coolify

mirror of https://github.com/coollabsio/coolify.git synced 2026-11-12 15:53:46 -04:00

Files

T

Andras Bacsai c75e7078b7 fix(access): restrict preview changes, rollbacks, and repo URL updates

- Require the write permission and update policy to open a preview or
  change its pull request URL, git type, or docker tag via the API;
  deploy-only tokens can only redeploy an existing preview
- Reject rollbacks to commits that are neither a listed rollback image
  nor a successful production deployment (GetRollbackImages::allows)
- Validate git_repository with ValidGitRepositoryUrl when it changes on
  application update
- Add RejectPublishedAppKey global middleware
- Show a "still starting" message when the root setup window is pending
- Document the new 403 responses and constraints in the OpenAPI spec
- Add tests for the new checks

2026-11-08 17:26:34 +01:00

DockerImageFormat.php

fix(applications): allow environment variable references in image tags

2026-10-27 15:05:23 +01:00

ManualWebhookSecret.php

feat(webhooks): require 16 characters for new manual webhook secrets

2026-10-01 20:31:00 +02:00

SafeExternalUrl.php

fix(validation): improve private URL handling and error feedback

2026-08-14 13:34:00 +02:00

SafeSmtpHost.php

v4.7 (#12478 )