• AOC v1.7.17
    Release / build-and-push (push) Successful in 1m49s
    CI / lint-and-test (push) Successful in 2m6s
    Stable

    tomas.kracmar released this 2026-05-29 04:46:02 +00:00 | 1 commits to main since this release

    Security & Hardening

    Alpine.js CSP Build

    The frontend now loads the Alpine.js CSP build (@alpinejs/csp@3.15.12) instead of the standard distribution. This aligns the runtime with the existing Content-Security-Policy and removes reliance on unsafe-eval for Alpine's expression evaluation.

    Office 365 Management Activity API Window Clamping

    The unified audit log fetcher now respects the API's hard limits to prevent rejected requests during catch-up scenarios or stale watermarks:

    • Maximum query window: 24 hours
    • Maximum lookback: 7 days
    • When a persisted since watermark is older than either limit, the start time is clamped to the most recent allowable window. Subsequent fetches continue catching up normally.

    Docker Image

    git.cqre.net/cqrenet/aoc-backend:v1.7.17
    
    Downloads