Commits on Jun 2, 2026