tiennm99/coolify
1
0 Fork 0
mirror of https://github.com/tiennm99/coolify.git synced 2026-10-13 18:15:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,261 Commits 3 Branches 0 Tags
2180a5e7effdf8a994eaeb871d0ac77fa0be8fea
Commit Graph
16261 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andras Bacsai 87d4744390 Validate environment variable keys 2026-06-25 18:19:58 +02:00
Andras Bacsai bef94a9ce2 feat(mcp): add per-team server toggle 2026-06-25 11:42:19 +02:00
Aditya Tripathi 623bf89543 fix(railpack): interpolate build-time env variables by sourcing build-time .env 
Railpack builds forwarded build-time variables inline as `env 'KEY=VALUE'`,
which single-quotes each value and prevents shell interpolation. References
like BETTER_AUTH_URL=$COOLIFY_URL reached the build as the literal string
"$COOLIFY_URL" instead of the resolved URL, breaking builds that validate
their env (e.g. SvelteKit/better-auth).

Wrap the railpack `docker buildx build` invocation with the same
wrap_build_command_with_env_export() helper used by the Dockerfile and
Nixpacks build paths, sourcing the build-time .env file (which writes
COOLIFY_* first and double-quotes normal vars to allow $VAR expansion).
Only buildpack control variables (NIXPACKS_/RAILPACK_), excluded from that
file and never needing interpolation, remain inline. Secret flags are
unchanged and read the interpolated values from the exported environment.

Fixes #10736
 2026-06-24 20:11:46 +00:00
Andras Bacsai 3f0a0f7a0d chore(ci): gate docs reminder comments on "Waiting for Docs PR" label (#10659) 2026-06-23 17:24:09 +02:00
Andras Bacsai f87cacc3f0 chore(deps): bump esbuild, laravel-vite-plugin and vite (#10665) 2026-06-23 17:23:25 +02:00
Andras Bacsai 75791339d0 chore(deps): bump symfony/routing from 7.4.12 to 7.4.13 (#10680) 2026-06-23 17:23:00 +02:00
Andras Bacsai f9b16b4158 chore(deps): bump symfony/http-foundation from 7.4.8 to 7.4.13 (#10683) 2026-06-23 17:22:40 +02:00
Andras Bacsai 9b6a9c6007 chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 (#10710) 2026-06-23 17:22:16 +02:00
Andras Bacsai fd9293887e chore(deps): bump laravel/framework from 12.60.2 to 12.61.1 (#10711) 2026-06-23 17:21:52 +02:00
Andras Bacsai ae817a53fa chore(deps): bump guzzlehttp/guzzle from 7.10.3 to 7.12.1 (#10738) 2026-06-23 17:21:27 +02:00
Andras Bacsai 376d9ae86b chore(deps): bump guzzlehttp/psr7 from 2.10.1 to 2.12.1 (#10739) 2026-06-23 17:21:06 +02:00
dependabot[bot] b3d4446d44 chore(deps): bump guzzlehttp/psr7 from 2.10.1 to 2.12.1 
Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 2.10.1 to 2.12.1.
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/2.12/CHANGELOG.md)
- [Commits](https://github.com/guzzle/psr7/compare/2.10.1...2.12.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/psr7
  dependency-version: 2.12.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 17:48:00 +00:00
dependabot[bot] f3458e8943 chore(deps): bump guzzlehttp/guzzle from 7.10.3 to 7.12.1 
Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) from 7.10.3 to 7.12.1.
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.12/CHANGELOG.md)
- [Commits](https://github.com/guzzle/guzzle/compare/7.10.3...7.12.1)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.12.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 17:20:13 +00:00
dependabot[bot] 7f7f33b06d chore(deps): bump laravel/framework from 12.60.2 to 12.61.1 
Bumps [laravel/framework](https://github.com/laravel/framework) from 12.60.2 to 12.61.1.
- [Release notes](https://github.com/laravel/framework/releases)
- [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md)
- [Commits](https://github.com/laravel/framework/compare/v12.60.2...v12.61.1)

---
updated-dependencies:
- dependency-name: laravel/framework
  dependency-version: 12.61.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-20 05:29:35 +00:00
dependabot[bot] 3c3e11b841 chore(deps): bump phpseclib/phpseclib from 3.0.52 to 3.0.54 
Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 3.0.52 to 3.0.54.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](https://github.com/phpseclib/phpseclib/compare/3.0.52...3.0.54)

---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
  dependency-version: 3.0.54
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-20 04:01:07 +00:00
Andras Bacsai 00c5a630cf fix(subscription): clamp dynamic quantity to MIN_SERVER_LIMIT on update 2026-06-19 08:27:41 +02:00
dependabot[bot] c886fdfe69 chore(deps): bump symfony/http-foundation from 7.4.8 to 7.4.13 
Bumps [symfony/http-foundation](https://github.com/symfony/http-foundation) from 7.4.8 to 7.4.13.
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/8.2/CHANGELOG.md)
- [Commits](https://github.com/symfony/http-foundation/compare/v7.4.8...v7.4.13)

---
updated-dependencies:
- dependency-name: symfony/http-foundation
  dependency-version: 7.4.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 08:03:53 +00:00
dependabot[bot] 6b1c86cb3a chore(deps): bump symfony/routing from 7.4.12 to 7.4.13 
Bumps [symfony/routing](https://github.com/symfony/routing) from 7.4.12 to 7.4.13.
- [Release notes](https://github.com/symfony/routing/releases)
- [Changelog](https://github.com/symfony/routing/blob/8.2/CHANGELOG.md)
- [Commits](https://github.com/symfony/routing/compare/v7.4.12...v7.4.13)

---
updated-dependencies:
- dependency-name: symfony/routing
  dependency-version: 7.4.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-16 04:38:36 +00:00
Andras Bacsai 9e021c4037 fix(api): enforce destination access and cleanup networks 
Require admin team membership for destination mutations, return invalid-token
responses for tokenless requests, and remove standalone Docker networks when
deleting destinations.
 2026-06-15 17:15:56 +02:00
Andras Bacsai 9665aa292c fix(api): block invalid destination types and service deletions 2026-06-15 17:03:01 +02:00
Andras Bacsai 506643603c Merge remote-tracking branch 'origin/next' into feat/api-destinations 2026-06-15 17:02:24 +02:00
Andras Bacsai 02ab4b39ef docs: replace CLAUDE.md with AGENTS.md symlink 2026-06-15 16:57:52 +02:00
Andras Bacsai f5ecdfa4ce Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber 2026-06-15 13:29:25 +02:00
Andras Bacsai 96ea892748 fix(sidebar): remove theme switcher from sidebar navbar 2026-06-15 13:25:31 +02:00
Andras Bacsai 58af19b378 fix(auth): enforce policies across API and Livewire (#8628) 2026-06-15 13:18:29 +02:00
Andras Bacsai dfd4d7e802 feat(resource-details): make copy fields visible and accessible 2026-06-15 13:17:53 +02:00
Andras Bacsai 371eb1e38c fix(upgrade): hide upgrade labels in collapsed sidebar 2026-06-15 12:56:19 +02:00
Andras Bacsai 22d05c78aa Merge remote-tracking branch 'origin/next' into ghe-support-helpers 2026-06-15 12:55:34 +02:00
Andras Bacsai 507a8afa20 fix(github): sync app slug before generating installation path 2026-06-15 12:55:29 +02:00
Andras Bacsai b9bda7301a Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url 2026-06-15 12:55:08 +02:00
Andras Bacsai d2deaa8363 fix(auth): restrict Sentinel access and register S3 policy 2026-06-15 12:31:30 +02:00
Andras Bacsai 2ebe2e8dbb Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber 2026-06-15 12:30:15 +02:00
Andras Bacsai 46a9578d69 test: align mobile application actions expectations 2026-06-15 12:06:54 +02:00
Andras Bacsai 78d8afa602 Merge remote-tracking branch 'origin/next' into audit-policies 2026-06-15 12:05:19 +02:00
Andras Bacsai 9302a49bbf Merge remote-tracking branch 'origin/next' into 10633-invitation-link-redirect 2026-06-15 11:58:03 +02:00
Andras Bacsai 45d9426690 test(auth): expect invitation link to use auth.link route 2026-06-15 11:55:03 +02:00
dependabot[bot] 85af9d7120 chore(deps): bump esbuild, laravel-vite-plugin and vite 
Removes [esbuild](https://github.com/evanw/esbuild). It's no longer used after updating ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [laravel-vite-plugin](https://github.com/laravel/vite-plugin) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). These dependencies need to be updated together.


Removes `esbuild`

Updates `laravel-vite-plugin` from 2.0.1 to 3.1.0
- [Release notes](https://github.com/laravel/vite-plugin/releases)
- [Changelog](https://github.com/laravel/vite-plugin/blob/3.x/CHANGELOG.md)
- [Upgrade guide](https://github.com/laravel/vite-plugin/blob/3.x/UPGRADE.md)
- [Commits](https://github.com/laravel/vite-plugin/compare/v2.0.1...v3.1.0)

Updates `vite` from 7.3.2 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version:
  dependency-type: indirect
- dependency-name: laravel-vite-plugin
  dependency-version: 3.1.0
  dependency-type: direct:development
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-14 11:55:25 +00:00
Osamaali313 74b1077010 fix: accept underscores in domain hostnames for API URL validation 
PHP's FILTER_VALIDATE_URL rejects underscores in the host, so domains
like https://myapp_service.example.com were rejected by the API and
never got a Let's Encrypt certificate. Add an isValidDomainUrl() helper
that validates a copy with underscores replaced by hyphens, and route
domain validation in the Applications and Services API controllers
through it.

Fixes #10597
 2026-06-13 22:46:04 +03:00
ShadowArcanist 7717860109 chore(ci): gate docs reminder comments on "Waiting for Docs PR" label 2026-06-13 20:52:22 +05:30
ShadowArcanist 62d9e40186 fix(repo): remove bounty and beta referrences on contributors guidelines 2026-06-13 20:24:44 +05:30
ShadowArcanist 7b5415fdbe fix(repo): remove beta from placeholder values on issue template 2026-06-13 20:15:25 +05:30
ShadowArcanist 46bfa3e4c5 Merge branch 'next' into shadow/improve-contributor-mds 2026-06-13 20:12:26 +05:30
Andras Bacsai 52739141ee fix(previews): clean up closed PR previews after update failures (#10180) 2026-06-12 20:08:34 +02:00
Andras Bacsai 403f8abcb4 Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url 2026-06-12 20:02:23 +02:00
Andras Bacsai 78d7291929 fix(github): keep provided api_url on GitHub app updates 2026-06-12 19:56:13 +02:00
Andras Bacsai 4f509c02be fix(auth): validate invitation magic link tokens 
Accept invitation links across configured public origins while still
rejecting stored invitations whose token no longer matches.
 2026-06-12 16:17:45 +02:00
Andras Bacsai 442ed98169 feat(project): add mobile action controls for resources 
Show restart, stop, redeploy, and update actions directly in the mobile
headers for applications, databases, and services, with coverage for the
mobile resource menu behavior.
 2026-06-12 16:09:26 +02:00
Andras Bacsai 1aca7ead8c fix(logs): constrain activity monitor output width 2026-06-12 16:06:20 +02:00
Andras Bacsai 03d2fabc64 chore(release): bump Coolify to 4.2.0 2026-06-12 16:05:41 +02:00
Andras Bacsai 61d2d17f52 feat(subscription): add Stripe action controls 
Add subscription action handling and tests for cancel, resume, and refund flows while resolving StripeClient through the container.
 2026-06-12 15:54:21 +02:00