Andras Bacsai
57a322ba11
fix(audit): restrict sensitive fields and centralize event filtering
2026-08-24 10:05:29 +02:00
Andras Bacsai
d74352f423
fix(audit): harden audit logging and admin controls
...
Log audit failures, redact invitation emails, exclude noisy model fields, and gate audit-log filters and pagination by admin access.
2026-08-24 09:13:20 +02:00
Andras Bacsai
c1f29beff1
feat(audit): expose team events and log integration actions
...
Add an admin-only audit-events API endpoint and restrict audit-log UI access. Record integration token and secret manager changes, key access, and references in audit events.
2026-08-24 07:56:21 +02:00
Andras Bacsai
8726746241
Merge remote-tracking branch 'origin/next' into team-resource-audit-logging
2026-08-24 00:02:30 +02:00
Andras Bacsai
91d4467322
feat(secrets): resolve integrations across deployments and databases
...
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
2026-08-23 21:33:00 +02:00
Andras Bacsai
51461456f6
feat(secrets): resolve remote secret references at deployment
...
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
2026-08-23 20:09:31 +02:00
Andras Bacsai
40e5fd8521
feat(audit): add team activity tracking and audit log
2026-08-22 13:18:14 +02:00
Andras Bacsai
ca5fcce39b
Reapply "Merge branch 'next' into main"
...
This reverts commit 7bbd91175f
2026-08-21 12:15:46 +02:00
Andras Bacsai
7bbd91175f
Revert "Merge branch 'next' into main"
...
This reverts commit 2598f3e4c883f1a2e503
2026-08-21 12:12:56 +02:00
github-actions[bot]
9866593a51
Merge remote-tracking branch 'origin/main' into next
2026-08-20 10:50:16 +00:00
Andras Bacsai and GitHub
33218532a8
Align resource access checks ( #11405 )
2026-08-20 12:49:59 +02:00
github-actions[bot]
5b749850a3
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:39:12 +00:00
Andras Bacsai
8f90882875
fix(teams): make membership and source deletions atomic
...
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
github-actions[bot]
cd1e595492
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:35:24 +00:00
Andras Bacsai
680071dca8
fix(teams): restrict deletion to owners and backfill team ownership
2026-08-20 09:32:32 +02:00
peaklabs-dev
88ec944be7
fix(var): fail on missing user when hiding env values
2026-08-19 15:22:25 +02:00
peaklabs-dev
afbe4d6fd7
feat(var): add environment variable copy functionality
2026-08-19 15:11:49 +02:00
Andras Bacsai
13a577a731
fix: align resource access checks
2026-08-19 15:05:51 +02:00
Andras Bacsai
937892b3ea
fix(storage): guard volume names and authorize source removal
2026-08-19 13:15:15 +02:00
Andras Bacsai
1d37968f5d
Merge remote-tracking branch 'origin/next' into remove-local-volume-source
2026-08-19 13:13:09 +02:00
Andras Bacsai
81227670e6
Reapply "Merge origin/next into main"
...
This reverts commit 15359833d3
2026-08-19 12:39:55 +02:00
Andras Bacsai
15359833d3
Revert "Merge origin/next into main"
...
This reverts commit 541d743907bb1d3f13f2
2026-08-19 12:33:16 +02:00
Andras Bacsai
541d743907
Merge origin/next into main
2026-08-19 12:30:09 +02:00
Andras Bacsai
2b8e684f68
Merge remote-tracking branch 'origin/main'
2026-08-19 11:41:45 +02:00
Andras Bacsai
22f0af8d0e
feat(platform): support SMTP EHLO, page-preserving teams, and upgrades
2026-08-19 11:41:41 +02:00
Andras Bacsai and GitHub
34da7232aa
fix(api-tokens): scope token access to current team ( #11396 )
2026-08-19 11:27:23 +02:00
Andras Bacsai and GitHub
849ba8f34c
fix(email): support custom SMTP EHLO domains ( #11398 )
2026-08-19 11:25:46 +02:00
github-actions[bot]
ce1d621dda
Merge remote-tracking branch 'origin/main' into next
2026-08-19 08:43:43 +00:00
Andras Bacsai and GitHub
41f7152441
fix(email): apply configured sender identity ( #11393 )
2026-08-19 10:43:25 +02:00
Andras Bacsai
f5f904a403
refactor(storage): separate volumes from directory mounts
2026-08-18 20:01:36 +02:00
Andras Bacsai
e62a2d45a0
Merge branch 'next' into remove-local-volume-source
2026-08-18 19:59:23 +02:00
Andras Bacsai
da8665330b
feat(security): add integration token editing and rotation
2026-08-18 16:24:53 +02:00
Andras Bacsai
85e0821dd4
Merge branch 'main' into third-party-integration-tokens
2026-08-18 16:15:53 +02:00
Andras Bacsai
743f54b317
feat(security): add Cloudflare integration token management
...
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
8170798115
fix(security): enforce team-scoped authorization for scheduled tasks ( #11239 )
...
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com >
2026-08-18 16:01:17 +02:00
Andras Bacsai
050107a41d
Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout
2026-08-18 15:11:48 +02:00
Andras Bacsai
1073bbca83
fix(sentinel): clarify restart after settings update
...
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai
8400e26a3f
feat(auth): consolidate OAuth settings into standard authentication page
...
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai
dd597d1527
fix(backups): support long-running volume backups
2026-08-18 14:10:23 +02:00
Andras Bacsai and GitHub
00b7861a8f
fix(services): avoid loading bind-mount file contents ( #10960 )
2026-08-18 14:05:15 +02:00
Andras Bacsai
253e59e731
Merge remote-tracking branch 'origin/next' into openid-auth-support
2026-08-18 14:03:09 +02:00
Andras Bacsai
ccd7c59abf
Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash
2026-08-18 13:58:16 +02:00
Andras Bacsai
861a904992
fix(server): surface pending proxy and outdated Traefik states
2026-08-18 13:53:40 +02:00
Andras Bacsai
d2d6c8ac96
fix(deployments): defer container cleanup and configure dashboard HTTPS
2026-08-18 12:51:54 +02:00
Andras Bacsai and GitHub
cd2c3f3431
fix(postgresql): persist selected public access state ( #11348 )
2026-08-18 09:46:41 +02:00
Andras Bacsai
8ecf77eadb
fix(postgresql): persist selected public access state
2026-08-18 09:42:22 +02:00
Andras Bacsai
0d23b29775
fix: honor GitHub default branches and reconcile proxy networks
...
Use searchable repository and branch selectors, select each repository's default branch when available, and discover running container networks during proxy reconciliation.
2026-08-18 09:16:29 +02:00
Andras Bacsai
17d9d1a370
feat(domains): add configurable HTTPS redirects for service apps
2026-08-18 09:08:18 +02:00
Andras Bacsai
92d6fe9d4e
fix(ui): use solid surfaces for deployment indicator states
...
Remove deployment opacity fading and translucent dark-theme surfaces, and drop the global listbox hover background rule.
2026-08-17 21:38:44 +02:00
Andras Bacsai and GitHub
5c6defbc76
fix(backups): honor full dumps and selected storage deletion ( #11331 )
2026-08-17 18:29:09 +02:00
Andras Bacsai
github-actions[bot]
peaklabs-dev
