Andras Bacsai bafb9a5a8b refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification ... - Auto-generate a 40-char random secret for each manual_webhook_secret_* column on Application creation so new apps are never left with an empty secret. - Add encrypted cast for the four webhook-secret columns; backfill migration re-encrypts existing plaintext values and fills missing ones. - Reject webhook deliveries when the stored secret is empty (GitHub, GitLab, Bitbucket, Gitea manual endpoints). - Bitbucket: require the sha256 algorithm prefix on X-Hub-Signature instead of trusting the client-supplied algo. - GitLab: drop the ?? '' fallback on the token comparison. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-04-19 12:52:23 +02:00
..
Actions	fix(models): replace forceFill/forceCreate with fill/create and add fillable guards	2026-03-31 13:45:31 +02:00
Console	Resolve remaining merge conflicts	2026-04-14 11:14:22 +02:00
Contracts
Data	refactor: simplify remote process chain and harden ActivityMonitor	2026-03-26 13:26:16 +01:00
Enums
Events	Make proxy restart run as background job to prevent localhost lockout	2025-12-03 10:30:12 +01:00
Exceptions	feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner	2025-12-11 12:12:43 +01:00
Helpers	fix(ssh): handle chmod failures gracefully and simplify key management	2026-03-16 21:27:10 +01:00
Http	refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification	2026-04-19 12:52:23 +02:00
Jobs	fix(healthcheck): user input is rejected if path contains comma and semicolon (#9223)	2026-04-14 10:41:55 +02:00
Listeners	fix(proxy): defer UI refresh until Traefik version check completes	2025-12-27 15:16:58 +01:00
Livewire	refactor: tighten team scoping on resource creation and admin nav (#9651)	2026-04-19 12:01:11 +02:00
Models	refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification	2026-04-19 12:52:23 +02:00
Notifications	fix(notification): updated cloud subscription links to valid url	2026-03-30 11:37:28 +05:30
Policies	chore: prepare for PR	2026-02-25 11:18:46 +01:00
Providers	Remove webhook maintenance mode replay feature	2025-12-02 13:36:32 +01:00
Repositories
Rules	fix(validation): add IP validation for custom DNS servers input	2026-03-28 22:30:17 +05:30
Services	refactor: remove verbose logging and use explicit exception types	2026-03-20 15:57:26 +01:00
Support	fix(validation): support IP binding in port mappings	2026-04-11 22:24:52 +05:30
Traits	feat(deployment): add command_hidden flag to hide command text in logs	2026-03-25 16:48:49 +01:00
View/Components	feat(forms): make textarea monospace opt-in and improve multiline toggle	2026-03-31 15:37:42 +02:00