70eda65d19
fix(api): hide nested server secrets from read tokens
...
Require read:sensitive for nested server logdrain and sentinel fields in
application and database API responses.
Limit deployment configuration column migration SQL to PostgreSQL.
2026-06-04 16:51:52 +02:00
2fcc42b0a9
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-04 15:27:32 +02:00
22f9f96db6
chore: inspect staged changes for commit message
2026-06-04 15:24:53 +02:00
b01c2dd52b
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-04 10:58:07 +02:00
981b670eb4
feat(services): show template update timestamps
2026-06-04 09:34:11 +02:00
2833c68af9
fix(upgrade): preserve compose override expansion
2026-06-03 15:15:12 +02:00
33f3a0b100
fix(git): write deploy key to per-deployment path, not root's id_rsa ( #10440 )
2026-06-03 15:09:45 +02:00
bc165f1976
fix(postgres): preserve Coolify image tag during upgrade
...
Keep the running Coolify image tag when restarting the stack after
PostgreSQL upgrade or rollback so compose does not fall back to latest.
2026-06-03 14:54:23 +02:00
e39a9ad827
fix(git): use deploy key path for PR fetches
2026-06-03 14:39:05 +02:00
08735e6cc8
feat(postgres): add internal database upgrade script
...
Publish upgrade-postgres.sh with install and upgrade flows, include the
PostgreSQL compose override when present, and sync the script to BunnyCDN.
2026-06-03 14:27:01 +02:00
3eb5463e3e
Merge remote-tracking branch 'origin/next' into fix/deploy-key-dedicated-path-race
2026-06-03 14:00:34 +02:00
f8960f44fa
fix(api): apply private_key_uuid in update_server ( #10416 )
2026-06-03 13:49:36 +02:00
217541a987
fix(api): allow disabling build server mode
2026-06-03 13:48:31 +02:00
acc929a7b0
feat(ui): add search functionality for environment variables ( #10421 )
2026-06-03 13:48:03 +02:00
1802522c60
fix(env-vars): treat search wildcards literally
...
Escape SQL LIKE wildcard characters in environment variable searches and hide production or preview sections when the filtered results are empty.
2026-06-03 13:43:26 +02:00
c329749c74
fix(logs): html tags is removed in log viewer ( #10346 )
2026-06-03 13:40:53 +02:00
09d8ba0d89
fix(api): prevent partial server updates on invalid disk schedule
2026-06-03 13:03:12 +02:00
908b5d1907
fix(git): force HTTP/1.1 for repository imports ( #10528 )
2026-06-03 13:00:07 +02:00
36d44faaf9
fix(git): apply HTTP transport config to PR checkouts
2026-06-03 12:59:45 +02:00
ffe37fc892
Merge remote-tracking branch 'origin/next' into 5251-large-repo-deploy-bug
2026-06-03 12:56:27 +02:00
d7524a743d
fix(env-vars): show single empty state for searches
...
Move the environment variable search field above the production section
and hide production and preview headings when a search has no results.
2026-06-03 12:54:50 +02:00
d300ddf902
Merge remote-tracking branch 'origin/next' into feat/search-to-envs
2026-06-03 12:47:37 +02:00
46e70597e6
Merge remote-tracking branch 'origin/next' into fix/escape-html-log
2026-06-03 12:46:12 +02:00
b3f3ddf0ce
Merge remote-tracking branch 'origin/next' into fix/api-update-server-private-key
2026-06-03 12:44:31 +02:00
b26b3aabf1
fix(scheduled-jobs): link skipped service database backups ( #10527 )
2026-06-03 12:42:36 +02:00
9dabaabdf1
fix(git): force HTTP/1.1 for repository imports
...
Apply HTTP/1.1 transport config to HTTPS git clone and submodule commands,
including GitHub App credential rewrites, to avoid flaky large repo imports.
2026-06-03 12:42:04 +02:00
cb6a2de529
chore(logs): simplify log viewer XSS tests
2026-06-03 12:28:56 +02:00
74130cbc61
Merge remote-tracking branch 'origin/next' into fix/escape-html-log
2026-06-03 12:28:17 +02:00
8b8ec9c4f9
Merge remote-tracking branch 'origin/next' into fix/api-update-server-private-key
2026-06-03 12:27:41 +02:00
ec7a8b5ea9
fix(scheduled-jobs): link skipped service database backups
...
Render skipped service database backups with the service database backup route while preserving standalone database backup links.
2026-06-03 12:25:13 +02:00
e9f62f1fa4
fix(logs): handle missing clipboard API in non-HTTPS contexts ( #8942 )
2026-06-03 12:05:49 +02:00
c0c918f1c5
Merge remote-tracking branch 'origin/next' into fix/clipboard-https-secure-context
2026-06-03 12:05:09 +02:00
e34f4ac4fa
fix(ui): models and slide-overs to use the same Close (x) icon button styles ( #9393 )
2026-06-03 12:04:55 +02:00
787de4059e
fix(ui): improve slide-over close focus styles
2026-06-03 12:04:24 +02:00
24fd9703cc
Merge remote-tracking branch 'origin/next' into fix/ux-close-icon-buttons
2026-06-03 12:02:21 +02:00
e31251f5ae
fix(server): allow dots in ssh username ( #9951 )
2026-06-03 11:59:36 +02:00
419a551d76
fix(server): return SSH username validation messages
2026-06-03 11:57:46 +02:00
c6980ebe31
fix(modal): add missing scrolling behavior for better user experience… ( #9647 )
2026-06-03 11:57:04 +02:00
da70e34472
test(api): cover server private key updates
...
Add feature coverage for updating a server from private_key_uuid, rejecting unknown or cross-team private keys, and preserving the existing key when the field is omitted.
2026-06-03 11:43:52 +02:00
1ca472d549
Merge remote-tracking branch 'origin/next' into fix/api-update-server-private-key
2026-06-03 11:43:32 +02:00
88b04bb920
Merge remote-tracking branch 'origin/next' into fix/escape-html-log
2026-06-03 11:43:18 +02:00
41fd6f5608
Merge remote-tracking branch 'origin/next' into fix/ux-close-icon-buttons
2026-06-03 11:40:56 +02:00
d525c12457
fix(env): keep dev view env saves independent of search
...
Search environment variables case-insensitively by key, add accessible search
labeling, and ensure switching to developer view after searching loads the full
variable set so non-matching entries are not removed on save.
2026-06-03 11:40:54 +02:00
ad4a21d15f
Merge remote-tracking branch 'origin/next' into feat/search-to-envs
2026-06-03 11:40:38 +02:00
7405bd7088
chore: inspect staged modal changes
2026-06-03 11:39:43 +02:00
2bdbb7e534
Merge remote-tracking branch 'origin/next' into fix/modal-add-content-scrolling
2026-06-03 11:39:24 +02:00
9aa40bb5f0
Merge remote-tracking branch 'origin/next' into jean/allow-dots-username
2026-06-03 11:38:55 +02:00
bc2afdf02e
fix(server): share SSH username validation
...
Centralize SSH username rules and sanitization so dotted usernames are
accepted consistently across API, onboarding, and Livewire server forms.
2026-06-03 11:38:48 +02:00
d742b4a678
Merge remote-tracking branch 'origin/next' into fix/clipboard-https-secure-context
...
# Conflicts:
# resources/views/livewire/project/application/deployment/show.blade.php
2026-06-03 11:38:47 +02:00
1a7fa40e58
feat(destination): show resources that are deployed on the destination ( #9757 )
2026-06-03 11:26:38 +02:00
Andras Bacsai