Andras Bacsai
d74352f423
fix(audit): harden audit logging and admin controls
...
Log audit failures, redact invitation emails, exclude noisy model fields, and gate audit-log filters and pagination by admin access.
2026-08-24 09:13:20 +02:00
Andras Bacsai
c1f29beff1
feat(audit): expose team events and log integration actions
...
Add an admin-only audit-events API endpoint and restrict audit-log UI access. Record integration token and secret manager changes, key access, and references in audit events.
2026-08-24 07:56:21 +02:00
Andras Bacsai
8726746241
Merge remote-tracking branch 'origin/next' into team-resource-audit-logging
2026-08-24 00:02:30 +02:00
Andras Bacsai
6d716e54d7
fix(database): preserve credentials and activity context on start
...
Keep raw secret values for database credentials, escape Redis passwords in startup commands, and pass user context through queued database starts.
2026-08-23 23:03:06 +02:00
Andras Bacsai
f49c330d9d
feat(database): queue starts and resolve credentials securely
...
Extract database start command execution into a shared service and job, preserving activity tracking and status events while supporting resolved secret credentials.
2026-08-23 22:33:03 +02:00
Andras Bacsai
91d4467322
feat(secrets): resolve integrations across deployments and databases
...
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
2026-08-23 21:33:00 +02:00
Andras Bacsai
ba179d50ac
feat(secrets): add integration token and application manager APIs
...
Add API endpoints for creating validated secret manager tokens and configuring application secret manager settings. Suppress secret-bearing deployment command logs and redact resolved remote secrets.
2026-08-23 20:42:20 +02:00
Andras Bacsai
51461456f6
feat(secrets): resolve remote secret references at deployment
...
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
2026-08-23 20:09:31 +02:00
Andras Bacsai
40e5fd8521
feat(audit): add team activity tracking and audit log
2026-08-22 13:18:14 +02:00
Andras Bacsai
ca5fcce39b
Reapply "Merge branch 'next' into main"
...
This reverts commit 7bbd91175f
2026-08-21 12:15:46 +02:00
Andras Bacsai
7bbd91175f
Revert "Merge branch 'next' into main"
...
This reverts commit 2598f3e4c883f1a2e503
2026-08-21 12:12:56 +02:00
Andras Bacsai and GitHub
2598f3e4c8
Merge branch 'next' into main
2026-08-21 12:11:40 +02:00
Andras Bacsai and GitHub
83f1a2e503
fix(domains): allow adding domains without explicit ports ( #11442 )
2026-08-21 12:04:14 +02:00
Andras Bacsai
15072b9cf7
fix(ui): release modal scroll lock before confirmation submission
...
Close the confirmation modal before submitting destructive actions and reopen it when submission fails or returns an error.
2026-08-21 11:23:04 +02:00
Andras Bacsai and GitHub
65f4649a7d
fix(deployments): ignore newly tracked static configuration ( #11430 )
2026-08-20 20:17:08 +02:00
github-actions[bot]
9866593a51
Merge remote-tracking branch 'origin/main' into next
2026-08-20 10:50:16 +00:00
Andras Bacsai and GitHub
33218532a8
Align resource access checks ( #11405 )
2026-08-20 12:49:59 +02:00
Andras Bacsai
c9b857884b
fix(api): align team-scoped responses
2026-08-20 12:40:13 +02:00
github-actions[bot]
fc6f6fd0d4
Merge remote-tracking branch 'origin/main' into next
2026-08-20 09:10:52 +00:00
Andras Bacsai
38502e8205
fix(resources): preserve deletion when remote cleanup fails
...
Separate remote service cleanup from resource deletion and ensure database removal
completes despite cleanup errors. Update the disabled two-factor badge icon.
2026-08-20 11:10:14 +02:00
github-actions[bot]
5b749850a3
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:39:12 +00:00
Andras Bacsai
8f90882875
fix(teams): make membership and source deletions atomic
...
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
github-actions[bot]
cd1e595492
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:35:24 +00:00
github-actions[bot]
7759c9b910
Merge remote-tracking branch 'origin/main' into next
2026-08-20 07:34:23 +00:00
Andras Bacsai
1eea1a1412
Merge remote-tracking branch 'origin/main'
2026-08-20 09:34:13 +02:00
Andras Bacsai and GitHub
de1d234ea5
fix(auth): require confirmation before accepting magic links ( #11413 )
2026-08-20 09:34:05 +02:00
Andras Bacsai
680071dca8
fix(teams): restrict deletion to owners and backfill team ownership
2026-08-20 09:32:32 +02:00
github-actions[bot]
e8b0840c09
Merge remote-tracking branch 'origin/main' into next
2026-08-19 14:47:36 +00:00
Andras Bacsai and GitHub
14d40c73a2
fix(docker-cleanup): finalize executions after job failure ( #11408 )
2026-08-19 16:47:19 +02:00
github-actions[bot]
1d0050ef76
Merge remote-tracking branch 'origin/main' into next
2026-08-19 14:47:17 +00:00
Andras Bacsai and GitHub
7c69b32c58
fix(services): handle empty compose environment sections ( #11407 )
2026-08-19 16:46:57 +02:00
peaklabs-dev
dd0bae638d
test(var): fix env variable tests
2026-08-19 15:24:02 +02:00
peaklabs-dev
afbe4d6fd7
feat(var): add environment variable copy functionality
2026-08-19 15:11:49 +02:00
peaklabs-dev
eb9a422d9b
refactor(ui): rename forms.copy-button to forms.copy-input
2026-08-19 15:11:49 +02:00
peaklabs-dev
8757cd2686
test: update tests for the new copy button component
2026-08-19 15:11:49 +02:00
Andras Bacsai
13a577a731
fix: align resource access checks
2026-08-19 15:05:51 +02:00
Andras Bacsai
63d22f1331
chore: remove legacy Dusk tests and configure maintenance driver
2026-08-19 13:49:14 +02:00
Andras Bacsai
937892b3ea
fix(storage): guard volume names and authorize source removal
2026-08-19 13:15:15 +02:00
Andras Bacsai
1d37968f5d
Merge remote-tracking branch 'origin/next' into remove-local-volume-source
2026-08-19 13:13:09 +02:00
github-actions[bot]
ff69fa91ab
Merge remote-tracking branch 'origin/main' into next
2026-08-19 11:07:36 +00:00
Andras Bacsai
58861227e0
fix(ci): allow RC workflow to revalidate prereleases
2026-08-19 13:07:07 +02:00
Andras Bacsai
81227670e6
Reapply "Merge origin/next into main"
...
This reverts commit 15359833d3
2026-08-19 12:39:55 +02:00
Andras Bacsai
15359833d3
Revert "Merge origin/next into main"
...
This reverts commit 541d743907bb1d3f13f2
2026-08-19 12:33:16 +02:00
Andras Bacsai and GitHub
38aaf8cb2a
fix(caddy): prevent exact label generation argument error ( #11397 )
2026-08-19 12:31:36 +02:00
Andras Bacsai
541d743907
Merge origin/next into main
2026-08-19 12:30:09 +02:00
Andras Bacsai
bb1d3f13f2
feat(ci): add next build and RC release workflows
...
Replace generic staging builds with traceable next images and reviewed RC releases.
2026-08-19 12:22:51 +02:00
Andras Bacsai and GitHub
c3a86b054a
fix(upgrade): persist target image before container recreation ( #11401 )
2026-08-19 12:18:05 +02:00
Andras Bacsai
534f22a0df
Merge remote-tracking branch 'origin/main'
2026-08-19 12:06:35 +02:00
Andras Bacsai
89480bcc61
feat(api): add instance email settings endpoints
...
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras Bacsai and GitHub
59be75bdac
fix(email): prevent Proton SMTP From header folding ( #11400 )
2026-08-19 11:52:59 +02:00
Andras Bacsai
github-actions[bot]
peaklabs-dev