Andras Bacsai
03a8621516
fix(health-checks): prevent command injection in health check commands ( #8611 )
2026-02-25 10:59:00 +01:00
Andras Bacsai
30c0b37689
chore: prepare for PR
2026-02-25 10:58:29 +01:00
Aditya Tripathi
036f565785
Merge branch 'next' into feat/healthcheck-cmd
2026-02-24 22:22:02 +05:30
Andras Bacsai
cb759b2846
fix(api): correct permission requirements for POST endpoints ( #8600 )
2026-02-24 14:57:51 +01:00
Andras Bacsai
d8419fad93
chore: prepare for PR
2026-02-24 14:57:32 +01:00
Tjeerd Smid
175e5b3c6d
Merge branch 'next' into fix/rollback-uses-correct-commit
2026-02-24 13:18:46 +01:00
Andras Bacsai
279322d50f
fix(input): prevent eye icon flash on password fields before Alpine.js loads ( #8599 )
2026-02-24 12:57:22 +01:00
Andras Bacsai
f39a1da7be
fix(auth): prevent CSRF redirect loop during 2FA challenge ( #8596 )
2026-02-24 12:57:10 +01:00
Andras Bacsai
448e922e6c
chore: prepare for PR
2026-02-24 12:56:54 +01:00
Andras Bacsai
78e584a136
feat(service): upgrade beszel and beszel-agent to v0.18 ( #8513 )
2026-02-24 12:56:36 +01:00
Andras Bacsai
912e5f6db2
feat(service): disable pterodactyl panel and pterodactyl wings ( #8512 )
2026-02-24 12:55:52 +01:00
Andras Bacsai
f8de374f77
feat(service): disable plane ( #8580 )
2026-02-24 12:55:29 +01:00
Andras Bacsai
2986d7604e
chore: prepare for PR
2026-02-24 10:17:16 +01:00
ShadowArcanist
b36d67288b
feat(service): disable plane
...
The latest version of plane v1.2.2 have security fixed but our template is using v1.0.0 which is 5 months behind the current latest. New version v1.2.2 doesn't work with our existing template so disabling it for now to prevent users from deploying a vulnerable version of plane
2026-02-24 02:34:35 +05:30
Maurits de Ruiter
8cc10ab10a
fix: enable preview deployment page for deploy key applications
2026-02-23 21:08:43 +01:00
Tjeerd Smid
1935403053
fix: application rollback uses correct commit sha
...
- setGitImportSettings() now accepts optional $commit parameter
- Uses passed commit over application's git_commit_sha (typically HEAD)
- Fixes rollback deploying latest instead of selected commit
- Also fixes shallow clone "bad object" error on rollback
Fixes #8445
2026-02-23 20:13:07 +01:00
peaklabs-dev
7cf13db84f
chore(repo): improve contributor PR template
2026-02-23 19:44:34 +01:00
Andras Bacsai
021605dbf0
fix(deploy): split BuildKit and secrets detection ( #8565 )
2026-02-23 15:20:25 +01:00
Andras Bacsai
ec14b55f0a
chore: prepare for PR
2026-02-23 14:28:28 +01:00
Andras Bacsai
2310ad5f7f
chore(ui): widen project heading nav spacing ( #8564 )
2026-02-23 14:17:38 +01:00
Andras Bacsai
6cacd2f0ff
chore: prepare for PR
2026-02-23 14:17:15 +01:00
Andras Bacsai
46923f7e77
fix(applications): treat zero private_key_id as deploy key ( #8563 )
2026-02-23 14:16:11 +01:00
Andras Bacsai
620da191b1
chore: prepare for PR
2026-02-23 14:15:13 +01:00
Andras Bacsai
d71d91d63e
fix(version): update coolify version to 4.0.0-beta.464 and nightly version to 4.0.0-beta.465
2026-02-23 13:47:26 +01:00
Andras Bacsai
1f3fca5f71
fix(database): chown redis/keydb configs when custom conf set ( #8561 )
2026-02-23 13:26:58 +01:00
Andras Bacsai
76a6960f44
chore: prepare for PR
2026-02-23 13:26:01 +01:00
Andras Bacsai
f68d60a373
chore(horizon): make max time configurable ( #8560 )
2026-02-23 13:25:13 +01:00
Andras Bacsai
b7b0dfeddd
chore: prepare for PR
2026-02-23 13:24:49 +01:00
Andras Bacsai
133241bac1
fix(service): resolve team lookup via service relationship ( #8559 )
2026-02-23 13:24:01 +01:00
Andras Bacsai
61a54afe2b
fix(service): resolve team lookup via service relationship
...
Update service application/database team accessors to traverse the service relation chain and add coverage to prevent null team regressions.
2026-02-23 13:23:12 +01:00
Andras Bacsai
58acdccfc9
fix(team): include webhook notifications in enabled check ( #8557 )
2026-02-23 13:03:05 +01:00
Andras Bacsai
bf51ed905f
chore: prepare for PR
2026-02-23 13:02:06 +01:00
Andras Bacsai
c30d94f089
chore(scheduler): fix scheduled job duration metric ( #8551 )
2026-02-23 12:20:15 +01:00
Andras Bacsai
cb0f5cc812
chore: prepare for PR
2026-02-23 12:19:57 +01:00
Andras Bacsai
ffb408f214
Create docker-compose-maxio.dev.yml
2026-02-23 12:18:50 +01:00
Andras Bacsai
0c8b9b75f4
fix(traefik): respect force https in service labels ( #8550 )
2026-02-23 12:16:12 +01:00
Andras Bacsai
d51b26c047
Dont ignore "force https" pref when using docker compose ( #8424 )
2026-02-23 12:15:37 +01:00
Andras Bacsai
16e85e27e8
fix(service): always enable force https labels
...
Force HTTPS routing labels in parser helpers and remove per-service toggles now that the preference is no longer honored.
2026-02-23 12:14:44 +01:00
Andras Bacsai
ba3994bc5c
fix(security): harden deployment paths and deploy abilities ( #8549 )
2026-02-23 12:13:47 +01:00
Andras Bacsai
73170fdd33
chore: prepare for PR
2026-02-23 12:12:10 +01:00
ShadowArcanist
76d3709163
feat(service): upgrade beszel and beszel-agent to v0.18
2026-02-21 23:17:23 +05:30
ShadowArcanist
c1951726c0
feat(service): disable pterodactyl panel and pterodactyl wings
...
The template is using latest version of pterodactyl and the issue is the db migration fails for new users but works fine for existing deployments. We cannot revert the template to previous version because the current latest version addresses few CVEs so it's better to disable this template for now
2026-02-21 21:42:28 +05:30
Aditya Tripathi
04283a03a0
Merge branch 'next' into feat/healthcheck-cmd
2026-02-21 06:54:29 +05:30
Andras Bacsai
fd24a54304
feat(monitoring): add scheduled job monitoring dashboard ( #8433 )
2026-02-18 16:16:56 +01:00
Andras Bacsai
664b31212f
chore: prepare for PR
2026-02-18 15:42:42 +01:00
Andras Bacsai
48cb59b371
feat(api): add scheduled tasks CRUD API with auth and validation ( #8428 )
2026-02-18 14:32:34 +01:00
Andras Bacsai
4d36265017
fix(api): improve scheduled tasks validation and delete logic
...
- Use explicit has() checks for timeout and enabled fields to properly handle falsy values
- Add validation to prevent empty update requests
- Optimize delete endpoint to use direct query deletion instead of fetch-then-delete
- Update factory to use Team::factory() for proper test isolation
2026-02-18 14:30:44 +01:00
Andras Bacsai
f0e93eadde
chore: prepare for PR
2026-02-18 14:22:35 +01:00
Andras Bacsai
ab79a51e29
fix(api): improve scheduled tasks API with auth, validation, and execution endpoints
...
- Add authorization checks ($this->authorize) for all read/write operations
- Use customApiValidator() instead of Validator::make() to match codebase patterns
- Add extra field rejection to prevent mass assignment
- Use Application::ownedByCurrentTeamAPI() for consistent query patterns
- Remove non-existent standalone_postgresql_id from hidden fields
- Add execution listing endpoints for both applications and services
- Add ScheduledTaskExecution OpenAPI schema
- Use $request->only() instead of $request->all() for safe updates
- Add ScheduledTaskFactory and feature tests
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-18 11:53:58 +01:00
Andras Bacsai
301282a9ad
Merge branch 'pr-8395' into 8394-scheduled-task-missing
2026-02-18 11:46:34 +01:00
