Andras Bacsai
15072b9cf7
fix(ui): release modal scroll lock before confirmation submission
...
Close the confirmation modal before submitting destructive actions and reopen it when submission fails or returns an error.
2026-08-21 11:23:04 +02:00
Andras Bacsai and GitHub
33218532a8
Align resource access checks ( #11405 )
2026-08-20 12:49:59 +02:00
Andras Bacsai
c9b857884b
fix(api): align team-scoped responses
2026-08-20 12:40:13 +02:00
Andras Bacsai
38502e8205
fix(resources): preserve deletion when remote cleanup fails
...
Separate remote service cleanup from resource deletion and ensure database removal
completes despite cleanup errors. Update the disabled two-factor badge icon.
2026-08-20 11:10:14 +02:00
Andras Bacsai
8f90882875
fix(teams): make membership and source deletions atomic
...
Wrap team membership changes, invitation revocation, and GitHub source deletion in transactions, with coverage for rollback failures.
2026-08-20 09:38:50 +02:00
Andras Bacsai
1eea1a1412
Merge remote-tracking branch 'origin/main'
2026-08-20 09:34:13 +02:00
Andras Bacsai and GitHub
de1d234ea5
fix(auth): require confirmation before accepting magic links ( #11413 )
2026-08-20 09:34:05 +02:00
Andras Bacsai
680071dca8
fix(teams): restrict deletion to owners and backfill team ownership
2026-08-20 09:32:32 +02:00
Andras Bacsai and GitHub
14d40c73a2
fix(docker-cleanup): finalize executions after job failure ( #11408 )
2026-08-19 16:47:19 +02:00
Andras Bacsai and GitHub
7c69b32c58
fix(services): handle empty compose environment sections ( #11407 )
2026-08-19 16:46:57 +02:00
Andras Bacsai
13a577a731
fix: align resource access checks
2026-08-19 15:05:51 +02:00
Andras Bacsai
15359833d3
Revert "Merge origin/next into main"
...
This reverts commit 541d743907 , reversing
changes made to bb1d3f13f2 .
2026-08-19 12:33:16 +02:00
Andras Bacsai and GitHub
38aaf8cb2a
fix(caddy): prevent exact label generation argument error ( #11397 )
2026-08-19 12:31:36 +02:00
Andras Bacsai
541d743907
Merge origin/next into main
2026-08-19 12:30:09 +02:00
Andras Bacsai
89480bcc61
feat(api): add instance email settings endpoints
...
Add root-team-authorized API access for SMTP and Resend settings with validation, sensitive-field controls, auditing, and coverage.
2026-08-19 11:57:26 +02:00
Andras Bacsai
2b8e684f68
Merge remote-tracking branch 'origin/main'
2026-08-19 11:41:45 +02:00
Andras Bacsai
22f0af8d0e
feat(platform): support SMTP EHLO, page-preserving teams, and upgrades
2026-08-19 11:41:41 +02:00
Andras Bacsai and GitHub
34da7232aa
fix(api-tokens): scope token access to current team ( #11396 )
2026-08-19 11:27:23 +02:00
Andras Bacsai and GitHub
849ba8f34c
fix(email): support custom SMTP EHLO domains ( #11398 )
2026-08-19 11:25:46 +02:00
github-actions[bot]
ba933ac8a0
Merge remote-tracking branch 'origin/main' into next
2026-08-19 09:09:28 +00:00
Andras Bacsai
9e6afc0408
Merge remote-tracking branch 'origin/main'
2026-08-19 11:09:10 +02:00
Andras Bacsai
e3a0279c00
fix(ui): flag pending proxy updates and Sentinel outages
2026-08-19 11:09:02 +02:00
github-actions[bot]
ce1d621dda
Merge remote-tracking branch 'origin/main' into next
2026-08-19 08:43:43 +00:00
Andras Bacsai and GitHub
41f7152441
fix(email): apply configured sender identity ( #11393 )
2026-08-19 10:43:25 +02:00
github-actions[bot]
b9646630c6
Merge remote-tracking branch 'origin/main' into next
2026-08-18 21:41:15 +00:00
Andras Bacsai and GitHub
45d0ec7518
fix(dns): time out validation queries after five seconds ( #11378 )
2026-08-18 23:40:59 +02:00
github-actions[bot]
0bc826bf45
Merge remote-tracking branch 'origin/main' into next
2026-08-18 21:38:56 +00:00
Andras Bacsai and GitHub
1cb9f001f8
fix(ssh): preserve sessions when recycling mux connections ( #11377 )
2026-08-18 23:38:38 +02:00
github-actions[bot]
56537220cd
Merge remote-tracking branch 'origin/main' into next
2026-08-18 21:29:24 +00:00
🏔️ Peak and GitHub
25df9ec473
fix(ui): center icon tooltips over their trigger ( #11382 )
2026-08-18 23:29:09 +02:00
github-actions[bot]
1dc7baf7b5
Merge remote-tracking branch 'origin/main' into next
2026-08-18 20:42:25 +00:00
Andras Bacsai
b4f9c9b51d
feat(development): add QEMU VM provisioning and server seeding
...
Add configurable development QEMU profiles, host setup, VM lifecycle management,
and commands to seed managed VMs as Coolify servers. Improve installation dialog
logs with responsive mobile presentation.
2026-08-18 21:14:29 +02:00
Andras Bacsai and GitHub
f6467feeb3
✨ Add support for apk package manager (on Alpine Linux) ( #6189 )
2026-08-18 16:46:02 +02:00
Andras Bacsai
96790e6531
feat(server): support Alpine package management and Docker setup
...
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
2026-08-18 16:45:02 +02:00
Andras Bacsai
da8665330b
feat(security): add integration token editing and rotation
2026-08-18 16:24:53 +02:00
Andras Bacsai
85e0821dd4
Merge branch 'main' into third-party-integration-tokens
2026-08-18 16:15:53 +02:00
Andras Bacsai
743f54b317
feat(security): add Cloudflare integration token management
...
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
8170798115
fix(security): enforce team-scoped authorization for scheduled tasks ( #11239 )
...
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com >
2026-08-18 16:01:17 +02:00
Andras Bacsai
3b08be1429
fix(auth): handle concurrent OAuth identity creation safely
...
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai
a3e968d03e
fix(backups): preserve existing volume backup timeouts
...
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
2026-08-18 15:41:31 +02:00
Andras Bacsai
d29139f4a3
fix(auth): reject OAuth logins without valid provider IDs
...
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
2026-08-18 15:34:37 +02:00
Andras Bacsai
b075693274
fix(backups): preserve existing volume backup timeouts
...
Change only the default timeout for new volume backups without modifying existing schedules.
2026-08-18 15:30:59 +02:00
Andras Bacsai
f9f26c547c
fix(auth): preserve OAuth identity across email changes
...
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai
050107a41d
Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout
2026-08-18 15:11:48 +02:00
Andras Bacsai
1073bbca83
fix(sentinel): clarify restart after settings update
...
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai
ee843b7230
fix(ui): show server warnings with alert icons
2026-08-18 14:51:40 +02:00
Andras Bacsai
ce2ea0544e
feat(auth): improve OAuth buttons and OIDC settings layout
...
Add provider icons and full-width centered login buttons, organize OIDC fields, and remove hardcoded user IDs from the seeder.
2026-08-18 14:33:21 +02:00
Andras Bacsai
8400e26a3f
feat(auth): consolidate OAuth settings into standard authentication page
...
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai
dd597d1527
fix(backups): support long-running volume backups
2026-08-18 14:10:23 +02:00
Andras Bacsai
ad3e7350c1
Merge remote-tracking branch 'origin/main'
2026-08-18 14:05:22 +02:00