Skip to content

History / OpenSSF Best Practices

Revisions

  • Consolidate the wiki: canonical Coding Standards, merged Architecture, split Provider Setup Restructure the wiki into one coherent, audience-grouped set with a single home for each fact. - New Coding-Standards page: the one canonical statement of the architecture, comment/documentation (#864), and object-oriented rules; the repo's CLAUDE.md and CONTRIBUTING.md now point here instead of restating them. - Merged the two stale, mutually-overlapping Architecture pages into one, re-based on the current module-DAG reality (the old pages claimed the module split was "not pursued" and that no IPluginServiceRegistrator existed — both were wrong and contradicted docs/ARCHITECTURE.md). Cites modules and types, never file:line, so it cannot drift on a move again. - Split Provider-Setup (1172 lines, ~73% not provider-specific) into Provider Setup (recipes) + a new Hardening & Options Reference; folded the security- control narrative into the Security Model. Every moved section left a pointer. - Merged Release-Policy + Release-QA-Checklist into Releasing (renamed the per-release ladder to "release promotion ladder" to end the Beta-rung name collision); merged OpenSSF-Best-Practices + Maturity-Map into Security & Maturity Self-Assessment. Old slugs kept as redirect stubs. - Rebuilt the sidebar into four audience groups (Getting started / How it works / Security / Standards & process). Fixed the broken anchors, corrected the beta publish-trigger to the daily scheduler (it is not "every merge"), de-referenced the design records to module/type names, and trimmed Home's README duplication.

    @iderex iderex committed Jul 20, 2026
  • Updated OpenSSF Best Practices (markdown)

    @iderex iderex committed Jul 19, 2026
  • Refresh wiki to Alpha stage, packaged-release install, and three-part versioning - Home/Installation/Migrating: replace the In-Development banner with the Alpha maturity; document the plugin-catalog install (stable/beta manifest URLs) and the multi-target net9.0/net10.0 build for Jellyfin 10.11 and 12.0; drop the build-from-source-only / no-manifest wording now that the channels are live. - Release-Policy/OpenSSF: describe the three-part X.Y.Z scheme, with the channel and Jellyfin generation as a tag/release-name suffix and Z covering both bug-fix and security, instead of the retired four-part X.Y.Z.W (W=security). - Provider-Setup: fix "recieve" typo. - OpenSSF/Release-Policy/Release-QA-Checklist/Rollback/Threat-Model: use the wiki page name as link text for docs that moved out of the repo (Review Gate, Rollback, Release QA Checklist, Provider Setup, Architecture Internals, Threat Model).

    @iderex iderex committed Jul 19, 2026
  • Migrate design, process, and provider docs from the repo into the wiki Add wiki pages for the per-provider setup guides, the delivery-pipeline threat model, the release/rollback/review-gate/QA process docs, the DORA delivery metrics, the OpenSSF best-practices assessment, the single-logout and SSO-only-login design notes, and an architecture-internals code map. Retarget every internal link: cross-doc references now point at wiki pages, references to files that stay in the repo point at full github blob URLs, and provider screenshots point at raw.githubusercontent URLs. Add a grouped navigation to Home (user docs / architecture & security / process & release / design records), cross-link Login-Flow and Architecture with the new Architecture-Internals map, and cross-link Security-Model with Threat-Model.

    @iderex iderex committed Jul 19, 2026