Andras Bacsai
d74352f423
fix(audit): harden audit logging and admin controls
...
Log audit failures, redact invitation emails, exclude noisy model fields, and gate audit-log filters and pagination by admin access.
2026-08-24 09:13:20 +02:00
Andras Bacsai
c1f29beff1
feat(audit): expose team events and log integration actions
...
Add an admin-only audit-events API endpoint and restrict audit-log UI access. Record integration token and secret manager changes, key access, and references in audit events.
2026-08-24 07:56:21 +02:00
Andras Bacsai
8726746241
Merge remote-tracking branch 'origin/next' into team-resource-audit-logging
2026-08-24 00:02:30 +02:00
Andras Bacsai
6d716e54d7
fix(database): preserve credentials and activity context on start
...
Keep raw secret values for database credentials, escape Redis passwords in startup commands, and pass user context through queued database starts.
2026-08-23 23:03:06 +02:00
Andras Bacsai
f49c330d9d
feat(database): queue starts and resolve credentials securely
...
Extract database start command execution into a shared service and job, preserving activity tracking and status events while supporting resolved secret credentials.
2026-08-23 22:33:03 +02:00
Andras Bacsai
91d4467322
feat(secrets): resolve integrations across deployments and databases
...
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
2026-08-23 21:33:00 +02:00
Andras Bacsai
ba179d50ac
feat(secrets): add integration token and application manager APIs
...
Add API endpoints for creating validated secret manager tokens and configuring application secret manager settings. Suppress secret-bearing deployment command logs and redact resolved remote secrets.
2026-08-23 20:42:20 +02:00
Andras Bacsai
51461456f6
feat(secrets): resolve remote secret references at deployment
...
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
2026-08-23 20:09:31 +02:00
Andras Bacsai
40e5fd8521
feat(audit): add team activity tracking and audit log
2026-08-22 13:18:14 +02:00
Andras Bacsai
ca5fcce39b
Reapply "Merge branch 'next' into main"
...
This reverts commit 7bbd91175f
2026-08-21 12:15:46 +02:00
Andras Bacsai
7bbd91175f
Revert "Merge branch 'next' into main"
...
This reverts commit 2598f3e4c883f1a2e503
2026-08-21 12:12:56 +02:00
Andras Bacsai and GitHub
2598f3e4c8
Merge branch 'next' into main
2026-08-21 12:11:40 +02:00
Andras Bacsai and GitHub
83f1a2e503
fix(domains): allow adding domains without explicit ports ( #11442 )
2026-08-21 12:04:14 +02:00
Andras Bacsai and GitHub
65f4649a7d
fix(deployments): ignore newly tracked static configuration ( #11430 )
2026-08-20 20:17:08 +02:00
github-actions[bot]
9866593a51
Merge remote-tracking branch 'origin/main' into next
2026-08-20 10:50:16 +00:00
Andras Bacsai and GitHub
33218532a8
Align resource access checks ( #11405 )
2026-08-20 12:49:59 +02:00
Andras Bacsai
c9b857884b
fix(api): align team-scoped responses
2026-08-20 12:40:13 +02:00
github-actions[bot]
fc6f6fd0d4
Merge remote-tracking branch 'origin/main' into next
2026-08-20 09:10:52 +00:00
Andras Bacsai
38502e8205
fix(resources): preserve deletion when remote cleanup fails
...
Separate remote service cleanup from resource deletion and ensure database removal
completes despite cleanup errors. Update the disabled two-factor badge icon.
2026-08-20 11:10:14 +02:00
github-actions[bot]
5b749850a3
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:39:12 +00:00
Andras Bacsai
8f90882875
fix(teams): make membership and source deletions atomic
...
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
github-actions[bot]
cd1e595492
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:35:24 +00:00
github-actions[bot]
7759c9b910
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:34:23 +00:00
Andras Bacsai
1eea1a1412
Merge remote-tracking branch 'origin/main'
2026-08-20 09:34:13 +02:00
Andras Bacsai and GitHub
de1d234ea5
fix(auth): require confirmation before accepting magic links ( #11413 )
2026-08-20 09:34:05 +02:00
Andras Bacsai
680071dca8
fix(teams): restrict deletion to owners and backfill team ownership
2026-08-20 09:32:32 +02:00
github-actions[bot]
e8b0840c09
Merge remote-tracking branch 'origin/main' into next
2026-08-19 14:47:36 +00:00
Andras Bacsai and GitHub
14d40c73a2
fix(docker-cleanup): finalize executions after job failure ( #11408 )
2026-08-19 16:47:19 +02:00
peaklabs-dev
88ec944be7
fix(var): fail on missing user when hiding env values
2026-08-19 15:22:25 +02:00
peaklabs-dev
afbe4d6fd7
feat(var): add environment variable copy functionality
2026-08-19 15:11:49 +02:00
Andras Bacsai
13a577a731
fix: align resource access checks
2026-08-19 15:05:51 +02:00
Andras Bacsai
63d22f1331
chore: remove legacy Dusk tests and configure maintenance driver
2026-08-19 13:49:14 +02:00
Andras Bacsai
937892b3ea
fix(storage): guard volume names and authorize source removal
2026-08-19 13:15:15 +02:00
Andras Bacsai
1d37968f5d
Merge remote-tracking branch 'origin/next' into remove-local-volume-source
2026-08-19 13:13:09 +02:00
Andras Bacsai
81227670e6
Reapply "Merge origin/next into main"
...
This reverts commit 15359833d3
2026-08-19 12:39:55 +02:00
Andras Bacsai
15359833d3
Revert "Merge origin/next into main"
...
This reverts commit 541d743907bb1d3f13f2
2026-08-19 12:33:16 +02:00
Andras Bacsai and GitHub
38aaf8cb2a
fix(caddy): prevent exact label generation argument error ( #11397 )
2026-08-19 12:31:36 +02:00
Andras Bacsai
541d743907
Merge origin/next into main
2026-08-19 12:30:09 +02:00
Andras Bacsai
534f22a0df
Merge remote-tracking branch 'origin/main'
2026-08-19 12:06:35 +02:00
Andras Bacsai
89480bcc61
feat(api): add instance email settings endpoints
...
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras Bacsai and GitHub
59be75bdac
fix(email): prevent Proton SMTP From header folding ( #11400 )
2026-08-19 11:52:59 +02:00
Andras Bacsai
2b8e684f68
Merge remote-tracking branch 'origin/main'
2026-08-19 11:41:45 +02:00
Andras Bacsai
22f0af8d0e
feat(platform): support SMTP EHLO, page-preserving teams, and upgrades
2026-08-19 11:41:41 +02:00
Andras Bacsai and GitHub
34da7232aa
fix(api-tokens): scope token access to current team ( #11396 )
2026-08-19 11:27:23 +02:00
Andras Bacsai and GitHub
849ba8f34c
fix(email): support custom SMTP EHLO domains ( #11398 )
2026-08-19 11:25:46 +02:00
github-actions[bot]
4d4bd098b7
Merge remote-tracking branch 'origin/main' into next
2026-08-19 08:55:26 +00:00
Andras Bacsai and GitHub
ae85688651
fix(email): respect disabled SMTP encryption in test emails ( #11384 )
2026-08-19 10:55:10 +02:00
github-actions[bot]
ce1d621dda
Merge remote-tracking branch 'origin/main' into next
2026-08-19 08:43:43 +00:00
Andras Bacsai and GitHub
41f7152441
fix(email): apply configured sender identity ( #11393 )
2026-08-19 10:43:25 +02:00
github-actions[bot]
0bc826bf45
Merge remote-tracking branch 'origin/main' into next
2026-08-18 21:38:56 +00:00
Andras Bacsai
github-actions[bot]
peaklabs-dev