github-actions[bot]
624fbd93f1
Merge remote-tracking branch 'origin/main' into next
2026-10-28 21:35:09 +00:00
Andras Bacsai and Claude Opus 5.5
2b6af2744a
fix(database): index server settings and team membership lookups
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 22:30:40 +01:00
Andras Bacsai
42ba6ec666
fix(docker): preserve storage directory .gitignore files
2026-10-28 22:28:00 +01:00
github-actions[bot]
25bbb69381
Merge remote-tracking branch 'origin/main' into next
2026-10-28 21:17:02 +00:00
Andras Bacsai and Claude Opus 5.5
0951c5daa1
fix(database): index team deployment and Docker cleanup history lookups
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 22:14:51 +01:00
Andras Bacsai and Claude Opus 5.5
06747f9954
chore(release): bump Coolify version to 4.5.4
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 22:14:12 +01:00
Andras Bacsai
57cdd92f7c
fix(upgrade): count only scheduled jobs running on this host
2026-10-28 22:13:40 +01:00
Andras Bacsai and Claude Opus 5.5
24648d4b20
fix(docker-cleanup): skip broadcast for executions of deleted servers
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 22:13:27 +01:00
github-actions[bot]
d22f75ae0b
Merge remote-tracking branch 'origin/main' into next
2026-10-28 14:08:14 +00:00
Andras Bacsai and Claude Opus 5.5
70c1bcb138
fix(versions): restore helper 1.0.19 and Sentinel 1.1.3
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
v4.5.3
2026-10-28 15:05:32 +01:00
Andras Bacsai
bc61f4860f
fix(railpack): serialize builder bootstrap before builds
2026-10-28 15:00:59 +01:00
github-actions[bot]
9d0b6a5054
Merge remote-tracking branch 'origin/main' into next
2026-10-28 13:28:51 +00:00
Andras Bacsai and Claude Opus 5.5
5de2456186
chore(versions): bump coolify-helper to 1.0.19
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
Andras Bacsai and Claude Opus 5.5
bd9708d79b
fix(compose): let the build interpolate required runtime-only variables
...
Closes #12363
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
Andras Bacsai and Claude Opus 5.5
e7a46bd790
fix(mcp): show commands and configuration to read:sensitive tokens
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
Andras Bacsai and Claude Opus 5.5
afe8fc05ea
fix(healthcheck): keep the Dockerfile HEALTHCHECK of existing applications
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
Andras Bacsai and Claude Opus 5.5
fd5efd0273
fix(http): stop retrying requests that timed out after they were sent
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
Andras Bacsai and Claude Opus 5.5
597a878d80
fix(hetzner): validate over SSH when the Hetzner API call fails
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
Andras Bacsai and Claude Opus 5.5
c4a7cd6d4a
fix(ssh): reap orphaned ControlPersist mux masters
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 14:16:22 +01:00
github-actions[bot]
05b6025316
Merge remote-tracking branch 'origin/main' into next
2026-10-28 13:07:57 +00:00
Andras Bacsai
2e874576e1
chore(release): bump Coolify version to 4.5.3
2026-10-28 13:59:51 +01:00
github-actions[bot]
71f1c33bf1
Merge remote-tracking branch 'origin/main' into next
2026-10-28 11:27:20 +00:00
76d2eb25c3
chore: merge main into next ( #12354 )
...
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com >
Co-authored-by: Aditya Tripathi <aditya@climactic.co >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 12:27:08 +01:00
Andras Bacsai
47ddb84edb
Merge remote-tracking branch 'origin/next' into automation/sync-main-to-next
2026-10-28 12:23:07 +01:00
Andras Bacsai
7e6de3872f
chore(release): bump Coolify version to 4.5.2
v4.5.2
2026-10-28 12:16:17 +01:00
Andras Bacsai
9aca61fbd6
fix(ssh): start mux masters with a command that exits
...
When another process held the control socket, `ssh -fN` disabled
multiplexing and stayed open as a plain connection forever. Each one
kept an sshd process on the server, which used up its memory.
Run `true` instead of -fN. ControlPersist moves a new master to the
background; a process that cannot become the master exits.
2026-10-28 12:10:27 +01:00
Andras Bacsai
2dcf8eeca3
fix(previews): keep production values for previews from before the upgrade
...
Public pull request previews no longer get production values, and no
preview falls back to production variables. Existing previews were
deployed with these values; for example, their databases were
initialized with the production password, so they broke on redeploy.
Previews that exist at the upgrade get keeps_production_values and
keep the earlier behavior. Previews created later do not. Server
transfer moves the flag.
2026-10-28 12:10:27 +01:00
Andras Bacsai
5dacaed9f2
fix(proxy): keep the application proxy labels of v4.5.0
...
The retry labels (Traefik retry middleware, Caddy lb_try_duration)
changed the labels of every application. On the first rolling update
after a settings save, the old and the new container defined the same
Traefik router differently, so Traefik dropped the route and returned
503 until the old container stopped.
Remove the retry labels from this release. The rolling update drain
wait stays.
2026-10-28 12:10:27 +01:00
Andras Bacsai
ef57eea320
fix(backups): sign mc requests with S3v4 and retry failed S3 uploads
2026-10-28 10:35:46 +01:00
Andras Bacsai
c2de0d83d8
docs(security): clarify threat model and vulnerability severity
2026-10-27 22:58:21 +01:00
Andras Bacsai and Claude Opus 5.5
5145aa53dc
fix(services): align service configuration form with role permissions ( #12356 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 22:39:52 +01:00
Andras Bacsai and Claude Opus 5.5
eaabed5c4b
fix: scope finish events of background tasks to their team ( #12355 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 22:36:25 +01:00
Andras Bacsai and Claude Opus 5.5
fae2752346
fix(databases): show custom configuration only to admins ( #12353 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 22:34:47 +01:00
62b2a99a70
chore: merge main into next ( #12351 )
...
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com >
Co-authored-by: Aditya Tripathi <aditya@climactic.co >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 22:25:43 +01:00
Andras Bacsai and Claude Opus 5.5
bc0cb1b37d
fix(database-import): improve MySQL and MariaDB restore handling ( #12352 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 21:47:28 +01:00
Andras Bacsai
e21be95392
Merge branch 'ghsa-v432-app-credentials-members'
2026-10-27 21:40:37 +01:00
Andras Bacsai
0372f5a319
Merge branch 'ghsa-ffqv-source-webhook-secret'
2026-10-27 21:28:21 +01:00
Andras Bacsai and Claude Opus 5.5
9b9d1309d1
fix(api): allow write tokens to set manual webhook secrets
...
Webhook secrets are stored settings, so a token with the write ability can
set or change them, the same as GitHub App and GitLab App webhook secrets.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 21:24:20 +01:00
Andras Bacsai and Claude Opus 5.5
eb030c6a22
fix(auth): limit application commands and configuration to admins and read:sensitive tokens
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 21:19:20 +01:00
Andras Bacsai
daf6b85cab
Merge branch 'ghsa-fgfp-pushover-log'
2026-10-27 21:16:06 +01:00
Andras Bacsai
8d29e3c62f
chore(notifications): remove debug logging from Pushover message
2026-10-27 21:15:27 +01:00
fe6c73726d
chore: merge main into next ( #12344 )
...
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com >
Co-authored-by: Aditya Tripathi <aditya@climactic.co >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 20:25:53 +01:00
Andras Bacsai
efbd64346c
fix(log-drains): support Axiom edge domains and sudo shell operators
v4.5.1
2026-10-27 18:56:55 +01:00
Andras Bacsai
d59899469c
test(deployments): cover Docker-created bind dirs and sudo-less imports
2026-10-27 18:56:46 +01:00
Andras Bacsai and Claude Opus 5.5
56d0cf0e27
fix(servers): validate new cloud servers automatically when they are running
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 17:58:34 +01:00
Andras Bacsai and Claude Opus 5.5
28f44d3aa0
fix(hetzner): show out-of-stock server types as disabled in the server form
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 17:44:34 +01:00
Andras Bacsai
101444b8ca
fix(log-drains): support Axiom edge domains and update Fluent Bit to 5.1
...
- Add an Axiom edge domain setting (default us-east-1) and use the /v1/ingest endpoint, so EU datasets work
- Remove the Highlight drain (service ended) and stop its running containers
- Update Fluent Bit from 2.0 to 5.1 and use the warn log level
- Restart running drains when the generated files change, with the new image pulled before the old container stops
- Show log drain validation errors under their fields
Closes #9898
2026-10-27 17:41:50 +01:00
Andras Bacsai and Claude Opus 5.5
18a85d37ba
fix(hetzner): hide server types that are out of stock or deprecated in a location
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 17:35:22 +01:00
Andras Bacsai
1242353511
Merge remote-tracking branch 'origin/main'
2026-10-27 17:24:19 +01:00
Andras Bacsai and Claude Opus 5.5
67673525a8
fix(modal): let password managers autofill the confirmation password
...
Closes #9963
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 17:11:07 +01:00