41cecde735
fix: escape metadata fields and fix entity boundary off-by-one
2026-10-16 16:09:00 +05:30
3e75dc64f3
Update packages/server/src/utils/notifications/utils.ts
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-10-16 16:04:26 +05:30
7430afd701
fix: escape HTML and truncate long messages in Telegram notifications
2026-10-16 15:53:30 +05:30
53464e9096
Merge pull request #5070 from bunlongheng/fix/traefik-file-path-traversal
...
fix(settings): confine Traefik file read/write to the Traefik config directory
2026-10-15 17:24:35 -04:00
136a09d016
fix(settings): check server organization in traefik file endpoints
2026-10-15 15:24:24 -04:00
c867a3c4c9
Merge pull request #5489 from imrja8/feat/ai-custom-role-permissions
...
feat(permissions): add AI module to enterprise custom roles
2026-10-15 13:13:52 -04:00
471e91caeb
Merge pull request #5684 from Dokploy/fix/dependabot-high-emails
...
chore(deps): fix high-severity Dependabot alerts in emails lockfile
2026-10-15 13:11:10 -04:00
16c22c74fd
chore(deps): bump brace-expansion and source-map-js in emails lockfile
2026-10-15 13:02:00 -04:00
37df4e484e
fix: suppress EPIPE errors in pipeBetweenServers when target exits early
2026-10-15 21:51:48 +05:30
5ff8d05ff7
perf(ai): optimize permission evaluation and remove redundant DB queries
2026-10-15 21:51:48 +05:30
a9871f3a8d
refactor(ai): DRY saveAiSettings and enforce strict NOT_FOUND validation
2026-10-15 21:51:48 +05:30
0049421095
fix(ai): fix PermissionCtx type on resolveInputApiKey
2026-10-15 21:51:48 +05:30
3d67665c33
fix(ai): require update permission for stored key resolution, deduplicate resolve logic
2026-10-15 21:51:48 +05:30
2bfcac58b0
fix(ai): mask apiKey exposure, add audit logging, resolve masked-key UX regression
2026-10-15 21:51:48 +05:30
a7d8378f52
fix(permissions): mask apiKey on ai.one, add audit logging, remove dead endpoint
2026-10-15 21:51:48 +05:30
bdefc02e77
fix: redact apiKey from getAll AI endpoint to prevent credential exposure
2026-10-15 21:51:31 +05:30
293e19703a
fix: resolve cross-tenant access and granular role UI issues for AI settings
2026-10-15 21:51:31 +05:30
cd9edb290b
fix(permissions): resolve AI module authorization edge cases and test failures
2026-10-15 21:51:31 +05:30
b5473e63fd
feat(permissions): add AI module to enterprise custom roles
2026-10-15 21:51:31 +05:30
e0006758c0
Merge pull request #5517 from Dokploy/dependabots-alerts
...
Dependabots alerts fixes
2026-10-14 16:14:50 -04:00
d9fe046396
Merge pull request #5661 from manozzo/fix/template-card-tags-overflow
...
fix(templates): cap visible tags so the Create button stays visible
2026-10-15 01:33:09 +05:30
bfe24f89f9
Update undici version to 6.28.1
2026-10-15 01:07:55 +05:30
502d6c8a18
Merge branch 'canary' into dependabots-alerts
2026-10-15 00:44:53 +05:30
9e87b9e401
Merge pull request #5613 from Dokploy/fix/member-server-list
...
fix(server): let members list servers in server pickers
2026-10-15 00:30:43 +05:30
a7d8dff360
Merge pull request #5624 from Dokploy/feat/logs-and-metrics
...
feat(logs-and-metrics): ship container logs and metrics to external providers via Vector
2026-10-15 00:08:48 +05:30
94f3815eb4
fix(templates): cap visible tags so the Create button stays visible
...
Template cards have a fixed height, and the header rendered every tag.
Portabase has 27, which pushed the description and footer (Create
button) out of the card. Show the first 6 tags plus a "+N" badge whose
title lists the rest.
Closes #5660
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-12 20:59:09 -03:00
931f5c1335
Merge pull request #5654 from olivier-drieux/fix/restore-backup-service-name
...
fix(backups): preserve service name when changing database type
2026-10-12 10:46:09 -04:00
aae2dd9377
Merge pull request #5656 from Totopo27/fix/gh-5600-service-card-description-overflow
...
fix(ui): wrap and clamp service card description on environment page
2026-10-12 10:38:37 -04:00
fe3912dc4b
Merge pull request #5657 from Totopo27/feat/gh-5546-clickable-projects-card-home
...
feat(ui): make projects card clickable on home dashboard
2026-10-12 10:37:53 -04:00
ccd26e946b
Merge pull request #5655 from ahmedisam99/fix/gitlab-token-refresh-race
...
fix(gitlab): share one token refresh between concurrent callers
2026-10-12 10:08:10 -04:00
29107d88fc
Merge pull request #5649 from imrja8/feat/dual-mode-branding
...
feat(enterprise): dual-mode branding with separate light/dark theme logos
2026-10-12 09:59:25 -04:00
c7ee0430f7
Merge pull request #5614 from tomron/feat/ovh-optional-zone
...
feat(dns): add optional zone to OVH provider
2026-10-12 09:38:51 -04:00
3cc8158fdc
feat(ui): make projects card clickable on home dashboard
2026-10-12 07:35:35 -06:00
726664ab3c
fix(ui): wrap and clamp service card description on environment page
2026-10-12 07:30:51 -06:00
20701ba272
test(gitlab): cover concurrent token refreshes
2026-10-12 11:54:35 +03:00
412516d47b
fix(gitlab): share one token refresh between concurrent callers
...
GitLab invalidates a refresh token when it is used. Two deployments that found the token expired at the same time sent the same refresh token, and the second one failed with "Failed to refresh token: Bad Request".
2026-10-12 11:54:35 +03:00
b4681b318f
fix(backups): preserve service selection when changing database type
2026-10-12 09:55:31 +02:00
0898642e32
fix(enterprise): preserve light-mode URLs when toggling dual branding off
2026-10-11 20:00:32 +05:30
d2779136c5
fix(enterprise): address review feedback for dual-mode branding
2026-10-11 19:51:21 +05:30
0b537a815d
feat(enterprise): dual-mode branding with separate light/dark theme logos
2026-10-11 19:10:06 +05:30
b329595370
feat(logs-and-metrics): ship container logs and metrics to external providers via Vector
2026-10-08 10:08:10 -04:00
2674eb200d
fix(dns): enforce the configured OVH zone on record operations
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-08 09:13:50 +03:00
e8f236c9db
feat(dns): add optional zone to OVH provider
...
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-07 22:02:45 +03:00
749bb2c1ce
fix(server): let members list servers in server pickers
2026-10-07 14:51:15 -04:00
9992659f24
fix(deps): bump nodemailer and patch transitive high advisories
2026-10-07 09:49:40 -04:00
88cb057e06
Merge remote-tracking branch 'origin/canary' into dependabots-alerts
2026-10-07 08:49:24 -04:00
7289a3f68e
fix(deps): bump next, shell-quote and proxy-addr for critical advisories
2026-10-07 08:49:23 -04:00
5be17d3dd0
Merge pull request #5584 from libredb/fix/libsql-app-name-validation
...
fix(libsql): validate appName like the other database kinds
2026-10-05 10:11:50 -06:00
5aa28bc7d3
Merge pull request #5575 from imrja8/fix/tooltip-overlapping-modals
...
fix(ui): resolve tooltips overlapping open modals on remote servers page
2026-10-05 09:41:01 -04:00
20575da9fe
Merge pull request #5582 from imrja8/fix/terminal-collapse-on-zoom
...
fix(terminal): prevent terminal from collapsing on zoom
2026-10-05 09:37:11 -04:00
Yash Kumar