Mike ChongandAndras Bacsai a26091de0a feat: self-hosted GitLab Apps OAuth integration ...

Adds self-hosted GitLab OAuth sources so Coolify can connect to a self-managed GitLab instance, list private repositories, clone over an OAuth token, and deploy (the GitLab counterpart to GitHub Apps).

Hardening: authenticated, one-time team-bound OAuth callback state; token redaction in deploy logs; custom host port/path kept in clone and ls-remote URLs; submodule OAuth auth; system-wide source selection. Covered by unit and feature tests.

cosigned by OpenAI Codex at M1 Max

2026-07-20 23:21:40 +02:00

..

V5

feat(v5): add server reconciliation and canvas APIs

2026-07-06 17:40:37 +02:00

Application.php

feat: self-hosted GitLab Apps OAuth integration

2026-07-20 23:21:40 +02:00

ApplicationDeploymentQueue.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-06-04 10:58:07 +02:00

ApplicationPreview.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

ApplicationSetting.php

feat(api): add application settings to application endpoints

2026-07-14 13:44:45 +02:00

BaseModel.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

CloudInitScript.php

feat(security): add editable cloud credential pages

2026-07-08 12:58:27 +02:00

CloudProviderToken.php

feat(security): add editable cloud credential pages

2026-07-08 12:58:27 +02:00

DiscordNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

DockerCleanupExecution.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

EmailNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

Environment.php

feat(v5): gate V5 to development environments only

2026-07-19 11:44:12 +02:00

EnvironmentVariable.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-07-07 12:56:19 +02:00

GithubApp.php

Fix source selection flow

2026-05-22 13:00:53 +02:00

GitlabApp.php

feat: self-hosted GitLab Apps OAuth integration

2026-07-20 23:21:40 +02:00

InstanceSettings.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-07-07 12:56:19 +02:00

LocalFileVolume.php

refactor(backups): centralize storage deletion guard

2026-07-19 23:20:46 +02:00

LocalPersistentVolume.php

refactor(backups): centralize storage deletion guard

2026-07-19 23:20:46 +02:00

OauthSetting.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

PersonalAccessToken.php

fix(api-tokens): persist expiration warning state

2026-05-13 10:11:40 +02:00

PrivateKey.php

feat(security): add editable cloud credential pages

2026-07-08 12:58:27 +02:00

Project.php

feat(v5): gate V5 to development environments only

2026-07-19 11:44:12 +02:00

ProjectSetting.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

PushoverNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

S3Storage.php

fix(backups): pin S3 per volume execution and harden deletes

2026-07-16 14:30:58 +02:00

ScheduledDatabaseBackup.php

fix(backups): enforce retention and clean up stale executions

2026-04-03 11:33:21 +02:00

ScheduledDatabaseBackupExecution.php

fix(backups): validate S3 storage before backup scheduling

2026-05-23 13:06:36 +02:00

ScheduledTask.php

refactor(scheduled-task): simplify server() with nullsafe operators and add return type

2026-05-04 12:26:15 +02:00

ScheduledTaskExecution.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ScheduledVolumeBackup.php

feat(backups): support scheduled backups for application storage targets

2026-07-15 17:34:22 +02:00

ScheduledVolumeBackupExecution.php

fix(backups): pin S3 per volume execution and harden deletes

2026-07-16 14:30:58 +02:00

Server.php

fix(resources): clarify build server hosting restrictions (#10961)

2026-07-16 21:35:23 +02:00

ServerSetting.php

fix(resources): clarify build server hosting restrictions (#10961)

2026-07-16 21:35:23 +02:00

Service.php

Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber

2026-07-07 12:56:19 +02:00

ServiceApplication.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ServiceDatabase.php

feat(api): add service database management endpoints

2026-07-15 12:29:58 +02:00

SharedEnvironmentVariable.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

SlackNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

SslCertificate.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

StandaloneClickhouse.php

feat: add ClickHouse backups and cloud ops tools

2026-07-16 11:57:52 +02:00

StandaloneDocker.php

fix(servers): retain cloud instances awaiting IPs

2026-07-11 21:35:10 +02:00

StandaloneDragonfly.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

StandaloneKeydb.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

StandaloneMariadb.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

StandaloneMongodb.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

StandaloneMysql.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

StandalonePostgresql.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

StandaloneRedis.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

Subscription.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

SwarmDocker.php

fix(api): block invalid destination types and service deletions

2026-06-15 17:03:01 +02:00

Tag.php

feat(api): add tags to resource creation

2026-07-07 13:56:33 +02:00

Team.php

feat(v5): gate V5 to development environments only

2026-07-19 11:44:12 +02:00

TeamInvitation.php

Update app/Models/TeamInvitation.php

2025-09-25 11:33:32 +02:00

TelegramNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00

User.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-06-02 12:03:38 +02:00

UserChangelogRead.php

feat(changelog): implement automated changelog fetching from GitHub and enhance changelog read tracking

2025-08-12 10:07:11 +02:00

WebhookNotificationSettings.php

fix(api): hide sensitive fields by default

2026-05-11 21:18:07 +02:00