Andras Bacsai
e01b8a057e
fix(servers): retain cloud instances awaiting IPs
...
Persist DigitalOcean, Hetzner, and Vultr servers before public IP
assignment, then backfill placeholder addresses from provider state.
Treat partial Sentinel snapshots as non-authoritative and document the
destinations API with OpenAPI schemas.
2026-07-11 21:35:10 +02:00
Andras Bacsai
31f904ef9f
Merge remote-tracking branch 'origin/next' into feature/vultr-cloud-provider
2026-07-07 21:23:07 +02:00
Andras Bacsai
a8000ac2ad
fix(hetzner): require at least one public IP protocol
2026-07-07 14:41:17 +02:00
Andras Bacsai
d723a52d9c
fix(hetzner): secure token-backed option fetches
...
Authorize stored Hetzner cloud provider tokens before fetching
firewalls or networks, hide provider error details, and keep server
creation intact if backup activation fails.
Collapse advanced Hetzner server options by default while preserving
visibility when advanced values are selected.
2026-07-07 14:24:15 +02:00
Andras Bacsai
2ad11fdd9a
Merge remote-tracking branch 'origin/next' into feat/hetzner-firewalls-and-internal-networks
2026-07-07 13:47:51 +02:00
Andras Bacsai
c58b4fd69c
Merge remote-tracking branch 'origin/next' into feature/vultr-cloud-provider
2026-07-07 13:44:37 +02:00
Andras Bacsai
ff976a134f
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-07-07 12:56:19 +02:00
Andras Bacsai
2caa5e67ff
fix(github): derive API URLs from GitHub HTML hosts ( #10610 )
2026-07-07 12:29:15 +02:00
Andras Bacsai
21bd8fa2bc
fix(github): reject malformed app URL origins
2026-07-07 12:24:52 +02:00
Andras Bacsai
d657c10df3
fix(api): allow source commit build setting ( #10551 )
2026-07-07 12:12:32 +02:00
Andras Bacsai
1adeed2a48
fix(github): preserve custom app API URLs
2026-07-03 12:01:16 +02:00
Andras Bacsai
b90380f542
Merge remote-tracking branch 'origin/next' into ghe-support-helpers
2026-07-03 10:15:29 +02:00
Andras Bacsai
13172849e1
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-07-02 15:57:43 +02:00
Andras Bacsai
6871160623
fix(api): gate sensitive storage and GitHub fields
...
Expose GitHub app secrets and file storage content only when the request has sensitive read access. Hide LocalFileVolume content by default and resolve application UUIDs from route parameters.
2026-07-02 15:50:43 +02:00
Andras Bacsai
70021c8d5e
fix(api): handle destination create races as conflicts
2026-07-02 15:33:01 +02:00
Andras Bacsai
4ef884e1ac
Merge remote-tracking branch 'origin/next' into feat/api-destinations
2026-07-02 15:14:13 +02:00
Andras Bacsai
87d4744390
Validate environment variable keys
2026-06-25 18:19:58 +02:00
Andras Bacsai
9e021c4037
fix(api): enforce destination access and cleanup networks
...
Require admin team membership for destination mutations, return invalid-token
responses for tokenless requests, and remove standalone Docker networks when
deleting destinations.
2026-06-15 17:15:56 +02:00
Andras Bacsai
9665aa292c
fix(api): block invalid destination types and service deletions
2026-06-15 17:03:01 +02:00
Andras Bacsai
f5ecdfa4ce
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-15 13:29:25 +02:00
vaguul
63ba33261b
fix(api): allow source commit build setting
2026-06-04 17:51:17 -06:00
Andras Bacsai
062ad57740
fix(security): enforce team access on mutable actions
...
Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.
2026-06-04 11:03:06 +02:00
Andras Bacsai
973632b49c
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-02 12:03:38 +02:00
Andras Bacsai
47682a3085
fix(db): skip postgres tuning outside pgsql
...
Guard the fillfactor/autovacuum migration on non-Postgres connections.
Add API regression coverage for command-substitution git_branch payloads.
2026-06-02 11:41:24 +02:00
Andras Bacsai
6ab88c46b2
Merge remote-tracking branch 'origin/next' into audit-policies
2026-05-13 11:15:29 +02:00
Andras Bacsai
f8849aba73
feat(deployments): track application configuration diffs
...
Store deployment configuration snapshots on application deployment queues and compare them against the current application state. Surface grouped pending changes in the configuration checker and use build-impact diffs to decide when an existing image can skip the build step.
2026-05-13 09:58:58 +02:00
Andras Bacsai
c175d3d282
Merge remote-tracking branch 'origin/next' into audit-policies
2026-05-11 21:13:57 +02:00
Andras Bacsai
22a2c05a1d
test(railpack): add API, Livewire UI tests and e2e smoke script
...
Add feature tests covering railpack build pack via REST API and
Livewire UI components, plus a bash smoke test that deploys seeded
railpack-* example apps against the local dev stack and verifies
COOLIFY_*, SOURCE_COMMIT, and RAILPACK_* env vars land correctly.
2026-05-05 15:32:43 +02:00
Andras Bacsai
1f9dd5326f
Merge remote-tracking branch 'origin/next' into audit-policies
...
# Conflicts:
# tests/Feature/DatabaseBackupCreationApiTest.php
2026-04-19 17:40:12 +02:00
Andras Bacsai
43f33d94ad
Merge remote-tracking branch 'origin/next' into audit-policies
...
# Conflicts:
# app/Http/Controllers/Api/SecurityController.php
# app/Http/Controllers/Api/ServersController.php
# app/Livewire/Admin/Index.php
# app/Livewire/Destination/Show.php
# app/Livewire/NavbarDeleteTeam.php
# app/Livewire/Project/Application/Previews.php
# app/Livewire/Project/DeleteProject.php
# app/Livewire/Project/Shared/ResourceOperations.php
# app/Livewire/Server/Resources.php
# app/Livewire/Server/ValidateAndInstall.php
# app/Livewire/Storage/Show.php
# resources/views/livewire/dashboard.blade.php
# resources/views/livewire/project/application/heading.blade.php
# resources/views/livewire/project/database/heading.blade.php
# resources/views/livewire/project/service/heading.blade.php
# resources/views/livewire/project/shared/environment-variable/show.blade.php
# resources/views/livewire/project/shared/scheduled-task/show.blade.php
# tests/Feature/Security/TrustHostsMiddlewareTest.php
2026-04-19 15:19:37 +02:00
Andras Bacsai
4fa048f931
Merge remote-tracking branch 'origin/next' into audit-policies
2026-03-03 19:41:05 +01:00
Andras Bacsai
e82942b387
test: refresh api and job feature suites
2026-02-26 08:37:20 +01:00
Andras Bacsai
347af07a79
chore(tests): reorganize feature suites and expand team auth coverage
2026-02-26 07:13:19 +01:00
