Commit Graph
16370 Commits
Author SHA1 Message Date
Andras BacsaiandGitHub 8ce054c10c fix(git): use cloud install path for ghe apps (#10576) 2026-07-03 10:24:04 +02:00
Andras Bacsai b90380f542 Merge remote-tracking branch 'origin/next' into ghe-support-helpers 2026-07-03 10:15:29 +02:00
Andras BacsaiandGitHub 67693acce7 fix(parser): preserve file volume state (#10843) 2026-07-03 10:14:39 +02:00
Andras Bacsai d73649ca15 Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url 2026-07-03 10:10:39 +02:00
Andras Bacsai 08e0d02643 Merge remote-tracking branch 'origin/next' into next 2026-07-03 10:09:50 +02:00
Andras Bacsai 4435a46f07 fix(server): hide sentinel status before validation 2026-07-03 10:08:55 +02:00
Andras BacsaiandGitHub 58f6f9e05b feat(dev): add Lima testing server fixtures (#10844) 2026-07-03 10:07:55 +02:00
Andras Bacsai 7b317c44c4 Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react 2026-07-03 10:03:39 +02:00
Andras BacsaiandGitHub bf37db3b5f fix(auth): validate invitation magic link tokens (#10651) 2026-07-03 09:38:48 +02:00
Andras Bacsai c0866d4cb3 fix(auth): preserve invite login with database sessions 2026-07-03 09:38:05 +02:00
Andras Bacsai fd5b2fec9a feat(v5): use resource uuids at boundaries 2026-07-02 21:26:41 +02:00
Andras Bacsai c9416abec6 Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react 2026-07-02 21:25:02 +02:00
Andras Bacsai bec871cf78 fix(team): keep invite link root element 2026-07-02 18:56:57 +02:00
Andras Bacsai eb56287b57 Merge remote-tracking branch 'origin/next' into 10633-invitation-link-redirect 2026-07-02 18:55:25 +02:00
Andras BacsaiandGitHub bb2f70ac3b fix(railpack): isolate buildx from Docker client env (#10840) 2026-07-02 18:53:00 +02:00
Andras BacsaiandGitHub cf6f5a2678 feat(registry): add configurable docker registry url (#9017) 2026-07-02 18:52:46 +02:00
Andras BacsaiandGitHub d32d7cf3d2 Improve application URL handling (#10836) 2026-07-02 18:41:13 +02:00
Andras Bacsai 99f60228ad fix(api): avoid lazy loading nested server secrets 2026-07-02 17:47:22 +02:00
Andras Bacsai c6c7ec1c31 fix(security): validate application domains safely
Use shared domain validation and normalization for application, service, and
preview domains so unsafe host input is rejected consistently.

Cover command-substitution payloads in application domain tests.
2026-07-02 17:47:04 +02:00
Andras Bacsai cc4f666ba2 Merge remote-tracking branch 'origin/next' into improve-application-url-handling 2026-07-02 17:40:31 +02:00
Andras BacsaiandGitHub 954c1e369c fix(env-vars): avoid service preview variable lookups (#10837) 2026-07-02 17:39:16 +02:00
Andras Bacsai d5395f0500 fix(services): preserve template keys for selection 2026-07-02 17:16:40 +02:00
Andras Bacsai ed6352682e Merge remote-tracking branch 'origin/next' into improve-application-url-handling 2026-07-02 16:57:14 +02:00
Andras Bacsai cd95ac3d0d test: cover case-sensitive application URL paths 2026-07-02 16:56:49 +02:00
Andras Bacsai bbff70c8d0 fix: improve application URL handling 2026-07-02 16:52:07 +02:00
Andras BacsaiandGitHub ec34c5192f Add internal endpoint controls (#10835) 2026-07-02 16:49:14 +02:00
Andras Bacsai 3988ad6921 fix(webhooks): resolve hostnames using custom DNS servers
Keep webhook SSRF DNS checks active when general DNS validation is disabled, and include localhost loopback resolution in safe URL validation.
2026-07-02 16:47:55 +02:00
Andras Bacsai 0bf97df9af feat: add internal endpoint controls 2026-07-02 16:35:39 +02:00
Andras BacsaiandGitHub 7a853efa79 chore: inspect PR context (#10834) 2026-07-02 16:27:06 +02:00
Andras BacsaiandGitHub c4772cce49 chore: improve contributor guidelines and issue templates (#8577) 2026-07-02 16:22:25 +02:00
Andras Bacsai 13172849e1 Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber 2026-07-02 15:57:43 +02:00
Andras Bacsai 6871160623 fix(api): gate sensitive storage and GitHub fields
Expose GitHub app secrets and file storage content only when the request has sensitive read access. Hide LocalFileVolume content by default and resolve application UUIDs from route parameters.
2026-07-02 15:50:43 +02:00
Andras BacsaiandGitHub 438eeefa73 feat(api): add REST endpoints for destinations (#10405) 2026-07-02 15:34:30 +02:00
Andras Bacsai 70021c8d5e fix(api): handle destination create races as conflicts 2026-07-02 15:33:01 +02:00
Andras BacsaiandGitHub ae839198d6 feat(mcp): add per-team server toggle (#10771) 2026-07-02 15:19:07 +02:00
Andras Bacsai 88d5aff018 Merge remote-tracking branch 'origin/next' into team-level-mcp-enablement 2026-07-02 15:15:11 +02:00
Andras Bacsai 4ef884e1ac Merge remote-tracking branch 'origin/next' into feat/api-destinations 2026-07-02 15:14:13 +02:00
Andras BacsaiandGitHub 5b1ac432c7 Improve S3 storage handling (#10832) 2026-07-02 15:07:00 +02:00
Andras Bacsai 20b5b90cf9 Merge remote-tracking branch 'origin/next' into improve-s3-storage-handling 2026-07-02 15:06:11 +02:00
Andras Bacsai 78d9244caa fix: improve s3 storage handling 2026-07-02 15:05:05 +02:00
Andras BacsaiandGitHub bed058b826 Improve outbound URL validation (#10833) 2026-07-02 15:02:37 +02:00
Andras BacsaiandGitHub 558520ce75 Improve storage mount path handling (#10831) 2026-07-02 15:01:33 +02:00
Andras Bacsai a06c1a7bf5 Improve storage mount path handling 2026-07-02 14:54:38 +02:00
Andras Bacsai c7f014017b Improve outbound URL validation 2026-07-02 14:46:46 +02:00
Andras BacsaiandGitHub 39ae16de42 Improve team resource route handling (#10829) 2026-07-02 14:34:27 +02:00
Andras Bacsai a121386ab4 Merge branch 'next' into improve-resource-route-handling 2026-07-02 13:25:47 +02:00
Andras Bacsai fb2d477e48 fix: improve team resource route handling 2026-07-02 13:05:27 +02:00
Andras Bacsai 74f4d04f53 fix(backups): default S3 storage for backup schedules
Show the S3 storage selector even when S3 backups are disabled, save
storage changes immediately, and improve responsive confirmation buttons.
2026-07-02 12:47:54 +02:00
Andras Bacsai 76d429fb74 fix(sidebar): center unread badge in settings menu 2026-07-02 12:35:28 +02:00
Julien BouquillonandGitHub 77086e28af Merge branch 'v4.x' into api-application-preview-deployments 2026-07-01 19:11:16 +02:00