aykhans/sarin
1
0 Fork 0
mirror of https://github.com/aykhans/sarin.git synced 2026-10-17 22:53:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
512 Commits 6 Branches 33 Tags
17dfa160515c23472f85ebe757bdc1a4a4383bc9
Commit Graph
512 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
aykhans 17dfa16051 feat(script): add res.bytes() so JavaScript can read a binary body 2026-09-29 23:22:51 +04:00
aykhans a327c4978b fix: report one error text when a response body is too large 2026-09-29 23:06:22 +04:00
aykhans 9d6e4e6bf8 chore(template): raise the remote file timeout to 30s 2026-09-29 22:59:42 +04:00
aykhans 9c7b7c26a0 refactor(script): drop the per-call maxBodySize and its client cache 2026-09-29 10:58:25 +04:00
aykhans ef5907dc0c fix: cap body limits at 1GiB and key script clients by the exact size 2026-09-29 00:55:04 +04:00
aykhans 1956eb1c44 fix(script): enforce script body limits without streaming 
Streaming accepted a chunked body cut at a chunk boundary as complete,
so the limit now comes from the client that reads the body, picked per
requested size. Script requests keep their own default, maxBodySize
accepts sizes like 10MiB, and files sarin downloads for itself are
capped at 64MiB.
 2026-09-29 00:41:48 +04:00
aykhans f1d91e3d77 feat: limit response body sizes 
fasthttp allocates the body from the declared Content-Length before
reading it, so a server could exhaust memory by declaring a size it
never sends. The new max response body config bounds every response,
defaults to 10MiB and accepts sizes like 10MiB or 2MB. Scripts get the
same as a maxBodySize option on http().
 2026-09-28 22:49:39 +04:00
aykhans 412a02fea3 chore: bump golangci-lint to v2.14.0 2026-09-27 01:05:07 +04:00
aykhans 8da05bb10c fix(stats): key generation failures by source and bound the key count 2026-09-27 01:03:04 +04:00
aykhans c32949c8e0 fix(script): convert non-string header, param and cookie values to text 2026-09-26 01:17:49 +04:00
aykhans a30c862936 fix(script): bind script HTTP requests to the run context 2026-09-25 22:34:20 +04:00
aykhans 5d91141f80 fix(script): stringify thrown JavaScript values through Runtime.Try 2026-09-24 22:34:59 +04:00
aykhans 878ca6dfbd fix(script): bound maxRedirects to 100 and reject out of range values 2026-09-24 19:08:58 +04:00
aykhans 9b0e7c4304 fix: dial IPv6 hosts by enabling dual-stack and trying every resolved address 2026-09-23 01:03:42 +04:00
aykhans d4c7dcc42c fix: apply per-request timeouts to script HTTP proxy dials 2026-09-23 00:45:44 +04:00
aykhans 00226b0eb7 fix: size script HTTP client connection pool to worker count 2026-09-22 19:29:51 +04:00
aykhans a60287b78b docs: document http() and Lua json in scripts 2026-09-20 23:30:16 +04:00
aykhans 529420ee5a feat(script): replace followRedirects with maxRedirects http option 2026-09-20 23:18:21 +04:00
aykhans 8b437b487c feat(script): add http() and json to Lua and JS scripts 2026-09-20 23:02:51 +04:00
aykhans 5ca9cda2b9 docs(cli): show config-file flag type as []string in help text 2026-09-19 00:14:48 +04:00
aykhans 6b03ba9579 refactor(sarin): extract cookie header building into cookieHeaderValue 2026-09-18 22:39:56 +04:00
aykhans 8b6e88bb74 Merge pull request #231 from aykhans/chore/upgrade-go-1.27 
chore: upgrade Go to 1.27.1
v1.4.4 		2026-09-12 00:28:07 +04:00
aykhans 163de9ffc9 fix(nix): update vendorHash for dependency updates 2026-09-12 00:20:11 +04:00
aykhans 969337f4ec chore: bump package version to 1.4.4 2026-09-12 00:15:37 +04:00
aykhans ce6b60520f chore(deps): update goja, x/net, and indirect dependencies 2026-09-12 00:14:04 +04:00
aykhans ae34ae037a chore: upgrade Go to 1.27.1 2026-09-12 00:11:30 +04:00
aykhans 27c00581a9 Merge pull request #230 from aykhans/feat/expand-fakeit-template-functions 
feat: expose additional gofakeit functions
 2026-09-11 22:04:41 +04:00
aykhans db9a65f35f docs: align templating reference with actual runtime behavior 2026-09-11 22:03:05 +04:00
aykhans 082851d25e feat: expose additional gofakeit functions 2026-09-11 20:03:42 +04:00
aykhans 62afa38370 Merge pull request #228 from aykhans/dependabot/go_modules/github.com/valyala/fasthttp-1.74.0 
build(deps): bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0
 2026-09-11 15:48:05 +04:00
github-actions[bot] 373bc39f8e fix(nix): update vendorHash [dependabot skip] 2026-09-11 11:13:28 +00:00
dependabot[bot] 2b7c08519e build(deps): bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0 
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-version: 1.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-11 11:12:37 +00:00
aykhans f974b5d708 Merge pull request #229 from aykhans/dependabot/go_modules/github.com/brianvoe/gofakeit/v7-7.17.0 
build(deps): bump github.com/brianvoe/gofakeit/v7 from 7.16.0 to 7.17.0
 2026-09-11 15:10:43 +04:00
github-actions[bot] 74ac84eb31 fix(nix): update vendorHash [dependabot skip] 2026-09-11 00:14:56 +00:00
dependabot[bot] 9cd3ec0539 build(deps): bump github.com/brianvoe/gofakeit/v7 from 7.16.0 to 7.17.0 
Bumps [github.com/brianvoe/gofakeit/v7](https://github.com/brianvoe/gofakeit) from 7.16.0 to 7.17.0.
- [Release notes](https://github.com/brianvoe/gofakeit/releases)
- [Commits](https://github.com/brianvoe/gofakeit/compare/v7.16.0...v7.17.0)

---
updated-dependencies:
- dependency-name: github.com/brianvoe/gofakeit/v7
  dependency-version: 7.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-11 00:14:00 +00:00
aykhans 42de488430 Merge pull request #227 from aykhans/chore/update-go-toolchain-and-nix 
chore: update Go toolchain and Nix configuration
 2026-09-03 12:58:55 +04:00
aykhans 6e984f039c chore: update Go toolchain and Nix configuration 2026-09-03 12:55:35 +04:00
aykhans 73285b66b5 Merge pull request #226 from aykhans/ci/release-branch-pointer 
ci: point Nix users at a release branch instead of main
v1.4.3 		2026-09-02 23:19:47 +04:00
aykhans f003bd1061 chore: bump package version to 1.4.3 2026-09-02 23:16:24 +04:00
aykhans 07b2bb706e chore(deps): update goja and indirect deps, refresh nix vendorHash 2026-09-02 23:05:45 +04:00
aykhans 67db8ac0e6 chore: bump golangci-lint to v2.13.2 2026-09-02 23:02:56 +04:00
aykhans d99c76d175 ci: point Nix users at a release branch instead of main 2026-09-02 23:01:05 +04:00
aykhans 623c1c4d97 Merge pull request #224 from aykhans/dependabot/go_modules/charm.land/bubbles/v2-2.2.1 
build(deps): bump charm.land/bubbles/v2 from 2.2.0 to 2.2.1
 2026-08-28 16:32:50 +04:00
github-actions[bot] f5eaf76fc4 fix(nix): update vendorHash [dependabot skip] 2026-08-28 00:13:44 +00:00
dependabot[bot] 7ec63a2a43 build(deps): bump charm.land/bubbles/v2 from 2.2.0 to 2.2.1 
Bumps [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](https://github.com/charmbracelet/bubbles/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-28 00:12:48 +00:00
aykhans 492c3f1449 Merge pull request #223 from aykhans/ci/auto-update-vendorhash 
ci(nix): recover a stale vendorHash automatically
 2026-08-25 14:26:59 +04:00
aykhans d03d34576e ci(nix): recover a stale vendorHash automatically 2026-08-25 14:24:23 +04:00
aykhans 8beff615bb Merge pull request #221 from aykhans/dependabot/go_modules/charm.land/bubbles/v2-2.2.0 
build(deps): bump charm.land/bubbles/v2 from 2.1.1 to 2.2.0
 2026-08-25 10:43:40 +04:00
aykhans a85c82e751 fix(nix): update vendorHash for bubbles 2.2.0 2026-08-25 10:28:29 +04:00
dependabot[bot] ad5cfadaf2 build(deps): bump charm.land/bubbles/v2 from 2.1.1 to 2.2.0 
Bumps [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](https://github.com/charmbracelet/bubbles/compare/v2.1.1...v2.2.0)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-25 00:12:58 +00:00