Mauricio Siu a42614004f fix: don't leak git provider secrets to non-owner org members ...

gitlab.one, github.one, gitea.one and bitbucket.one returned the full
DB record (OAuth access/refresh tokens, client secrets, private keys,
webhook secrets, app passwords) to any org member who merely had
access to *use* a shared provider (sharedWithOrganization: true),
not just its owner or an org owner/admin.

Add canViewGitProviderSecrets() and null out the secret fields in
each .one response when the caller isn't the provider owner or an
org owner/admin.

2026-09-01 03:22:52 -06:00

..

api

feat: upgrade to TypeScript 7 and Next.js 16.3

2026-08-11 01:39:09 -06:00

dokploy

fix: don't leak git provider secrets to non-owner org members

2026-09-01 03:22:52 -06:00

monitoring

fix: enhance container metrics query to support wildcard matching for container names

2026-03-08 16:16:45 -06:00

schedules

fix: pass timezone when removing repeatable schedule job

2026-09-01 01:31:59 -06:00