Pico

Recent Commits

• Eric Bower (26 Jul 26)

  fix(prose): use correct filepath for prose images

• Eric Bower (23 Jul 26)

  fix(pgs): missing cfg

• Eric Bower (23 Jul 26)

  revert(pgs): add file max logic

• Eric Bower (23 Jul 26)

  chore(pgs): service now requires pico+

• Eric Bower (17 Jul 26)

  chore: ban ip runbook

• Eric Bower (17 Jul 26)

  fix: missing pico-ssh in ci script

• Eric Bower (17 Jul 26)

  chore: update pico.sh script

• Eric Bower (17 Jul 26)

  feat: block account creation by ip

• Eric Bower (16 Jul 26)

  fix: mime type case statement fallthrough

• Eric Bower (18 Jun 26)

  fix(rsync): properly delete `._pico_keep_dir` first so os.Remove suceeds

• Eric Bower (14 Jun 26)

  fix(pgs): broken url for imgproxy integration

• Silvio Tomatis (11 Jun 26)

  fix(pgs): never cache http-pass responses Password-protected (http-pass) projects could be read without the password. The shared cache keys entries on subdomain+method+uri with no auth component, and only declines to store responses marked private or no-store. http-pass assets were served as 200 with `cache-control: max-age=60, s-maxage=600, must-revalidate`, so the first authenticated request populated the cache and every subsequent unauthenticated visitor got a cache hit that bypassed the password gate for the duration of the TTL. Mark http-pass asset responses `private, no-store` so the shared cache refuses to store them. The override is applied after the user `_headers` are merged, so a project's own cache-control cannot re-enable caching of protected content. Adds a regression test asserting an http-pass response is served non-cacheable even when a `_headers` file requests aggressive caching.

• Eric Bower (31 May 26)

  fix: strip debug from linker

• Eric Bower (31 May 26)

  refactor: move go-rsync-receiver into pico monorepo

• Eric Bower (16 May 26)

  fix: require testcontainers for pico.sh ci

• Eric Bower (16 May 26)

  fix(ci): cleanup

• Eric Bower (16 May 26)

  chore(ci): cleanup

• Eric Bower (16 May 26)

  docs(pgs): help cmd for forms

• Eric Bower (11 May 26)

  chore: pico.sh ci script

• Eric Bower (11 May 26)

  fix(pgs): _headers should override default cache-control Closes: https://github.com/picosh/pico/issues/215

• Eric Bower (11 May 26)

  feat(tui): analytics now displays device breakdown You can see mobile vs desktop

• Eric Bower (11 May 26)

  docs: runbooks

• Eric Bower (11 May 26)

  fix: script

• Eric Bower (11 May 26)

  chore: script to find orphaned buckets

• Eric Bower (06 May 26)

  fix(auth): mime type can include charset e.g. text/html; charset=utf-8

• Eric Bower (05 May 26)

  chore(visits): new indexes and parallel queries

• Eric Bower (05 May 26)

  chore: remove dev artifacts

• Eric Bower (03 May 26)

  refactor(visits): aggregate visit tables Previously we had an analytics_visits table that held all the raw visit data. This mean our analytics UI was constantly executing queries across 18 mil records which was extremely slow. This change aggregates those analytics every month and then deletes all the raw data. We keep 2 months worth of raw data and then everything else gets pushed into the aggregate tables.

• Eric Bower (04 May 26)

  chore: script reap edits

• Eric Bower (03 May 26)

  fix: reap should look skip anyone that has pico+