Andras Bacsai
9e021c4037
fix(api): enforce destination access and cleanup networks
...
Require admin team membership for destination mutations, return invalid-token
responses for tokenless requests, and remove standalone Docker networks when
deleting destinations.
2026-06-15 17:15:56 +02:00
Andras Bacsai
9665aa292c
fix(api): block invalid destination types and service deletions
2026-06-15 17:03:01 +02:00
Andras Bacsai
96ea892748
fix(sidebar): remove theme switcher from sidebar navbar
2026-06-15 13:25:31 +02:00
Andras Bacsai and GitHub
58af19b378
fix(auth): enforce policies across API and Livewire ( #8628 )
2026-06-15 13:18:29 +02:00
Andras Bacsai
dfd4d7e802
feat(resource-details): make copy fields visible and accessible
2026-06-15 13:17:53 +02:00
Andras Bacsai
371eb1e38c
fix(upgrade): hide upgrade labels in collapsed sidebar
2026-06-15 12:56:19 +02:00
Andras Bacsai
d2deaa8363
fix(auth): restrict Sentinel access and register S3 policy
2026-06-15 12:31:30 +02:00
Andras Bacsai
46a9578d69
test: align mobile application actions expectations
2026-06-15 12:06:54 +02:00
Andras Bacsai
78d8afa602
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-15 12:05:19 +02:00
Andras Bacsai and GitHub
52739141ee
fix(previews): clean up closed PR previews after update failures ( #10180 )
2026-06-12 20:08:34 +02:00
Andras Bacsai
442ed98169
feat(project): add mobile action controls for resources
...
Show restart, stop, redeploy, and update actions directly in the mobile
headers for applications, databases, and services, with coverage for the
mobile resource menu behavior.
2026-06-12 16:09:26 +02:00
Andras Bacsai
1aca7ead8c
fix(logs): constrain activity monitor output width
2026-06-12 16:06:20 +02:00
Andras Bacsai
61d2d17f52
feat(subscription): add Stripe action controls
...
Add subscription action handling and tests for cancel, resume, and refund flows while resolving StripeClient through the container.
2026-06-12 15:54:21 +02:00
Andras Bacsai and GitHub
018d267b3f
fix(service): limit Grafana extra fields to Grafana images ( #10562 )
2026-06-09 22:16:52 +02:00
Andras Bacsai
ee74889f19
feat(resources): show mobile action buttons
2026-06-09 18:45:06 +02:00
vuguul
4c77504b5e
fix(service): limit Grafana extra fields to Grafana images
2026-06-05 14:29:29 -06:00
Andras Bacsai
a9d9bfdbe3
feat(resources): add responsive mobile navigation menus
...
Unify application, database, and service headings with mobile-friendly
resource menus, route-aware configuration tabs, and confirmation triggers for
advanced actions. Standardize restart warnings with status badges and cover the
responsive menu and badge rendering behavior with feature tests.
2026-06-05 14:57:57 +02:00
Andras Bacsai
51583069f4
feat(status): unify resource status badges
...
Introduce a shared status badge component and reuse it across resource status views, service cards, and the server navbar. Replace icon-only refresh controls with consistent badge buttons and cover the new status layout with feature tests.
2026-06-05 13:31:20 +02:00
Andras Bacsai
22f9f96db6
chore: inspect staged changes for commit message
2026-06-04 15:24:53 +02:00
Andras Bacsai
8a2373e49f
fix(ui): standardize permission denial callouts
2026-06-04 11:37:16 +02:00
Andras Bacsai
5973bb4d4f
fix(security): hide notification secrets from non-admins
...
Prevent users without update permission from reading notification credentials and manual webhook secrets in Livewire state or rendered forms.
2026-06-04 11:24:19 +02:00
Andras Bacsai
062ad57740
fix(security): enforce team access on mutable actions
...
Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.
2026-06-04 11:03:06 +02:00
Andras Bacsai
9dca7ca351
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-04 10:18:54 +02:00
Andras Bacsai
981b670eb4
feat(services): show template update timestamps
2026-06-04 09:34:11 +02:00
Andras Bacsai
bc165f1976
fix(postgres): preserve Coolify image tag during upgrade
...
Keep the running Coolify image tag when restarting the stack after
PostgreSQL upgrade or rollback so compose does not fall back to latest.
2026-06-03 14:54:23 +02:00
Andras Bacsai
08735e6cc8
feat(postgres): add internal database upgrade script
...
Publish upgrade-postgres.sh with install and upgrade flows, include the
PostgreSQL compose override when present, and sync the script to BunnyCDN.
2026-06-03 14:27:01 +02:00
Andras Bacsai and GitHub
f8960f44fa
fix(api): apply private_key_uuid in update_server ( #10416 )
2026-06-03 13:49:36 +02:00
Andras Bacsai
217541a987
fix(api): allow disabling build server mode
2026-06-03 13:48:31 +02:00
Andras Bacsai and GitHub
acc929a7b0
feat(ui): add search functionality for environment variables ( #10421 )
2026-06-03 13:48:03 +02:00
Andras Bacsai
1802522c60
fix(env-vars): treat search wildcards literally
...
Escape SQL LIKE wildcard characters in environment variable searches and hide production or preview sections when the filtered results are empty.
2026-06-03 13:43:26 +02:00
Andras Bacsai
09d8ba0d89
fix(api): prevent partial server updates on invalid disk schedule
2026-06-03 13:03:12 +02:00
Andras Bacsai
36d44faaf9
fix(git): apply HTTP transport config to PR checkouts
2026-06-03 12:59:45 +02:00
Andras Bacsai
ffe37fc892
Merge remote-tracking branch 'origin/next' into 5251-large-repo-deploy-bug
2026-06-03 12:56:27 +02:00
Andras Bacsai
d7524a743d
fix(env-vars): show single empty state for searches
...
Move the environment variable search field above the production section
and hide production and preview headings when a search has no results.
2026-06-03 12:54:50 +02:00
Andras Bacsai
d300ddf902
Merge remote-tracking branch 'origin/next' into feat/search-to-envs
2026-06-03 12:47:37 +02:00
Andras Bacsai
b3f3ddf0ce
Merge remote-tracking branch 'origin/next' into fix/api-update-server-private-key
2026-06-03 12:44:31 +02:00
Andras Bacsai
9dabaabdf1
fix(git): force HTTP/1.1 for repository imports
...
Apply HTTP/1.1 transport config to HTTPS git clone and submodule commands,
including GitHub App credential rewrites, to avoid flaky large repo imports.
2026-06-03 12:42:04 +02:00
Andras Bacsai
8b8ec9c4f9
Merge remote-tracking branch 'origin/next' into fix/api-update-server-private-key
2026-06-03 12:27:41 +02:00
Andras Bacsai
ec7a8b5ea9
fix(scheduled-jobs): link skipped service database backups
...
Render skipped service database backups with the service database backup route while preserving standalone database backup links.
2026-06-03 12:25:13 +02:00
Andras Bacsai
c0c918f1c5
Merge remote-tracking branch 'origin/next' into fix/clipboard-https-secure-context
2026-06-03 12:05:09 +02:00
Andras Bacsai
419a551d76
fix(server): return SSH username validation messages
2026-06-03 11:57:46 +02:00
Andras Bacsai
da70e34472
test(api): cover server private key updates
...
Add feature coverage for updating a server from private_key_uuid, rejecting unknown or cross-team private keys, and preserving the existing key when the field is omitted.
2026-06-03 11:43:52 +02:00
Andras Bacsai
d525c12457
fix(env): keep dev view env saves independent of search
...
Search environment variables case-insensitively by key, add accessible search
labeling, and ensure switching to developer view after searching loads the full
variable set so non-matching entries are not removed on save.
2026-06-03 11:40:54 +02:00
Andras Bacsai
9aa40bb5f0
Merge remote-tracking branch 'origin/next' into jean/allow-dots-username
2026-06-03 11:38:55 +02:00
Andras Bacsai
bc2afdf02e
fix(server): share SSH username validation
...
Centralize SSH username rules and sanitization so dotted usernames are
accepted consistently across API, onboarding, and Livewire server forms.
2026-06-03 11:38:48 +02:00
Andras Bacsai
d742b4a678
Merge remote-tracking branch 'origin/next' into fix/clipboard-https-secure-context
...
# Conflicts:
# resources/views/livewire/project/application/deployment/show.blade.php
2026-06-03 11:38:47 +02:00
Andras Bacsai
13e94a499d
feat(destinations): split Docker resources into separate page
...
Move standalone Docker destination resource listings out of the general
settings view and add a searchable resources page with team-scoped tests.
2026-06-03 11:24:36 +02:00
Andras Bacsai
c0c8fd7f11
Merge remote-tracking branch 'origin/next' into jean/sentinel-ux
2026-06-03 11:10:19 +02:00
Andras Bacsai
d892d0ad10
fix(sentinel): refresh server nav after toggles
...
Dispatch server show refreshes after Sentinel and metrics toggles, preserve editable Sentinel form fields during restart events, and gate custom image editing by update permission.
2026-06-03 11:10:13 +02:00
Andras Bacsai
aaa540421f
feat(application): preserve crash restart limit status
...
Stop applications after they hit the crash restart limit without clearing
restart tracking, surface the stopped-limit warning in status UI, and use
the application link in restart limit notifications.
2026-06-03 11:01:28 +02:00
Andras Bacsai