coolify/app
Andras Bacsai 6f557cf17f fix(security): enforce GitLab App authorization parity with GitHub
GitlabAppPolicy previously allowed any authenticated user to update,
delete, and create GitLab sources. Align it with GithubAppPolicy, require
Application create authorization on the private-repo wizard, and reject
OAuth callbacks from non-admins so members cannot escalate privileges.
2026-07-20 23:21:40 +02:00
..
Actions Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react 2026-07-20 12:09:17 +02:00
Casts feat(ui): improve configuration changes modal 2026-05-30 13:16:37 +05:30
Console feat(v5): gate V5 to development environments only 2026-07-19 11:44:12 +02:00
Contracts
Data refactor: simplify remote process chain and harden ActivityMonitor 2026-03-26 13:26:16 +01:00
Enums feat(v5): add server reconciliation and canvas APIs 2026-07-06 17:40:37 +02:00
Events feat(v5): add server reconciliation and canvas APIs 2026-07-06 17:40:37 +02:00
Exceptions feat(v5): add server reconciliation and canvas APIs 2026-07-06 17:40:37 +02:00
Helpers chore: inspect staged changes 2026-06-02 14:05:26 +02:00
Http fix(security): enforce GitLab App authorization parity with GitHub 2026-07-20 23:21:40 +02:00
Jobs Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react 2026-07-20 12:09:17 +02:00
Listeners fix(proxy): defer UI refresh until Traefik version check completes 2025-12-27 15:16:58 +01:00
Livewire fix(security): enforce GitLab App authorization parity with GitHub 2026-07-20 23:21:40 +02:00
Mcp feat(digitalocean): add droplet provisioning support 2026-07-08 10:42:58 +02:00
Models feat: self-hosted GitLab Apps OAuth integration 2026-07-20 23:21:40 +02:00
Notifications Revert "feat(notifications): deduplicate repeated email alerts" 2026-07-09 13:19:48 +02:00
Policies fix(security): enforce GitLab App authorization parity with GitHub 2026-07-20 23:21:40 +02:00
Providers feat: self-hosted GitLab Apps OAuth integration 2026-07-20 23:21:40 +02:00
Repositories
Rules fix(v5): defer production runtime activation 2026-07-19 16:47:29 +02:00
Services Merge remote-tracking branch 'origin/next' into v5-parallel-inertia-react 2026-07-20 12:09:17 +02:00
Support feat(v5): gate V5 to development environments only 2026-07-19 11:44:12 +02:00
Traits fix(ray): remove Ray debug hooks from runtime (#10847) 2026-07-03 11:40:20 +02:00
View/Components feat(backups): add scheduled persistent volume backups 2026-07-15 15:47:57 +02:00