[dev] [Marfuen] mariano/secure-rds-tls#2765

Closed

github-actions[bot] wants to merge 18 commits into

mainfrom

mariano/secure-rds-tls

Commits on May 6, 2026

chore(db): commit AWS RDS global CA bundle for verified TLS
Marfuen
committed
feat(db): strict TLS gating in shared prisma client

Marfuen
and
claude
committed
refactor(db): extract resolveSslConfig and use bun:test for consistency

Marfuen
and
claude
committed
feat(app): strict TLS gating in app prisma client

Marfuen
and
claude
committed
refactor(db): expose resolveSslConfig via subpath export; dedupe in apps/app

Marfuen
and
claude
committed
feat(portal): strict TLS gating in prisma client

Marfuen
and
claude
committed
feat(framework-editor): strict TLS gating in prisma client

Marfuen
and
claude
committed
feat(trigger): add caBundleExtension for verified-TLS Postgres

Marfuen
and
claude
committed
fix(prisma): inline TLS gating in app clients to avoid published-package dependency

Marfuen
and
claude
committed
fix(prisma): skip hostname check when CA bundle is set (NLB compatibility)

Marfuen
and
claude
committed
feat(vercel): bundle RDS CA cert with Next.js apps for verified TLS

Marfuen
and
claude
committed
docs: deploy checklist for verified-TLS env vars

Marfuen
and
claude
committed
fix(prisma): lazy-init client to prevent TLS throw during Next.js build
Marfuen
committed
fix(db): point ssl-config types at dist (src/ is not published)
Marfuen
committed
chore: temporary debug endpoint to verify Vercel cert path
Marfuen
committed
chore: rename debug-tls route (avoid Next.js private-folder rule)
Marfuen
committed
chore: remove debug-tls route after verifying Vercel cert path
Marfuen
committed
feat(db): ship RDS CA bundle in published @trycompai/db package
Marfuen
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[dev] [Marfuen] mariano/secure-rds-tls#2765

[dev] [Marfuen] mariano/secure-rds-tls#2765
github-actions[bot] wants to merge 18 commits into
mainfrom
mariano/secure-rds-tls

Commits on May 6, 2026

chore(db): commit AWS RDS global CA bundle for verified TLS

feat(db): strict TLS gating in shared prisma client

refactor(db): extract resolveSslConfig and use bun:test for consistency

feat(app): strict TLS gating in app prisma client

refactor(db): expose resolveSslConfig via subpath export; dedupe in apps/app

feat(portal): strict TLS gating in prisma client

feat(framework-editor): strict TLS gating in prisma client

feat(trigger): add caBundleExtension for verified-TLS Postgres

fix(prisma): inline TLS gating in app clients to avoid published-package dependency

fix(prisma): skip hostname check when CA bundle is set (NLB compatibility)

feat(vercel): bundle RDS CA cert with Next.js apps for verified TLS

docs: deploy checklist for verified-TLS env vars

fix(prisma): lazy-init client to prevent TLS throw during Next.js build

fix(db): point ssl-config types at dist (src/ is not published)

chore: temporary debug endpoint to verify Vercel cert path

chore: rename debug-tls route (avoid Next.js private-folder rule)

chore: remove debug-tls route after verifying Vercel cert path

feat(db): ship RDS CA bundle in published @trycompai/db package