Commit graph

16860 commits

Author SHA1 Message Date
Andras Bacsai
96790e6531 feat(server): support Alpine package management and Docker setup
Add Alpine prerequisites, Docker CLI plugins, and OpenRC service handling while
falling back to sh for SSH commands on hosts without Bash.
2026-08-18 16:45:02 +02:00
Andras Bacsai
ff13c22431
feat(security): add Cloudflare integration token management (#11359) 2026-08-18 16:43:06 +02:00
Andras Bacsai
e78fde9b53 Merge remote-tracking branch 'origin/next' into third-party-integration-tokens 2026-08-18 16:26:53 +02:00
github-actions[bot]
b02dc82ebe Merge remote-tracking branch 'origin/main' into next 2026-08-18 14:26:14 +00:00
Andras Bacsai
a9ae9caedc chore: ignore superpowers plan files 2026-08-18 16:25:56 +02:00
github-actions[bot]
6d3f0e985c Merge remote-tracking branch 'origin/main' into next 2026-08-18 14:25:02 +00:00
Andras Bacsai
da8665330b feat(security): add integration token editing and rotation 2026-08-18 16:24:53 +02:00
Andras Bacsai
f4852dd96c ci: use current checkout action for branch sync 2026-08-18 16:24:41 +02:00
github-actions[bot]
39d1300877 Merge remote-tracking branch 'origin/main' into next 2026-08-18 14:24:27 +00:00
Andras Bacsai
9281e8604c ci: sync main changes to next 2026-08-18 16:24:11 +02:00
Mael
e7ad8fe59d
fix(oauth): prevent data loss during OAuth settings re-seed (#8210) 2026-08-18 16:23:47 +02:00
Andras Bacsai
fe9e1e46f5 Merge remote-tracking branch 'origin/main' into next 2026-08-18 16:17:26 +02:00
Andras Bacsai
85e0821dd4 Merge branch 'main' into third-party-integration-tokens 2026-08-18 16:15:53 +02:00
Andras Bacsai
743f54b317 feat(security): add Cloudflare integration token management
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
2026-08-18 16:15:34 +02:00
Helge Sverre
8170798115
fix(security): enforce team-scoped authorization for scheduled tasks (#11239)
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
2026-08-18 16:01:17 +02:00
Andras Bacsai
8aa2cbe462
fix(backups): support long-running volume backups (#11358) 2026-08-18 15:52:52 +02:00
Andras Bacsai
dd4ec1ab5e
fix(auth): preserve OAuth identity across email changes (#11357) 2026-08-18 15:51:00 +02:00
Andras Bacsai
3b08be1429 fix(auth): handle concurrent OAuth identity creation safely
Recover existing OAuth and OIDC identities after unique constraint races and reject boolean or floating-point provider IDs.
2026-08-18 15:43:46 +02:00
Andras Bacsai
a3e968d03e fix(backups): preserve existing volume backup timeouts
Only update timeout when the API request explicitly provides one, with coverage for custom timeout values.
2026-08-18 15:41:31 +02:00
Andras Bacsai
d29139f4a3 fix(auth): reject OAuth logins without valid provider IDs
Add validation for missing, blank, and non-scalar provider user IDs and cover the rejection cases with feature tests.
2026-08-18 15:34:37 +02:00
Andras Bacsai
b075693274 fix(backups): preserve existing volume backup timeouts
Change only the default timeout for new volume backups without modifying existing schedules.
2026-08-18 15:30:59 +02:00
Andras Bacsai
f9f26c547c fix(auth): preserve OAuth identity across email changes
Link OAuth logins by provider user ID before matching email, refresh identity
claims on login, and skip password confirmation for SSO-linked users.
2026-08-18 15:27:27 +02:00
Andras Bacsai
050107a41d Merge remote-tracking branch 'origin/main' into 11273-heavy-volume-timeout 2026-08-18 15:11:48 +02:00
Andras Bacsai
1073bbca83 fix(sentinel): clarify restart after settings update
Add a regression test for the updated success notification.
2026-08-18 15:06:05 +02:00
Andras Bacsai
ee843b7230 fix(ui): show server warnings with alert icons 2026-08-18 14:51:40 +02:00
Andras Bacsai
41b06e73a0
feat(auth): add OIDC SSO and registration controls (#10543) 2026-08-18 14:46:25 +02:00
Andras Bacsai
ce2ea0544e feat(auth): improve OAuth buttons and OIDC settings layout
Add provider icons and full-width centered login buttons, organize OIDC fields, and remove hardcoded user IDs from the seeder.
2026-08-18 14:33:21 +02:00
Andras Bacsai
8400e26a3f feat(auth): consolidate OAuth settings into standard authentication page
Display all OAuth providers on one settings page, prioritize OpenID Connect, and add its provider icon.
2026-08-18 14:22:49 +02:00
Andras Bacsai
dd597d1527 fix(backups): support long-running volume backups 2026-08-18 14:10:23 +02:00
Andras Bacsai
ad3e7350c1 Merge remote-tracking branch 'origin/main' 2026-08-18 14:05:22 +02:00
Andras Bacsai
00b7861a8f
fix(services): avoid loading bind-mount file contents (#10960) 2026-08-18 14:05:15 +02:00
Andras Bacsai
288dc98ca7 fix: enforce remote output size limits 2026-08-18 14:03:33 +02:00
Andras Bacsai
253e59e731 Merge remote-tracking branch 'origin/next' into openid-auth-support 2026-08-18 14:03:09 +02:00
Andras Bacsai
b2af1c11a5 fix(logs): clean up deployment log scrolling on teardown 2026-08-18 14:02:48 +02:00
Andras Bacsai
ccd7c59abf Merge remote-tracking branch 'origin/next' into pr-10960-compose-settings-memory-crash 2026-08-18 13:58:16 +02:00
Andras Bacsai
861a904992 fix(server): surface pending proxy and outdated Traefik states 2026-08-18 13:53:40 +02:00
Andras Bacsai
3cca2a0bfe fix(ui): add spacing between database backup sections
Add a flex column gap to the backup edit layout and cover the spacing with a feature test.
2026-08-18 12:53:41 +02:00
Andras Bacsai
d2d6c8ac96 fix(deployments): defer container cleanup and configure dashboard HTTPS 2026-08-18 12:51:54 +02:00
Andrew Matia
264cb8e2b0
fix(webhook): restore GitLab source deployments (#11284) 2026-08-18 12:24:06 +02:00
Farès SIONI
c2b7978e3e
fix(ui): improve highlighted button and spinner contrast (#11279)
Co-authored-by: 🏔️ Peak <122374094+peaklabs-dev@users.noreply.github.com>
2026-08-18 12:21:49 +02:00
Andras Bacsai
d360da3270
fix(databases): chown SSL certs before container replacement (#11352) 2026-08-18 11:55:55 +02:00
Andras Bacsai
713ddd84fc Merge remote-tracking branch 'origin/main' 2026-08-18 11:39:10 +02:00
NrwPlay
30da9e96eb
fix(notification): update storage email link in S3 error (#8633) 2026-08-18 11:38:01 +02:00
Prai'ns
05ebba9f1a
fix: compress dashboard over HTTPS (#10828)
Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
2026-08-18 11:30:09 +02:00
Andras Bacsai
88eccbf78f chore(release): bump Coolify versions to 4.3.9 2026-08-18 11:29:01 +02:00
Andras Bacsai
417f996ef5
fix(databases): redirect stdin for the SSL cert chown (#11315) 2026-08-18 10:46:24 +02:00
Andras Bacsai
c9d5c4c41f
fix(upgrade): handle missing status after restart (#11350) 2026-08-18 10:41:45 +02:00
Andras Bacsai
a3e78a3677 fix(authorization): gate mutable Livewire controls by policy
Disable unauthorized listbox inputs and hide application deploy actions, with updated disabled styling and coverage.
2026-08-18 10:18:52 +02:00
Andras Bacsai
f588913435
fix(table): keep page-size dropdown within viewport (#11349) 2026-08-18 10:03:07 +02:00
Andras Bacsai
48da7ee6e2 fix(table): preserve computed dropdown top position 2026-08-18 10:02:28 +02:00