2789 Commits
Author SHA1 Message Date
Andras Bacsai adcb182a8a fix(deployments): report Compose files with no parsed services 2026-10-27 15:06:17 +01:00
Andras Bacsai 4f9ad86e52 fix(applications): allow environment variable references in image tags
Closes #10642
2026-10-27 15:05:23 +01:00
Andras BacsaiandClaude Opus 5.5 d3b1a3d405 fix(ui): update breadcrumb names after a rename
Closes #12341

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 14:55:39 +01:00
Andras Bacsai f658d6df76 fix(logs): show container logs that contain invalid UTF-8
Closes #10628
2026-10-27 14:43:21 +01:00
Andras BacsaiandClaude Opus 5.5 80df5431dc fix(api): document database and resource list responses in OpenAPI
Add a Database schema and use it for GET /databases and
GET /databases/{uuid}, type the GET /resources items, and stop
requiring both environment_name and environment_uuid on create
endpoints. KeyDB now returns database_type like the other engines.

Closes #10449

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 14:42:29 +01:00
Andras Bacsai 5a08c35e7d fix(applications): stop again while a container restarts past its limit
- The restart limit claim sent only one stop. If that stop failed or came
  too late, the container kept restarting past the max restart count.
- Sentinel pushes and status checks now dispatch the stop again while a
  container still runs; the notification is still sent once.

Closes #10761
2026-10-27 14:40:48 +01:00
Andras BacsaiandClaude Opus 5.5 6b1dcc0c96 fix(api): return success false on access denied responses
Closes #12343

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 14:38:24 +01:00
Andras BacsaiandClaude Opus 5.5 25761e29c4 fix(team): keep member API tokens on promotion
Only revoke a member's team tokens when the role goes down. Promotions
and ownership transfers on account deletion keep the tokens.

Closes #12342

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 14:37:38 +01:00
Andras Bacsai 3873a58086 test(deployment): parse heredoc scripts in process fake 2026-10-27 12:05:38 +01:00
Andras Bacsai 8d083deffb fix(storage): stop syncing file storages on every compose parse
The compose parser queued ServerFilesFromServerJob for every volume on
each parse, and pages that only show data parse the Compose file. Each
sync also sent two SSH commands for each file.

- Queue the sync only for a compose deployment, and for each service
  resource with file storages when the service starts or deploys.
- Read the compose service names without a parse on the Domains and
  scheduled task pages.
- Check all file storages with one remote command, and stop when a
  symbolic link, a special file, or an unknown state is at a file path.
- Keep the application path in a file storage when a pull request
  preview is parsed. Preview deployments of the current parser write
  their `-pr-<id>` copies through LocalFileVolume::forPullRequest().
- Remove the unreachable file sync from the service resource page.
2026-10-27 12:04:37 +01:00
Andras BacsaiandClaude Opus 5.5 4edf987279 revert(ssh): send remote command batches in argv again
Sending SSH command batches on stdin changes how every remote command
reaches a server, which is too risky for a patch release. Move it to
next and restore the heredoc transport from before 1a2a5362a. The
shared test helpers stay because they work with both transports.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 11:11:09 +01:00
Andras Bacsai 3c34bdd49b Merge remote-tracking branch 'origin/main' 2026-10-27 09:57:37 +01:00
Aditya Tripathi f8ec007403 fix(metrics): pick the root disk on the server Metrics page like the Fleet page
The server Metrics page now uses SentinelMetricsClient::rootMountName():
/, else /app/db (Sentinel 1.1.2 and older), else /data/coolify or /data
(Sentinel 1.1.3 and newer). Before, it kept only /, so the disk chart was
empty when Sentinel did not report a / mount.
2026-10-27 09:54:29 +01:00
Aditya Tripathi 5312ea4dbc perf(metrics): ask Sentinel to bucket metric history rows
Send bucket_ms on the Sentinel metric history reads so Sentinel averages
the rows and sends far fewer of them over SSH. Older Sentinels ignore the
param and return raw rows, which Coolify still buckets and downsamples.

Also quote the history URL in the single-fetch curl command, because the
URL now has an & in it.
2026-10-27 09:54:13 +01:00
Andras Bacsai 1a2a5362ad fix(security): secure remote command secrets and clone volume data 2026-10-27 09:47:18 +01:00
github-actions[bot] 7f65c6f303 Merge remote-tracking branch 'origin/main' into next 2026-10-26 18:49:11 +00:00
Andras Bacsai b5823c777b Merge remote-tracking branch 'origin/main' 2026-10-26 19:30:11 +01:00
Andras BacsaiandClaude Opus 5.5 b17c83d688 fix(modal): keep confirmation checkbox state in one place
The dialog checkboxes used both Alpine selectedActions and wire:model.
After the dialog closed, the two could differ, so a click did not change
the checkbox. Alpine now holds the state, and the dialog sends it to
Livewire on submit.

Closes #12338

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 19:28:36 +01:00
Andras Bacsai bafbc2e3d3 fix(api): regenerate proxy labels when exposed ports change (#12334) 2026-10-26 19:28:18 +01:00
Andras BacsaiandClaude Opus 5.5 0a9019f738 fix(analytics): hide container tooling user agents by default (#12335)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 19:27:22 +01:00
github-actions[bot] a928c76797 Merge remote-tracking branch 'origin/main' into next 2026-10-26 17:46:34 +00:00
Andras BacsaiandClaude Opus 5.5 4559d21b4c fix(api): save is_auto_deploy_enabled when creating Docker image and Dockerfile applications
Closes #12339

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 18:32:33 +01:00
Andras BacsaiandClaude Opus 5.5 e1637cbe02 fix(new-resource): render the resource search binding only on the type step
The searchResources() x-data wrapper was outside the type-step @if that
renders its script, so a direct load of a later step (for example the
PostgreSQL image picker from global search or a reload) threw
"searchResources is not defined".

Closes #12337

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 18:30:10 +01:00
github-actions[bot] 50e3898ea5 Merge remote-tracking branch 'origin/main' into next 2026-10-26 17:15:41 +00:00
Andras Bacsai 8d8f8e8988 feat(analytics): compact traffic metrics and scale latency units 2026-10-26 17:59:06 +01:00
github-actions[bot] 04452b4b63 Merge remote-tracking branch 'origin/main' into next 2026-10-26 15:07:08 +00:00
github-actions[bot] b2d2e5898d Merge remote-tracking branch 'origin/main' into next 2026-10-26 13:58:06 +00:00
Andras BacsaiandClaude Opus 5.5 ea1b701a94 fix(ports): skip the PORT mismatch warning when readonly labels are disabled
Closes #10941

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 13:24:36 +01:00
Andras Bacsai 271849c88e fix(scheduled-tasks): show the server timezone in the schedule help text
Closes #10904
2026-10-26 13:10:09 +01:00
Andras BacsaiandClaude Opus 5.5 e200927ffd fix(healthcheck): replace the Dockerfile HEALTHCHECK when the healthcheck is enabled
Closes #10974

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 13:08:48 +01:00
Andras BacsaiandClaude Opus 5.5 7ca08d87f9 fix(storage): keep open preview volumes out of stale compose volumes
Closes #10855

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 13:07:58 +01:00
Andras BacsaiandClaude Opus 5.5 e822db4e71 fix(previews): build the PR commit on manual Bitbucket preview redeploys
Bitbucket Cloud has no pull request refs over git, so a redeploy without
a webhook commit checked out the base branch. Reuse the latest known
commit of the pull request, or fail the deployment when none is known.

Closes #10806

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 13:07:55 +01:00
github-actions[bot] 355e2f96e4 Merge remote-tracking branch 'origin/main' into next 2026-10-26 12:02:58 +00:00
Andras Bacsai 1017a5b307 fix(deploy): use SSH user registry credentials for host image pulls (#12216) 2026-10-26 13:00:06 +01:00
Andras Bacsai da3e98eff3 Merge remote-tracking branch 'origin/main' 2026-10-26 12:59:04 +01:00
Andras Bacsai 8bd78b3484 fix(realtime): remove orphaned legacy containers with zero replicas
Replace the inactive Soketi profile with a zero-replica placeholder so Compose
removes old coolify-realtime containers. Update packaging tests to verify the
merged service configuration.
2026-10-26 12:59:01 +01:00
Andras BacsaiandClaude Opus 5.5 4e7fdd4ac6 fix(telegram): trim bot token and chat id before sending
Closes #12323

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 12:58:02 +01:00
Andras BacsaiandClaude Opus 5.5 d6c4e773b9 feat(deployments): skip the compose build when the images match the build inputs
Compose deployments label each built image with a fingerprint of the build
settings and the resolved build-time variables. A deploy or restart reuses the
commit images when every label matches, so a runtime-only change does not
rebuild.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 12:58:01 +01:00
Andras BacsaiandClaude Opus 5.5 a3843730f8 fix(deployments): rebuild when a build secret value changes
Docker ignores secret values for the build cache, so the
COOLIFY_BUILD_SECRETS_HASH secret mount never invalidated it. Pass the
hash as a build arg and declare it in each stage instead.

Parse Dockerfile instructions so ARG lines and secret mounts are not
added inside heredoc bodies or continuation lines.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 12:56:31 +01:00
Andras BacsaiandClaude Opus 5.5 c467354d34 test: use the delete ability in delete permission tests
next requires the delete ability for delete endpoints and checks member
token access in EnsureTokenBelongsToCurrentTeamMember. Update the tests
from main to match.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 12:55:24 +01:00
Andras BacsaiandClaude Opus 5.5 0a0d6cf075 fix(postgres): block restore scan bypasses and stop on SQL errors (#12333)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 12:54:32 +01:00
Andras Bacsai 435645ce15 fix(api): write file storage content to server on PATCH (#12248) 2026-10-26 12:54:11 +01:00
Andras Bacsai afde2cb471 fix(deployments): write generated compose file after image build (#12331) 2026-10-26 12:45:36 +01:00
Andras Bacsai 2be4f259b8 Merge remote-tracking branch 'origin/main' into automation/sync-main-to-next 2026-10-26 12:41:43 +01:00
Andras Bacsai d8fe02464b Merge remote-tracking branch 'origin/next' into automation/sync-main-to-next 2026-10-26 12:40:59 +01:00
Andras Bacsai 2796609e96 feat(access): add scoped grants for team members and API tokens (#12329) 2026-10-26 12:13:20 +01:00
Andras Bacsai 8eb33ddf31 Merge remote-tracking branch 'origin/next' into automation/sync-main-to-next 2026-10-26 12:12:20 +01:00
Andras Bacsai 25e2eae058 fix(webhooks): enforce GitHub app signatures in local environment 2026-10-26 12:08:15 +01:00
Andras Bacsai 7b83fa72eb feat(git): add HTTPS credentials for private repositories on custom Git hosts (#12328) 2026-10-26 10:50:24 +01:00
Andras Bacsai 5d66fb719e fix(registration): time-limit first root account creation
Open root registration for ten minutes after startup, then require a Coolify restart to reopen it. Update installer credential handling and explain the setup window in the registration UI.
2026-10-26 10:49:19 +01:00