Skip to content

Dev-> 3.0 sync - #3022

Closed
liquidsec wants to merge 262 commits into
3.0from
dev
Closed

Dev-> 3.0 sync#3022
liquidsec wants to merge 262 commits into
3.0from
dev

Conversation

@liquidsec

Copy link
Copy Markdown
Collaborator

No description provided.

liquidsec and others added 30 commits March 27, 2026 17:19
- Set _module_threads = 4 so multiple URLs can be fuzzed in parallel
- Add configurable concurrency option (default 50)
- Wire rate option through to blasthttp request_batch as rate_limit
- Warn when module rate is overridden by more restrictive global setting
- Add test for blasthttp min(global, per_call) rate limit behavior
  (requires blasthttp >= 0.1.4)
…clean

# Conflicts:
#	bbot/modules/httpx.py
#	bbot/test/benchmarks/test_excavate_benchmarks.py
#	bbot/test/benchmarks/test_scan_throughput_benchmarks.py
Replace the single PR-author org membership check with a unified step
that iterates all committers on the PR and checks each against:
1. GitHub API account type (type == "Bot" for App accounts)
2. Org membership

Commits with no associated GitHub login are treated as non-exempt
(prevents bypass via spoofed email with no GitHub account).

Tested on aconite33/cla-workflow-test:
- Human committer: correctly required CLA
- github-actions[bot]: correctly skipped via API type check
Tested on aconite33/cla-workflow-test with only pull-requests:write
and statuses:write -- both human CLA and bot skip paths work correctly.
The CLA assistant uses PERSONAL_ACCESS_TOKEN (app token) for writing
signatures to the remote CLA repo, not GITHUB_TOKEN.
Fix CLA workflow to skip bots and check all committers
liquidsec and others added 28 commits May 19, 2026 21:37
…2-compat

Pin wpscan to 3.8.28 for Ruby 3.2 compat
…i-key

Wire bbot_io_api_key config through to asndb
- Replace set() with dict.fromkeys() to preserve insertion order when
  merging wordlists, ensuring lines=n truncation is deterministic
- Unify lines truncation into a single block shared by both the list
  and single-path branches instead of duplicating it
…cket-regex-for-ips

cloudcheck: skip storage-bucket regex pass for IP-only events
Fix graph orphans for omitted event types
…/uvicorn-gte-0.32-and-lt-0.48

Update uvicorn requirement from <0.47,>=0.32 to >=0.32,<0.48
…date-race

Fix sporadic nuclei test failures from stale template state / Nuclei Environment isolation
…ulti-wordlist

Allow dnsbrute to accept a list of wordlists
@liquidsec

Copy link
Copy Markdown
Collaborator Author

3.0 branch is merged, not relevant

@liquidsec liquidsec closed this May 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants