Mauricio Siu 6239073e2a fix: strip git provider secrets from compose.one response ...

findComposeById embedded the full github/gitlab/bitbucket/gitea
relations (client secrets, OAuth tokens, private keys, app passwords)
and compose.one only used canEditDeployGitSource to set a
hasGitProviderAccess flag, never to hide the fields — so any member
with read access to a compose service got the connected git
provider's raw credentials, regardless of their access to that
provider itself.

Exclude the same secret columns findApplicationById already excludes.
Deploys are unaffected: the actual clone step always re-fetches the
provider fresh by id (findGithubById/findGitlabById/...), it never
reads secrets off the embedded relation.

2026-09-01 03:24:43 -06:00

..

proprietary

feat(organization): allow setting a default role for new members

2026-08-11 02:21:33 -06:00

admin.ts

fix(sso): apply trusted origin changes without server restart

2026-07-09 01:46:32 -06:00

ai.ts

feat(ai): allow organizations to define custom AI provider presets

2026-07-21 03:19:06 -06:00

application.ts

refactor(security): exclude git provider secrets at query level in findApplicationById

2026-07-19 21:43:51 -06:00

backup.ts

fix: strip credentials from service-level API responses (#4564)

2026-06-06 17:45:24 -06:00

bitbucket.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

cdn.ts

[autofix.ci] apply automated fixes

2025-11-19 04:46:00 +00:00

certificate.ts

fix(security): escape file paths and remote schedule command in shell invocations

2026-07-20 16:48:43 -06:00

cluster.ts

refactor: rename builders to server

2024-10-05 22:15:47 -06:00

compose.ts

fix: strip git provider secrets from compose.one response

2026-09-01 03:24:43 -06:00

deployment.ts

refactor: remove deployment failure classifier and related tests

2026-08-13 15:03:35 -06:00

destination.ts

fix: further typos

2026-03-30 09:01:50 +11:00

dns-provider.ts

feat: add Porkbun DNS provider support

2026-08-22 21:50:37 +02:00

docker-image.ts

feat: add Images and Disk Usage tabs to docker dashboard

2026-08-12 04:30:19 -06:00

docker-volume.ts

feat: add volumes section and file explorer for containers and volumes

2026-08-09 13:03:41 -06:00

docker.ts

feat: add Docker events tab to docker dashboard

2026-08-12 04:07:59 -06:00

domain.ts

fix: domain validation false negative on servers with multiple IPs

2026-08-28 16:43:23 -06:00

environment.ts

feat(icon): enhance icon management for services

2026-07-28 15:50:43 -06:00

git-provider.ts

fix: don't leak git provider secrets to non-owner org members

2026-09-01 03:22:52 -06:00

gitea.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

github.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

gitlab.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

libsql.ts

fix: verify swarm task convergence before marking db deploys done

2026-09-01 01:56:58 -06:00

mariadb.ts

fix: verify swarm task convergence before marking db deploys done

2026-09-01 01:56:58 -06:00

mongo.ts

fix: verify swarm task convergence before marking db deploys done

2026-09-01 01:56:58 -06:00

mount.ts

fix: mkdir parent dir before writing file mount updates

2026-08-27 10:49:15 -06:00

mysql.ts

fix: verify swarm task convergence before marking db deploys done

2026-09-01 01:56:58 -06:00

network.ts

fix: detect network delete/recreate by Docker ID during sync

2026-08-27 01:15:10 -06:00

notification.ts

fix: persist serverThreshold for gotify/ntfy and guard teams dispatch

2026-09-01 01:11:31 -06:00

overview-shared.ts

feat: add Overview dashboard (Services, Backups & Domains tabs)

2026-08-13 17:03:42 -04:00

overview.ts

style: format overview.ts (biome)

2026-08-14 00:51:15 -06:00

patch-repo.ts

fix(security): escape file paths and remote schedule command in shell invocations

2026-07-20 16:48:43 -06:00

patch.ts

fix: add early return for empty patches in generateApplyPatchesCommand to prevent unnecessary command execution

2026-02-25 22:00:40 -06:00

permission.ts

fix: allow members with git providers permission to create and delete their own (#4713)

2026-06-30 15:57:50 -06:00

port.ts

fix: avoid postgres 100-argument limit in schedule, volume backup and port queries

2026-07-28 15:19:56 -06:00

postgres.ts

fix: verify swarm task convergence before marking db deploys done

2026-09-01 01:56:58 -06:00

preview-deployment.ts

fix(preview-deployment): refetch github provider before authenticating

2026-07-29 13:51:12 +02:00

project.ts

fix: prevent Postgres 100-argument limit crash and restore data parity for restricted-member project access

2026-08-17 13:37:11 +06:00

redirect.ts

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

redis.ts

fix: verify swarm task convergence before marking db deploys done

2026-09-01 01:56:58 -06:00

registry.ts

fix: prevent registry password from appearing in error messages and shell commands (#4579)

2026-06-08 09:20:34 -06:00

rollbacks.ts

feat: integrate vault provider management and environment variable resolution

2026-08-10 11:14:55 -06:00

schedule.ts

fix: avoid postgres 100-argument limit in schedule, volume backup and port queries

2026-07-28 15:19:56 -06:00

security.ts

feat: enhance security handling by adding refetch capability and improving error messages in security service

2026-02-25 23:30:28 -06:00

server-health.ts

chore: trim multi-line comments to single lines

2026-08-13 10:27:02 -04:00

server.ts

feat: list associated services in delete server modal

2026-09-01 03:11:12 -06:00

settings.ts

fix(traefik): skip empty service reconnect

2026-08-22 08:02:21 +00:00

ssh-key.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

user.ts

refactor(passkeys): list passkeys via tRPC instead of better-auth client atom

2026-08-02 16:43:03 -06:00

vault-provider.ts

feat(vault): add Phase.dev secrets provider

2026-08-18 22:27:42 +02:00

volume-backups.ts

fix: avoid postgres 100-argument limit in schedule, volume backup and port queries

2026-07-28 15:19:56 -06:00

web-server-settings.ts

fix(web-server-settings): use optional chaining for safer ID access in update function

2025-12-24 12:24:27 -06:00