Commit Graph
15244 Commits
Author SHA1 Message Date
Andras Bacsai 6bfc289ec5 chore(release): bump version to 4.0.0-beta.473 2026-04-09 17:50:16 +02:00
Andras BacsaiandGitHub 8805135a08 fix(ui): dashboard homepage add buttons are invisible in light mode (#9456) 2026-04-09 17:49:28 +02:00
Andras BacsaiandGitHub 8adc2135bb fix(user-deletion): safely clean up team-owned Git app sources (#9435) 2026-04-09 16:58:55 +02:00
Andras Bacsai 7d2c776ae7 fix(team): transfer instance-wide sources to root team on deletion
Instead of nullifying source references on applications when a team is
deleted, transfer instance-wide GitHub/GitLab apps to the root team
(team_id=0) so they remain available to other teams that depend on them.

Non-instance-wide sources are still deleted along with the team.
2026-04-09 14:51:52 +02:00
Andras Bacsai ad662e5560 Merge remote-tracking branch 'origin/next' into 8172-investigate-user-delete-bug 2026-04-09 14:51:22 +02:00
Andras BacsaiandGitHub cedfa1db71 fix(ui): Initialize latestVersion in Upgrade component mount (#7774) 2026-04-09 14:41:39 +02:00
Andras Bacsai dbd2b68a08 fix(upgrade): clear stale upgrade flag when version is already current
Refactor upgrade state initialization into a shared `refreshUpgradeState()`
method used by both `mount()` and `checkUpdate()`. The method now uses
`version_compare` to validate upgrade availability and clears the
`new_version_available` flag in InstanceSettings when the current version
is already equal to or newer than the latest version, preventing stale
upgrade notifications from persisting after a successful update.
2026-04-09 14:31:12 +02:00
Andras Bacsai 02558d8672 Merge remote-tracking branch 'origin/next' into pr-7774-fix-upgrade-notification-modal 2026-04-09 14:16:28 +02:00
Andras Bacsai e012e98a34 Merge remote-tracking branch 'origin/next' into 8172-investigate-user-delete-bug 2026-04-09 14:08:54 +02:00
Andras Bacsai 92d1168228 chore: bump version to 4.0.0-beta.472 2026-04-09 12:13:39 +02:00
Andras BacsaiandGitHub 1c92c0d6a6 fix(service): netbird-client wrong volume path (#9484) 2026-04-09 09:49:15 +02:00
Andras BacsaiandGitHub 6e9fecb2c4 fix(service): Several templates on wrong catagory. (#9449) 2026-04-09 09:48:46 +02:00
Andras BacsaiandGitHub 26daf1f469 build(deps-dev): bump vite from 7.3.0 to 7.3.2 (#9457) 2026-04-09 09:15:22 +02:00
1a4913213f Update templates/compose/elasticsearch-with-kibana.yaml
Co-authored-by: ShadowArcanist <162910371+ShadowArcanist@users.noreply.github.com>
2026-04-09 00:43:59 -05:00
Immanuel RajandGitHub d0c9b4eed8 Change netbird-client volume path in YAML config 2026-04-09 00:00:38 +05:30
Andras BacsaiandGitHub e4d293cb9a fix(validation): allow quoted docker run options in custom config (#9481) 2026-04-08 14:23:18 +02:00
Andras Bacsai e36ae82d9d fix(validation): allow quoted shell args in docker options
Permit single-quoted arguments in SHELL_SAFE_COMMAND_PATTERN while
keeping dangerous metacharacters blocked, and add security test cases
for quoted --entrypoint and --hostname values.
2026-04-08 14:21:49 +02:00
Andras BacsaiandGitHub fadada1e07 chore(service): update nextcloud healthcheck endpoint (#9470) 2026-04-08 14:12:25 +02:00
ShadowArcanist 58239dc92c chore(service): update nextcloud healthcheck endpoint 2026-04-07 23:32:57 +05:30
dependabot[bot]andGitHub 85205406c0 build(deps-dev): bump vite from 7.3.0 to 7.3.2
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.0 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-06 21:04:04 +00:00
rosslh 17ba325924 fix(ui): make dashboard add buttons visible in light mode
The "+" icon buttons next to "Projects" and "Servers" headings used
text-white without a dark: prefix, making them invisible on light
backgrounds. Changed to text-black dark:text-white so the icon is
visible in both themes.

Fixes #9454
2026-04-06 15:09:54 -04:00
Iisyourdad 8446e0c049 (Changing Mattermost catagory) 2026-04-06 13:57:40 -05:00
Iisyourdad a4fc43564d fix(template): Several templates on wrong catagory. 2026-04-06 11:35:16 -05:00
Andras Bacsai cb62b0d543 Merge remote-tracking branch 'origin/next' into 8172-investigate-user-delete-bug 2026-04-06 18:30:04 +02:00
Andras BacsaiandGitHub c360dbdaea chore(community): remove Algora bounty program references (#9436) 2026-04-06 18:29:51 +02:00
Andras BacsaiandGitHub 4b698d2cb3 fix(docker): add apk upgrade to helper, realtime, and development Dockerfiles (#9437) 2026-04-06 18:29:32 +02:00
Andras BacsaiandGitHub 43fd840324 fix(service): nextcloud workers exhaustion due to low interval healthcheck (#9440) 2026-04-05 21:04:43 +02:00
ShadowArcanist 606a860e97 fix(service): nextcloud workers exhaustion due to low interval healthcheck 2026-04-06 00:07:02 +05:30
Andras BacsaiandGitHub 5743244396 fix(service): allow overriding GOTRUE_SITE_URL in Supabase template (#9079) 2026-04-05 20:21:24 +02:00
Andras BacsaiandGitHub a652517d23 Merge branch 'next' into fix/supabase-gotrue-site-url 2026-04-05 20:21:11 +02:00
Andras BacsaiandGitHub bebbf16e43 feat(service): update Supabase to current latest versions (#8316) 2026-04-05 20:21:05 +02:00
Andras BacsaiandGitHub a232d94ac2 fix(service): directus cors not applied in preflight requests (#9081) 2026-04-05 20:20:14 +02:00
Andras BacsaiandGitHub 5c85077b98 feat(service): add grimmory (#9109) 2026-04-05 20:19:56 +02:00
Andras BacsaiandGitHub 2a2a258392 fix(service): n8n task-runners health check fails (#9309) 2026-04-05 20:19:45 +02:00
Andras BacsaiandGitHub 8e24a39a7c fix(service): fix librechat healthcheck and update dependencies (#9358) 2026-04-05 20:19:31 +02:00
Andras BacsaiandGitHub bd9785e679 feat(service): update Rivet to v2.2.0 (#9378) 2026-04-05 18:49:17 +02:00
Andras BacsaiandGitHub 8f4239bffa fix(template): Minecraft was on wrong category (#9387) 2026-04-05 18:48:54 +02:00
Andras BacsaiandGitHub 3eaa721277 feat(service): update Convex to current latest version (#9392) 2026-04-05 18:48:33 +02:00
Andras BacsaiandGitHub 5d01498cc0 fix(services): bump images of alexandrie to fix security issue (#9434) 2026-04-05 18:47:50 +02:00
Andras Bacsai 4d8a5ba40f fix(security): bump helper and realtime versions across manifests
Update helper to 1.0.13 and realtime to 1.0.12 in constants,
version manifests, and production/windows docker compose files,
including nightly variants.
2026-04-05 18:32:05 +02:00
Andras Bacsai acd07abcce fix(security): run apk upgrade in development Dockerfile
Add `apk upgrade --no-cache` before installing GnuPG and PostgreSQL
repository keys to ensure base Alpine packages are patched.
2026-04-05 18:18:58 +02:00
Andras Bacsai 8f7bb449da Merge remote-tracking branch 'origin/next' into 8172-investigate-user-delete-bug 2026-04-05 18:15:54 +02:00
Andras Bacsai ad05362539 chore(community): remove bounty-related templates and docs
Delete the enhancement bounty issue template and remove bounty references
from bug reports, PR template wording, CONTRIBUTING guidelines, and README
badges/sponsors to align contribution messaging.
2026-04-05 18:09:52 +02:00
Andras Bacsai 3f564f9b2e fix(user-deletion): handle GitHub app sources across team cleanup
Limit team cleanup to apps owned by the deleted team and nullify cross-team application source references before deleting team-owned sources. Adds feature tests covering user deletion with GitHub app-backed applications, preserving system-wide apps, and nullifying external source links.
2026-04-05 18:08:06 +02:00
Andras BacsaiandGitHub 914d7e0b50 v4.0.0-beta.471 (#9206) 2026-04-05 16:20:33 +02:00
SmaugandGitHub 86c2518d06 Update Docker images to latest versions 2026-04-05 13:36:24 +02:00
Charles Dabard 7d9a0748bf fix(security): add apk upgrade to helper and realtime Dockerfiles
The production Dockerfile already runs apk upgrade at build time.
The helper and realtime Dockerfiles were missing this step.

The helper (Alpine 3.21) ships with CVE-2025-15467 in OpenSSL 3.3.5.
The realtime (Alpine 3.18) has outdated OpenSSL 3.1.2 with HIGH CVEs.

Adding apk upgrade before apk add makes both images consistent
with the production Dockerfile.
2026-04-05 00:23:17 +02:00
ShadowArcanistandGitHub fa73d45b41 fix dangerous cors config for directus service 2026-04-03 19:26:06 +05:30
ShadowArcanistandGitHub c5ec79bbb8 fix dangerous cors config for directus-with-postgresql service 2026-04-03 19:25:51 +05:30
ShadowArcanistandGitHub 7e31c6d83a fix healthcheck path for grimmory service 2026-04-03 18:59:26 +05:30