Andras Bacsai 59111e8cf3 fix(destination): scope server and network selection to current team ...

Resolve the server and network in Destination::addServer() and
::promote() through ownedByCurrentTeam() before use, authorize the
update against the resource, and pass the validated IDs into
attach()/detach()/update(). Errors are routed through handleError()
to match the sibling removeServer() method.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-22 12:53:14 +02:00

..

Api

feat(deployments): track application configuration diffs

2026-05-13 09:58:58 +02:00

Livewire

fix(applications): refresh pending configuration changes

2026-05-13 10:04:17 +02:00

Mcp

fix(mcp): change enable/disable endpoints from GET to POST and fix service/app listing

2026-05-05 22:07:58 +02:00

Proxy

Make proxy restart run as background job to prevent localhost lockout

2025-12-03 10:30:12 +01:00

Security

feat(observability): add structured audit log channel for API and webhook events

2026-04-28 14:50:37 +02:00

Service

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

Subscription

fix(stripe): ignore missing subscriptions in webhook jobs

2026-05-11 16:56:00 +02:00

Webhook

refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification

2026-04-19 12:52:23 +02:00

ActivityMonitorCrossTeamTest.php

refactor: simplify remote process chain and harden ActivityMonitor

2026-03-26 13:26:16 +01:00

AdminAccessAuthorizationTest.php

refactor(admin): use named routes for admin index navigation

2026-04-19 11:58:52 +02:00

ApiTokenExpirationTest.php

feat(security): support expiration on API tokens with warning notifications

2026-04-20 14:28:38 +02:00

ApiTokenExpirationWarningTest.php

fix(api-tokens): mark expiration warning after notification

2026-05-13 10:28:32 +02:00

ApiTokenPermissionTest.php

fix(api): require write permission for validation endpoints

2026-03-10 22:11:52 +01:00

ApplicationBuildpackCleanupTest.php

feat(deployments): track application configuration diffs

2026-05-13 09:58:58 +02:00

ApplicationConfigurationChangedTest.php

fix(applications): use preview environment variable query

2026-05-13 10:28:18 +02:00

ApplicationCustomNginxConfigurationApiTest.php

fix(applications): store custom nginx config from API correctly

2026-05-11 22:22:01 +02:00

ApplicationDeploymentControlVarFilteringTest.php

fix(railpack): include scoped env vars in builds

2026-05-11 13:29:21 +02:00

ApplicationGeneralBuildpackSelectorTest.php

feat(deployments): track application configuration diffs

2026-05-13 09:58:58 +02:00

ApplicationHealthCheckApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ApplicationPreviewApiTest.php

feat(applications): add DELETE endpoint for preview deployments by PR id

2026-04-17 13:29:11 +02:00

ApplicationPreviewImageNameTest.php

fix(deployment): avoid shared preview tags for HEAD commits

2026-05-11 22:11:08 +02:00

ApplicationRailpackTest.php

refactor(railpack): extract static image build, fix port logic, bump to v0.22.0

2026-03-23 19:02:10 +00:00

ApplicationRedirectTest.php

fix(application): persist redirect value in setRedirect

2026-03-29 20:50:03 +02:00

ApplicationRollbackTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ApplicationSeederTest.php

feat(railpack): add config merging, beta badge, and nodejs seeder example

2026-04-09 18:45:42 +02:00

ApplicationSourceCrossTeamTest.php

fix(source): scope private key and source selection to current team

2026-05-22 12:30:00 +02:00

ApplicationSourceLocalhostKeyTest.php

fix(applications): refresh pending configuration changes

2026-05-13 10:04:17 +02:00

BackupRetentionAndStaleDetectionTest.php

fix(backups): enforce retention and clean up stale executions

2026-04-03 11:33:21 +02:00

BreadcrumbsVisibilityTest.php

fix(ui): improve responsive project headings and controls

2026-04-09 19:51:31 +02:00

BuildpackSwitchCleanupTest.php

feat(buildpack): add Railpack as a build pack option

2026-03-23 17:12:02 +00:00

CaCertificateCommandInjectionTest.php

chore: prepare for PR

2026-02-25 12:00:24 +01:00

CheckTraefikVersionJobTest.php

Fix Traefik email notification with clickable server links

2025-12-02 13:08:40 +01:00

CleanupRedisTest.php

fix(CleanupRedisTest): update mock return values for hgetall to reflect job processing state

2025-11-11 23:17:25 +01:00

CleanupUnreachableServersTest.php

fix(team): mark servers unreachable when subscription ends

2026-04-15 15:12:29 +02:00

CleanupUnsubscribedServersTest.php

fix(team): mark servers unreachable when subscription ends

2026-04-15 15:12:29 +02:00

ClonePersistentVolumeUuidTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

CloudInitScriptTest.php

feat: add cloud-init script support for Hetzner server creation

2025-10-10 19:37:16 +02:00

CloudProviderTokenApiTest.php

feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner

2025-12-11 12:12:43 +01:00

CmdHealthCheckValidationTest.php

fix(health-checks): sanitize and validate CMD healthcheck commands

2026-02-25 11:28:33 +01:00

CommandInjectionSecurityTest.php

refactor(validation): tokenize shell-safe command pattern

2026-04-20 22:00:41 +02:00

ComposePreviewFqdnTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ConvertArraysTest.php

fix: check if array is associative or not

2024-09-03 17:04:56 +02:00

ConvertContainerEnvsToArray.php

chore(tests): update test environment database name and add new feature test for converting container environment variables to array

2025-05-22 14:30:16 +02:00

ConvertingGitUrlsTest.php

fix(git): harden ssh URL normalization

2026-04-07 22:41:15 -05:00

CoolifyTaskRetryTest.php

feat(jobs): improve scheduled tasks with retry logic and queue cleanup

2025-11-10 11:11:18 +01:00

CrossTeamDestinationAttachTest.php

fix(destination): scope server and network selection to current team

2026-05-22 12:53:14 +02:00

CrossTeamIdorLogsTest.php

Squashed commit from '565g-9j4m-wqmr-cross-team-idor-logs-fix'

2026-03-10 22:11:52 +01:00

CrossTeamIdorServerProjectTest.php

test: remove GHSA advisory IDs from test descriptions and comments

2026-04-20 12:07:42 +02:00

DatabaseBackupCreationApiTest.php

fix(api): use explicit team ID for S3 storage lookup in backup endpoints

2026-04-19 15:26:47 +02:00

DatabaseBackupJobTest.php

fix(backup): prevent notification failures from affecting backup status

2026-03-25 12:43:47 +01:00

DatabaseBackupUploadValidationTest.php

refactor(backup): validate database backup upload file type and size

2026-04-20 11:45:00 +02:00

DatabaseEnvironmentVariableApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

DatabaseImportCommandInjectionTest.php

fix(livewire): add Locked attributes and consolidate container name validation

2026-03-25 20:21:39 +01:00

DatabasePublicPortTimeoutApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

DatabaseReplicaConfigTest.php

feat(sentinel): deduplicate metrics push processing

2026-05-22 12:48:48 +02:00

DatabaseSslStatusRefreshTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

DeletesUserSessionsTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

DeploymentByUuidApiTest.php

fix(api): cast teamId to int in deployment authorization check

2026-03-12 13:25:10 +01:00

DeploymentCancellationApiTest.php

Changes auto-committed by Conductor

2025-10-16 11:01:58 +02:00

DeploymentCommandContainerResolutionTest.php

refactor(jobs): extract container resolution logic for deployment commands

2026-03-25 14:09:07 +01:00

DeploymentLogScrollTest.php

feat(sentinel): deduplicate metrics push processing

2026-05-22 12:48:48 +02:00

DeploymentLogsLayoutTest.php

fix(deployments): use full-height deployment logs layout

2026-04-09 19:27:19 +02:00

DeploymentsIndicatorLayoutTest.php

fix(ui): align deployment indicator with collapsed sidebar

2026-05-11 16:25:15 +02:00

DeprecatedDockerComposeApplicationEndpointTest.php

fix(api): remove deprecated docker compose application endpoint

2026-05-11 13:20:05 +02:00

DevelopmentRailpackExamplesSeederTest.php

fix(railpack): align example ports and smoke checks

2026-05-11 17:13:55 +02:00

DevHelperVersionValidationTest.php

refactor(settings): validate dev_helper_version and escape build args

2026-04-20 11:51:27 +02:00

DockerCleanupJobTest.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

DockerCustomCommandsTest.php

chore: prepare for PR

2026-03-01 18:49:40 +01:00

DockerImagePreviewDeploymentApiTest.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

DomainsByServerApiTest.php

fix(api): validate server ownership in domains endpoint and scope activity lookups

2026-03-25 16:20:53 +01:00

EmailChangeVerificationTest.php

refactor: use random_int() for email change verification codes

2026-03-28 12:25:54 +01:00

EmailVerificationHashTest.php

refactor(auth): upgrade email verification hash to sha256

2026-04-20 12:09:48 +02:00

EnvironmentVariableBulkCommentApiTest.php

feat(api): support comments in bulk environment variable endpoints

2026-03-19 22:17:55 +01:00

EnvironmentVariableCommentTest.php

fix: update success message logic to only show when changes are made

2025-12-27 15:24:09 +01:00

EnvironmentVariableKeyValidationTest.php

fix(env): validate Docker-compatible variable keys

2026-05-11 15:43:09 +02:00

EnvironmentVariableMassAssignmentTest.php

refactor: add explicit fillable array to EnvironmentVariable model

2025-12-27 15:24:09 +01:00

EnvironmentVariableMultilineToggleViewTest.php

fix(project): handle slash branches in public repo URLs

2026-04-01 09:11:56 +02:00

EnvironmentVariableSharedSpacingTest.php

test: add tests for shared environment variable spacing and resolution

2025-11-27 10:45:39 +01:00

EnvironmentVariableUpdateApiTest.php

fix(api): extract resource UUIDs from route parameters

2026-03-19 21:56:58 +01:00

ExecuteContainerCommandTest.php

test: setup database for upcoming tests

2024-12-04 12:43:52 +01:00

FeedbackEndpointTest.php

refactor(api): validate and throttle feedback endpoint

2026-04-19 14:41:47 +02:00

GenerateApplicationNameTest.php

feat(storage): add storage endpoints and UUID support for databases and services

2026-03-23 15:15:02 +01:00

GetLogsCommandInjectionTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

GithubAppsListApiTest.php

Changes auto-committed by Conductor

2025-10-16 13:19:05 +02:00

GithubPrivateRepositoryTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

GithubSourceChangeTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubSourceCreateTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubWebhookTest.php

fix(github-webhook): handle unsupported event types gracefully

2026-03-23 21:33:40 +01:00

HetznerApiTest.php

test: remove GHSA advisory IDs from test descriptions and comments

2026-04-20 12:07:42 +02:00

HetznerServerCreationTest.php

fix: update boarding flow logic to complete onboarding when server is created

2025-10-29 23:06:39 +01:00

InternalModelCreationMassAssignmentTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

IpAllowlistTest.php

chore: prepare for PR

2026-03-03 16:43:29 +01:00

LinkLoginEmailVerificationTest.php

refactor(auth): drop implicit email verification on invitation link login

2026-04-20 12:09:48 +02:00

LogFontStylingTest.php

fix(database): refresh SSL/status state and harden clone writes

2026-03-31 09:29:36 +02:00

LoginRateLimitIPTest.php

rate limit test

2025-10-28 15:18:28 +01:00

MassAssignmentProtectionTest.php

refactor(models): add fillable attributes for database configuration options

2026-03-30 08:11:23 +02:00

ModelFillableCreationTest.php

feat(applications): add configurable stop grace period

2026-05-11 23:43:53 +02:00

MultilineEnvironmentVariableTest.php

chore: prepare for PR

2026-02-23 14:28:28 +01:00

NewApplicationBuildpackDefaultsTest.php

feat(deployments): track application configuration diffs

2026-05-13 09:58:58 +02:00

OauthControllerTest.php

fix: normalize oauth emails before matching users

2026-04-09 09:38:56 -06:00

PasswordVisibilityComponentTest.php

feat(forms): make textarea monospace opt-in and improve multiline toggle

2026-03-31 15:37:42 +02:00

PreviewEnvVarFallbackTest.php

feat(preview-env): add production variable fallback for docker-compose

2026-03-25 13:26:50 +01:00

PublicGitRepositoryBranchParsingTest.php

fix(project): handle slash branches in public repo URLs

2026-04-01 09:11:56 +02:00

PushServerUpdateJobLastOnlineTest.php

chore: prepare for PR

2026-03-10 18:34:37 +01:00

PushServerUpdateJobOptimizationTest.php

feat(sentinel): deduplicate metrics push processing

2026-05-22 12:48:48 +02:00

PushServerUpdateJobTest.php

chore: prepare for PR

2026-02-15 13:43:08 +01:00

QueryDatabaseByUuidWithinTeamTest.php

refactor(helpers): extract STANDALONE_DATABASE_MODELS registry, add tests

2026-04-30 14:48:48 +02:00

QueueApplicationDeploymentCommitTest.php

fix(deployments): resolve commit from app git_commit_sha when not explicitly set

2026-04-29 10:59:32 +02:00

RealtimeTerminalPackagingTest.php

fix(terminal): add idle timeout, reconnect replay, and scrollback preservation

2026-04-28 12:26:31 +02:00

ResetPasswordUrlTest.php

refactor: simplify TrustHosts middleware and use APP_URL as base_url fallback

2026-03-28 12:12:48 +01:00

ResourceOperationsCrossTenantTest.php

chore: prepare for PR

2026-02-25 11:18:46 +01:00

ResponsiveCheckboxLayoutTest.php

fix(ui): improve responsive project headings and controls

2026-04-09 19:51:31 +02:00

ScheduledJobManagerShouldRunNowTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

ScheduledJobManagerStaleLockTest.php

chore: prepare for PR

2026-02-25 12:07:29 +01:00

ScheduledJobMonitoringTest.php

fix(jobs): prevent non-due jobs firing on restart and enrich skip logs with resource links

2026-02-28 18:03:29 +01:00

ScheduledLogsCommandInputTest.php

refactor(cli): validate --date and escape shell args on logs:scheduled

2026-04-20 12:09:48 +02:00

ScheduledTaskApiTest.php

test(factories): add missing model factories for app test suite

2026-03-03 09:50:05 +01:00

ScheduledTaskServerTest.php

refactor(scheduled-task): simplify server() with nullsafe operators and add return type

2026-05-04 12:26:15 +02:00

ScheduleOnOneServerTest.php

fix(schedule): prevent duplicate SSL certificate regeneration

2026-05-21 19:19:43 +02:00

SecureCookieAutoDetectionTest.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

SentinelPushDeduplicationTest.php

feat(sentinel): deduplicate metrics push processing

2026-05-22 12:48:48 +02:00

SentinelTokenValidationTest.php

feat(sentinel): embed server UUID in encrypted sentinel token

2026-04-30 08:21:30 +02:00

SentinelUpdateCheckIndependenceTest.php

Refactor: Move sentinel update checks to ServerManagerJob and add tests for hourly dispatch

2025-12-04 14:58:18 +01:00

ServerConnectionTimeoutApiTest.php

test(api): add feature tests for server connection_timeout API

2026-04-28 22:20:15 +02:00

ServerConnectionTimeoutTest.php

feat(server): add configurable SSH connection timeout per server

2026-04-28 15:39:36 +02:00

ServerDestinationsPageTest.php

fix(destinations): handle empty and server-scoped destinations

2026-05-19 12:50:08 +02:00

ServerIpUniquenessTest.php

fix(server): improve IP uniqueness validation with team-specific error messages

2026-02-12 08:10:59 +01:00

ServerLimitCheckJobTest.php

fix(server-limit): re-enable force-disabled servers at limit

2026-03-03 17:03:59 +01:00

ServerManagerJobShouldRunNowTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

ServerMetadataTest.php

feat(server): auto-fetch server metadata after validation

2026-03-13 17:07:50 +01:00

ServerPatchCheckNotificationTest.php

test: fix ServerPatchCheckNotification tests to avoid global state pollution

2025-10-26 21:54:55 +01:00

ServerReachabilityNotificationTest.php

refactor(server): dispatch event for reachability notifications, drop retry loop

2026-04-28 15:28:22 +02:00

ServerSettingSentinelRestartTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerSettingWasChangedTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerStorageCheckIndependenceTest.php

Fix: Correct time inconsistency in ServerStorageCheckIndependenceTest

2025-12-03 10:22:09 +01:00

ServerValidationXssTest.php

fix: sanitize error output in server validation logs

2026-03-26 18:36:36 +01:00

ServiceContainerLabelEscapeApiTest.php

feat(service): add container label escape control to services API

2026-03-13 13:32:58 +01:00

ServiceDatabaseTeamTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ServiceFqdnUpdatePathTest.php

fix: prevent SERVICE_FQDN/SERVICE_URL path duplication on FQDN updates

2025-11-27 10:57:24 +01:00

ServiceMagicVariableOverwriteTest.php

test(magic-variables): add feature tests for SERVICE_URL/FQDN variable handling

2026-03-11 17:15:17 +01:00

SettingsUpdatesAuthorizationTest.php

fix(settings): require instance admin authorization for updates page

2026-03-25 19:33:51 +01:00

SharedVariableComposeResolutionTest.php

fix(parsers): resolve shared variables in compose environment

2026-03-12 13:23:13 +01:00

SharedVariableDevViewTest.php

fix(shared-variables): support direct mount params and comment field for server variables

2026-03-31 14:58:01 +02:00

SslCertificateRegenerationTest.php

fix(database): auto-generate missing CA cert on SSL regeneration

2026-03-30 13:10:49 +02:00

StandaloneDockerDatabasesTest.php

fix(standalone-docker): include keydb, dragonfly, clickhouse in databases()

2026-04-30 15:01:48 +02:00

StartDatabaseProxyTest.php

fix(proxy): add validation and normalization for database proxy timeout

2026-03-10 09:59:19 +01:00

StartupExecutionCleanupTest.php

feat(Cleanup): implement failure marking for stuck scheduled tasks and database backups during startup

2025-11-11 12:32:52 +01:00

StorageApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

SuppressHorizonJobFailuresTest.php

feat(horizon): suppress failed job entries for deployment/timeout errors on cloud

2026-04-29 15:40:01 +02:00

TeamInvitationCsrfProtectionTest.php

refactor: split invitation endpoint into GET (show) and POST (accept)

2026-03-26 14:30:27 +01:00

TeamInvitationEmailNormalizationTest.php

refactor(ui): improve styling and consistency in environment variable warning and docker cleanup components

2025-09-25 11:45:07 +02:00

TeamInvitationPrivilegeEscalationTest.php

fix: critical privilege escalation in team invitation system

2025-10-15 11:42:25 +02:00

TeamNotificationCheckTest.php

chore: prepare for PR

2026-02-23 13:02:06 +01:00

TeamPolicyTest.php

fix: add authentication context to TeamPolicyTest

2025-10-15 15:08:35 +02:00

TeamScopedBackupStorageTest.php

refactor: scope destination and resource lookups by current team

2026-04-19 11:55:12 +02:00

TeamScopedDestinationTest.php

refactor: scope destination and resource lookups by current team

2026-04-19 11:55:12 +02:00

TeamScopedResourceProofsTest.php

refactor: scope destination and resource lookups by current team

2026-04-19 11:55:12 +02:00

TeamServerLimitTest.php

refactor(team): make server limit methods accept optional team parameter

2026-03-23 21:56:50 +01:00

TerminalAuthIpsRouteTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

TerminalAuthRoutesAuthorizationTest.php

fix(terminal): apply authorization middleware to terminal bootstrap routes

2026-03-25 16:56:37 +01:00

TwoFactorChallengeAccessTest.php

chore: prepare for PR

2026-02-24 10:17:16 +01:00

UpgradeComponentTest.php

fix(upgrade): clear stale upgrade flag when version is already current

2026-04-09 14:31:12 +02:00

UserDeletionWithGithubAppTest.php

fix(team): transfer instance-wide sources to root team on deletion

2026-04-09 14:51:52 +02:00

Utf8HandlingTest.php

feat(utf8-handling): implement UTF-8 sanitization for command outputs and enhance error handling in logs processing

2025-06-05 14:27:39 +02:00