e59ba0636b
fix: register cloud schedules without a timezone ( #5139 )
2026-10-22 12:12:37 -06:00
9c06e34bec
Merge pull request #5732 from Totopo27/fix/gh-5659-webhook-remote-server-concurrency
...
fix(deploy): preserve remote serverId in webhook deployment jobs
2026-10-22 11:41:55 -06:00
7e346bb687
Merge pull request #5742 from imrja8/fix/monitoring-permissions
...
fix(monitoring): gate host monitoring on docker access and let docker readers see disk usage
2026-10-22 22:49:12 +05:30
eb98876f88
Merge pull request #5738 from Dokploy/chore/bump-node-24.22.1
...
chore: bump Node.js to 24.22.1 (security release)
2026-10-22 10:56:20 -06:00
e7b640dddf
refactor(monitoring): run host monitoring permission checks in parallel
2026-10-22 22:14:03 +05:30
8cac2d849d
chore(monitoring): address review comments
2026-10-22 21:27:11 +05:30
c5e364dbcb
fix(monitoring): gate host monitoring on docker access and let docker readers see disk usage
2026-10-22 20:30:53 +05:30
f40b3e7490
refactor(wss): reuse findServiceAppName from container-ownership ( #5741 )
2026-10-22 20:22:12 +05:30
9f6e82abf6
fix(monitoring): let members with service access see container monitoring ( #5716 )
...
* fix(monitoring): let members with service access see container monitoring
The Monitoring tab opened /listen-docker-stats-monitoring without a
serviceId, so the socket required the docker permission and closed with
"Not authorized" for members granted the service. Pass the serviceId from
every service page, as the Logs tab does.
With a serviceId, the socket now also checks that the requested container
belongs to that service (app name for applications and databases, project
or namespace label for compose and stacks), and never serves host stats.
Closes #5674
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
* fix(monitoring): reject unknown appType on the service-scoped stats path
appType comes from the URL, so an unexpected value skipped every
ownership filter and returned the first running container's stats.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-22 19:10:00 +05:30
ad222962b8
Merge pull request #5701 from Gabrielgvl/fix/registry-login-stdin
...
fix(security): pass registry passwords to docker login via stdin
2026-10-22 09:14:43 -04:00
95c1e81beb
chore: bump Node.js to 24.22.1 (security release)
2026-10-22 14:02:21 +05:30
47b0d6563a
refactor(wss): look up service app names from a table list
2026-10-21 22:41:15 -04:00
73c795e157
fix(wss): resolve libsql services when binding the container terminal
2026-10-21 22:26:02 -04:00
99e4f1c8dc
fix(wss): bind container terminal to the service it was opened from
2026-10-21 22:18:25 -04:00
e76283bc09
fix: keep commands and secrets out of ExecError messages and inspect output
2026-10-21 22:18:25 -04:00
5849102a40
fix(deploy): preserve remote serverId in webhook deployment jobs
2026-10-21 18:15:35 -06:00
b5c5faf9f0
fix(security): pass registry login passwords through stdin
...
Use execFile arguments for local login and the SSH stream for remote login. Discard execution errors after sanitizing their messages so echoed credentials cannot survive in nested error fields.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-17 12:18:12 -03:00
e0c8d80cde
fix: decode Route53 octal escapes in record names ( #5553 )
...
* fix: decode Route53 octal escapes in record names
* fix: keep escaped dots and backslashes in Route53 record names
2026-10-16 21:10:45 +05:30
49d250aaa9
Merge pull request #5590 from GlebsonS4ntos/fix/prevent-service-header-overflow-mobile
...
fix(ui): prevent service header overflow on mobile
2026-10-16 09:14:28 -06:00
e38a980d9f
[autofix.ci] apply automated fixes
2026-10-16 11:42:40 +00:00
829f8af63f
fix(ui): fix server badge and appName overflow on mobile
2026-10-16 17:09:26 +05:30
837730038c
fix(billing): guard loadStripe behind key check for self-hosted instances
2026-10-16 14:54:24 +05:30
53464e9096
Merge pull request #5070 from bunlongheng/fix/traefik-file-path-traversal
...
fix(settings): confine Traefik file read/write to the Traefik config directory
2026-10-15 17:24:35 -04:00
136a09d016
fix(settings): check server organization in traefik file endpoints
2026-10-15 15:24:24 -04:00
5ff8d05ff7
perf(ai): optimize permission evaluation and remove redundant DB queries
2026-10-15 21:51:48 +05:30
0049421095
fix(ai): fix PermissionCtx type on resolveInputApiKey
2026-10-15 21:51:48 +05:30
3d67665c33
fix(ai): require update permission for stored key resolution, deduplicate resolve logic
2026-10-15 21:51:48 +05:30
2bfcac58b0
fix(ai): mask apiKey exposure, add audit logging, resolve masked-key UX regression
2026-10-15 21:51:48 +05:30
a7d8378f52
fix(permissions): mask apiKey on ai.one, add audit logging, remove dead endpoint
2026-10-15 21:51:48 +05:30
bdefc02e77
fix: redact apiKey from getAll AI endpoint to prevent credential exposure
2026-10-15 21:51:31 +05:30
293e19703a
fix: resolve cross-tenant access and granular role UI issues for AI settings
2026-10-15 21:51:31 +05:30
cd9edb290b
fix(permissions): resolve AI module authorization edge cases and test failures
2026-10-15 21:51:31 +05:30
b5473e63fd
feat(permissions): add AI module to enterprise custom roles
2026-10-15 21:51:31 +05:30
e0006758c0
Merge pull request #5517 from Dokploy/dependabots-alerts
...
Dependabots alerts fixes
2026-10-14 16:14:50 -04:00
d9fe046396
Merge pull request #5661 from manozzo/fix/template-card-tags-overflow
...
fix(templates): cap visible tags so the Create button stays visible
2026-10-15 01:33:09 +05:30
502d6c8a18
Merge branch 'canary' into dependabots-alerts
2026-10-15 00:44:53 +05:30
9e87b9e401
Merge pull request #5613 from Dokploy/fix/member-server-list
...
fix(server): let members list servers in server pickers
2026-10-15 00:30:43 +05:30
a7d8dff360
Merge pull request #5624 from Dokploy/feat/logs-and-metrics
...
feat(logs-and-metrics): ship container logs and metrics to external providers via Vector
2026-10-15 00:08:48 +05:30
94f3815eb4
fix(templates): cap visible tags so the Create button stays visible
...
Template cards have a fixed height, and the header rendered every tag.
Portabase has 27, which pushed the description and footer (Create
button) out of the card. Show the first 6 tags plus a "+N" badge whose
title lists the rest.
Closes #5660
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-12 20:59:09 -03:00
931f5c1335
Merge pull request #5654 from olivier-drieux/fix/restore-backup-service-name
...
fix(backups): preserve service name when changing database type
2026-10-12 10:46:09 -04:00
aae2dd9377
Merge pull request #5656 from Totopo27/fix/gh-5600-service-card-description-overflow
...
fix(ui): wrap and clamp service card description on environment page
2026-10-12 10:38:37 -04:00
fe3912dc4b
Merge pull request #5657 from Totopo27/feat/gh-5546-clickable-projects-card-home
...
feat(ui): make projects card clickable on home dashboard
2026-10-12 10:37:53 -04:00
ccd26e946b
Merge pull request #5655 from ahmedisam99/fix/gitlab-token-refresh-race
...
fix(gitlab): share one token refresh between concurrent callers
2026-10-12 10:08:10 -04:00
29107d88fc
Merge pull request #5649 from imrja8/feat/dual-mode-branding
...
feat(enterprise): dual-mode branding with separate light/dark theme logos
2026-10-12 09:59:25 -04:00
3cc8158fdc
feat(ui): make projects card clickable on home dashboard
2026-10-12 07:35:35 -06:00
726664ab3c
fix(ui): wrap and clamp service card description on environment page
2026-10-12 07:30:51 -06:00
20701ba272
test(gitlab): cover concurrent token refreshes
2026-10-12 11:54:35 +03:00
b4681b318f
fix(backups): preserve service selection when changing database type
2026-10-12 09:55:31 +02:00
0898642e32
fix(enterprise): preserve light-mode URLs when toggling dual branding off
2026-10-11 20:00:32 +05:30
d2779136c5
fix(enterprise): address review feedback for dual-mode branding
2026-10-11 19:51:21 +05:30
Mauricio Siu