Commit graph

15994 commits

Author SHA1 Message Date
Andras Bacsai
c7f014017b Improve outbound URL validation 2026-07-02 14:46:46 +02:00
Andras Bacsai
63d6d835a9
Align resource creation permissions (#10799) 2026-06-29 15:59:46 +02:00
Andras Bacsai
29445bf177 fix: align resource creation permissions 2026-06-29 15:57:17 +02:00
Andras Bacsai
f2d11d9300
fix(railpack): interpolate build-time env variables by sourcing build… (#10768) 2026-06-29 11:08:19 +02:00
Andras Bacsai
9f36a8df31
Harden database backup imports (#10796) 2026-06-29 10:36:31 +02:00
Andras Bacsai
7d65a4b496 Merge remote-tracking branch 'origin/next' into harden-database-import-files 2026-06-29 10:35:35 +02:00
Andras Bacsai
f4c863bc34
fix(service): correct Convex origin env vars and expose HTTP actions port (#10646) 2026-06-29 10:27:55 +02:00
Andras Bacsai
0194a6f104
feat(service): add Inngest one-click service template (#10612) 2026-06-29 10:27:37 +02:00
Andras Bacsai
84bf96ce76
chore(service): gitea-runner patch version bump (#10566) 2026-06-29 10:27:20 +02:00
Andras Bacsai
2d63d51237 fix: harden database backup imports 2026-06-29 10:27:01 +02:00
Andras Bacsai
9a64b2ea0a Merge remote-tracking branch 'origin/next' into fix/railpack-buildtime-env-interpolation 2026-06-29 10:20:07 +02:00
Andras Bacsai
2dc34f61ff fix(railpack): create empty build-time env file 2026-06-29 10:19:22 +02:00
Andras Bacsai
fe9b43be7c
fix(deploy): preserve private key command metadata (#10795) 2026-06-29 10:17:57 +02:00
Andras Bacsai
a630532308 fix(deploy): preserve deploy key command metadata 2026-06-29 10:17:09 +02:00
Andras Bacsai
3729b5c074 improve github webhook 2026-06-28 15:25:58 +02:00
Andras Bacsai
1a5b8d3612 fix(deploy): skip logging deploy key commands 2026-06-28 13:15:18 +02:00
Andras Bacsai
dcb235f831
Validate environment variable keys (#10773) 2026-06-25 18:34:59 +02:00
Andras Bacsai
87d4744390 Validate environment variable keys 2026-06-25 18:19:58 +02:00
Aditya Tripathi
623bf89543
fix(railpack): interpolate build-time env variables by sourcing build-time .env
Railpack builds forwarded build-time variables inline as `env 'KEY=VALUE'`,
which single-quotes each value and prevents shell interpolation. References
like BETTER_AUTH_URL=$COOLIFY_URL reached the build as the literal string
"$COOLIFY_URL" instead of the resolved URL, breaking builds that validate
their env (e.g. SvelteKit/better-auth).

Wrap the railpack `docker buildx build` invocation with the same
wrap_build_command_with_env_export() helper used by the Dockerfile and
Nixpacks build paths, sourcing the build-time .env file (which writes
COOLIFY_* first and double-quotes normal vars to allow $VAR expansion).
Only buildpack control variables (NIXPACKS_/RAILPACK_), excluded from that
file and never needing interpolation, remain inline. Secret flags are
unchanged and read the interpolated values from the exported environment.

Fixes #10736
2026-06-24 20:11:46 +00:00
Andras Bacsai
3f0a0f7a0d
chore(ci): gate docs reminder comments on "Waiting for Docs PR" label (#10659) 2026-06-23 17:24:09 +02:00
Andras Bacsai
f87cacc3f0
chore(deps): bump esbuild, laravel-vite-plugin and vite (#10665) 2026-06-23 17:23:25 +02:00
Andras Bacsai
75791339d0
chore(deps): bump symfony/routing from 7.4.12 to 7.4.13 (#10680) 2026-06-23 17:23:00 +02:00
Andras Bacsai
f9b16b4158
chore(deps): bump symfony/http-foundation from 7.4.8 to 7.4.13 (#10683) 2026-06-23 17:22:40 +02:00
Andras Bacsai
9b6a9c6007
chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 (#10710) 2026-06-23 17:22:16 +02:00
Andras Bacsai
fd9293887e
chore(deps): bump laravel/framework from 12.60.2 to 12.61.1 (#10711) 2026-06-23 17:21:52 +02:00
Andras Bacsai
ae817a53fa
chore(deps): bump guzzlehttp/guzzle from 7.10.3 to 7.12.1 (#10738) 2026-06-23 17:21:27 +02:00
Andras Bacsai
376d9ae86b
chore(deps): bump guzzlehttp/psr7 from 2.10.1 to 2.12.1 (#10739) 2026-06-23 17:21:06 +02:00
dependabot[bot]
b3d4446d44
chore(deps): bump guzzlehttp/psr7 from 2.10.1 to 2.12.1
Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 2.10.1 to 2.12.1.
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/2.12/CHANGELOG.md)
- [Commits](https://github.com/guzzle/psr7/compare/2.10.1...2.12.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
  dependency-version: 2.12.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 17:48:00 +00:00
dependabot[bot]
f3458e8943
chore(deps): bump guzzlehttp/guzzle from 7.10.3 to 7.12.1
Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) from 7.10.3 to 7.12.1.
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.12/CHANGELOG.md)
- [Commits](https://github.com/guzzle/guzzle/compare/7.10.3...7.12.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.12.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 17:20:13 +00:00
dependabot[bot]
7f7f33b06d
chore(deps): bump laravel/framework from 12.60.2 to 12.61.1
Bumps [laravel/framework](https://github.com/laravel/framework) from 12.60.2 to 12.61.1.
- [Release notes](https://github.com/laravel/framework/releases)
- [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md)
- [Commits](https://github.com/laravel/framework/compare/v12.60.2...v12.61.1)

---
updated-dependencies:
- dependency-name: laravel/framework
  dependency-version: 12.61.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-20 05:29:35 +00:00
dependabot[bot]
3c3e11b841
chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54
Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 3.0.52 to 3.0.54.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](https://github.com/phpseclib/phpseclib/compare/3.0.52...3.0.54)

---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
  dependency-version: 3.0.54
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-20 04:01:07 +00:00
Andras Bacsai
00c5a630cf fix(subscription): clamp dynamic quantity to MIN_SERVER_LIMIT on update 2026-06-19 08:27:41 +02:00
dependabot[bot]
c886fdfe69
chore(deps): bump symfony/http-foundation from 7.4.8 to 7.4.13
Bumps [symfony/http-foundation](https://github.com/symfony/http-foundation) from 7.4.8 to 7.4.13.
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md)
- [Commits](https://github.com/symfony/http-foundation/compare/v7.4.8...v7.4.13)

---
updated-dependencies:
- dependency-name: symfony/http-foundation
  dependency-version: 7.4.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 08:03:53 +00:00
dependabot[bot]
6b1c86cb3a
chore(deps): bump symfony/routing from 7.4.12 to 7.4.13
Bumps [symfony/routing](https://github.com/symfony/routing) from 7.4.12 to 7.4.13.
- [Release notes](https://github.com/symfony/routing/releases)
- [Changelog](https://github.com/symfony/routing/blob/8.2/CHANGELOG.md)
- [Commits](https://github.com/symfony/routing/compare/v7.4.12...v7.4.13)

---
updated-dependencies:
- dependency-name: symfony/routing
  dependency-version: 7.4.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-16 04:38:36 +00:00
Andras Bacsai
02ab4b39ef docs: replace CLAUDE.md with AGENTS.md symlink 2026-06-15 16:57:52 +02:00
Andras Bacsai
96ea892748 fix(sidebar): remove theme switcher from sidebar navbar 2026-06-15 13:25:31 +02:00
Andras Bacsai
58af19b378
fix(auth): enforce policies across API and Livewire (#8628) 2026-06-15 13:18:29 +02:00
Andras Bacsai
dfd4d7e802 feat(resource-details): make copy fields visible and accessible 2026-06-15 13:17:53 +02:00
Andras Bacsai
371eb1e38c fix(upgrade): hide upgrade labels in collapsed sidebar 2026-06-15 12:56:19 +02:00
Andras Bacsai
d2deaa8363 fix(auth): restrict Sentinel access and register S3 policy 2026-06-15 12:31:30 +02:00
Andras Bacsai
46a9578d69 test: align mobile application actions expectations 2026-06-15 12:06:54 +02:00
Andras Bacsai
78d8afa602 Merge remote-tracking branch 'origin/next' into audit-policies 2026-06-15 12:05:19 +02:00
dependabot[bot]
85af9d7120
chore(deps): bump esbuild, laravel-vite-plugin and vite
Removes [esbuild](https://github.com/evanw/esbuild). It's no longer used after updating ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [laravel-vite-plugin](https://github.com/laravel/vite-plugin) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). These dependencies need to be updated together.


Removes `esbuild`

Updates `laravel-vite-plugin` from 2.0.1 to 3.1.0
- [Release notes](https://github.com/laravel/vite-plugin/releases)
- [Changelog](https://github.com/laravel/vite-plugin/blob/3.x/CHANGELOG.md)
- [Upgrade guide](https://github.com/laravel/vite-plugin/blob/3.x/UPGRADE.md)
- [Commits](https://github.com/laravel/vite-plugin/compare/v2.0.1...v3.1.0)

Updates `vite` from 7.3.2 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version:
  dependency-type: indirect
- dependency-name: laravel-vite-plugin
  dependency-version: 3.1.0
  dependency-type: direct:development
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-14 11:55:25 +00:00
ShadowArcanist
7717860109
chore(ci): gate docs reminder comments on "Waiting for Docs PR" label 2026-06-13 20:52:22 +05:30
Andras Bacsai
52739141ee
fix(previews): clean up closed PR previews after update failures (#10180) 2026-06-12 20:08:34 +02:00
Andras Bacsai
442ed98169 feat(project): add mobile action controls for resources
Show restart, stop, redeploy, and update actions directly in the mobile
headers for applications, databases, and services, with coverage for the
mobile resource menu behavior.
2026-06-12 16:09:26 +02:00
Andras Bacsai
1aca7ead8c fix(logs): constrain activity monitor output width 2026-06-12 16:06:20 +02:00
Andras Bacsai
03d2fabc64 chore(release): bump Coolify to 4.2.0 2026-06-12 16:05:41 +02:00
Andras Bacsai
61d2d17f52 feat(subscription): add Stripe action controls
Add subscription action handling and tests for cancel, resume, and refund flows while resolving StripeClient through the container.
2026-06-12 15:54:21 +02:00
Torsten O'Donoghue
1e5e4ae61e fix(service): correct Convex origin env vars and expose HTTP actions port 2026-06-12 10:45:52 +02:00