Andras Bacsai
96ea892748
fix(sidebar): remove theme switcher from sidebar navbar
2026-06-15 13:25:31 +02:00
Andras Bacsai
0f05138608
Merge remote-tracking branch 'origin/next' into openid-auth-support
2026-06-15 13:23:04 +02:00
Andras Bacsai
58af19b378
fix(auth): enforce policies across API and Livewire ( #8628 )
2026-06-15 13:18:29 +02:00
Andras Bacsai
dfd4d7e802
feat(resource-details): make copy fields visible and accessible
2026-06-15 13:17:53 +02:00
Andras Bacsai
371eb1e38c
fix(upgrade): hide upgrade labels in collapsed sidebar
2026-06-15 12:56:19 +02:00
Andras Bacsai
22d05c78aa
Merge remote-tracking branch 'origin/next' into ghe-support-helpers
2026-06-15 12:55:34 +02:00
Andras Bacsai
507a8afa20
fix(github): sync app slug before generating installation path
2026-06-15 12:55:29 +02:00
Andras Bacsai
b9bda7301a
Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url
2026-06-15 12:55:08 +02:00
Andras Bacsai
8d92059dd6
fix(auth): refresh OIDC JWKS and block unverified account linking
2026-06-15 12:49:51 +02:00
Andras Bacsai
21333f02f9
fix(settings): harden OIDC, email, and log drain flows
2026-06-15 12:35:05 +02:00
Andras Bacsai
d2deaa8363
fix(auth): restrict Sentinel access and register S3 policy
2026-06-15 12:31:30 +02:00
Andras Bacsai
2ebe2e8dbb
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-15 12:30:15 +02:00
Andras Bacsai
46a9578d69
test: align mobile application actions expectations
2026-06-15 12:06:54 +02:00
Andras Bacsai
78d8afa602
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-15 12:05:19 +02:00
Andras Bacsai
9302a49bbf
Merge remote-tracking branch 'origin/next' into 10633-invitation-link-redirect
2026-06-15 11:58:03 +02:00
Andras Bacsai
9b0e2704d2
test: align deployment config redaction expectations
2026-06-15 11:56:44 +02:00
Andras Bacsai
45d9426690
test(auth): expect invitation link to use auth.link route
2026-06-15 11:55:03 +02:00
Andras Bacsai
c7c239aa18
Merge remote-tracking branch 'origin/next' into openid-auth-support
2026-06-15 11:54:54 +02:00
Andras Bacsai
52739141ee
fix(previews): clean up closed PR previews after update failures ( #10180 )
2026-06-12 20:08:34 +02:00
Andras Bacsai
403f8abcb4
Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url
2026-06-12 20:02:23 +02:00
Andras Bacsai
95972ec10f
Merge remote-tracking branch 'origin/next' into reverb-realtime-migration
2026-06-12 20:01:19 +02:00
Andras Bacsai
78d7291929
fix(github): keep provided api_url on GitHub app updates
2026-06-12 19:56:13 +02:00
Andras Bacsai
4f509c02be
fix(auth): validate invitation magic link tokens
...
Accept invitation links across configured public origins while still
rejecting stored invitations whose token no longer matches.
2026-06-12 16:17:45 +02:00
Andras Bacsai
442ed98169
feat(project): add mobile action controls for resources
...
Show restart, stop, redeploy, and update actions directly in the mobile
headers for applications, databases, and services, with coverage for the
mobile resource menu behavior.
2026-06-12 16:09:26 +02:00
Andras Bacsai
1aca7ead8c
fix(logs): constrain activity monitor output width
2026-06-12 16:06:20 +02:00
Andras Bacsai
61d2d17f52
feat(subscription): add Stripe action controls
...
Add subscription action handling and tests for cancel, resume, and refund flows while resolving StripeClient through the container.
2026-06-12 15:54:21 +02:00
Andras Bacsai
018d267b3f
fix(service): limit Grafana extra fields to Grafana images ( #10562 )
2026-06-09 22:16:52 +02:00
Andras Bacsai
ee74889f19
feat(resources): show mobile action buttons
2026-06-09 18:45:06 +02:00
Andras Bacsai
281184c040
fix(github): derive app API URLs from HTML hosts
...
Normalize GitHub organization values and derive API URLs for GitHub.com,
GHE.com, and enterprise hosts when creating or updating GitHub Apps.
2026-06-09 18:31:06 +02:00
Andras Bacsai
bc2c6068ea
fix(github): sync app slug before building install URL
...
Move GitHub App JWT generation and slug synchronization into shared helpers so installation URLs use the canonical GitHub slug. Encode GHE organization path segments and keep the app-scoped fallback for blank organizations.
2026-06-09 15:27:35 +02:00
Andras Bacsai
96adf9b0f4
Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url
2026-06-09 15:26:44 +02:00
vuguul
5e37024f10
fix(git): use cloud install path for ghe apps
2026-06-06 17:23:22 -06:00
vuguul
4c77504b5e
fix(service): limit Grafana extra fields to Grafana images
2026-06-05 14:29:29 -06:00
Andras Bacsai
a9d9bfdbe3
feat(resources): add responsive mobile navigation menus
...
Unify application, database, and service headings with mobile-friendly
resource menus, route-aware configuration tabs, and confirmation triggers for
advanced actions. Standardize restart warnings with status badges and cover the
responsive menu and badge rendering behavior with feature tests.
2026-06-05 14:57:57 +02:00
Andras Bacsai
51583069f4
feat(status): unify resource status badges
...
Introduce a shared status badge component and reuse it across resource status views, service cards, and the server navbar. Replace icon-only refresh controls with consistent badge buttons and cover the new status layout with feature tests.
2026-06-05 13:31:20 +02:00
vaguul
63ba33261b
fix(api): allow source commit build setting
2026-06-04 17:51:17 -06:00
Andras Bacsai
70eda65d19
fix(api): hide nested server secrets from read tokens
...
Require read:sensitive for nested server logdrain and sentinel fields in
application and database API responses.
Limit deployment configuration column migration SQL to PostgreSQL.
2026-06-04 16:51:52 +02:00
Andras Bacsai
2fcc42b0a9
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-04 15:27:32 +02:00
Andras Bacsai
22f9f96db6
chore: inspect staged changes for commit message
2026-06-04 15:24:53 +02:00
Andras Bacsai
e354840e5a
feat(auth): add OIDC SSO and registration controls
...
Add OIDC discovery, JWKS validation, Socialite integration, OAuth identity linking, and configurable registration policy for password and SSO signups. Update related settings/profile UI and tests.
2026-06-04 13:59:08 +02:00
Andras Bacsai
8a2373e49f
fix(ui): standardize permission denial callouts
2026-06-04 11:37:16 +02:00
Andras Bacsai
5973bb4d4f
fix(security): hide notification secrets from non-admins
...
Prevent users without update permission from reading notification credentials and manual webhook secrets in Livewire state or rendered forms.
2026-06-04 11:24:19 +02:00
Andras Bacsai
062ad57740
fix(security): enforce team access on mutable actions
...
Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.
2026-06-04 11:03:06 +02:00
Andras Bacsai
b01c2dd52b
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-04 10:58:07 +02:00
Andras Bacsai
9dca7ca351
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-04 10:18:54 +02:00
Andras Bacsai
981b670eb4
feat(services): show template update timestamps
2026-06-04 09:34:11 +02:00
Cornelis Terblanche
f7150a1d6c
Fix Vultr power controls for stopped instances
2026-06-03 21:32:18 +02:00
Cornelis Terblanche
94abbe1590
Add Vultr cloud provider integration
2026-06-03 21:32:18 +02:00
Andras Bacsai
3a49baad19
feat(realtime): replace Soketi image with bundled Reverb
...
Run Laravel Reverb and the terminal server inside the Coolify container instead of shipping a separate coolify-realtime image. Update compose files, proxy routing, cleanup behavior, and packaging tests for the embedded realtime services.
2026-06-03 15:43:20 +02:00
Andras Bacsai
bc165f1976
fix(postgres): preserve Coolify image tag during upgrade
...
Keep the running Coolify image tag when restarting the stack after
PostgreSQL upgrade or rollback so compose does not fall back to latest.
2026-06-03 14:54:23 +02:00
Andras Bacsai
vuguul
vaguul
Cornelis Terblanche