Andras Bacsai
2ebe2e8dbb
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-15 12:30:15 +02:00
Andras Bacsai
46a9578d69
test: align mobile application actions expectations
2026-06-15 12:06:54 +02:00
Andras Bacsai
78d8afa602
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-15 12:05:19 +02:00
Andras Bacsai
9302a49bbf
Merge remote-tracking branch 'origin/next' into 10633-invitation-link-redirect
2026-06-15 11:58:03 +02:00
Andras Bacsai
45d9426690
test(auth): expect invitation link to use auth.link route
2026-06-15 11:55:03 +02:00
dependabot[bot]
85af9d7120
chore(deps): bump esbuild, laravel-vite-plugin and vite
...
Removes [esbuild](https://github.com/evanw/esbuild ). It's no longer used after updating ancestor dependencies [esbuild](https://github.com/evanw/esbuild ), [laravel-vite-plugin](https://github.com/laravel/vite-plugin ) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ). These dependencies need to be updated together.
Removes `esbuild`
Updates `laravel-vite-plugin` from 2.0.1 to 3.1.0
- [Release notes](https://github.com/laravel/vite-plugin/releases )
- [Changelog](https://github.com/laravel/vite-plugin/blob/3.x/CHANGELOG.md )
- [Upgrade guide](https://github.com/laravel/vite-plugin/blob/3.x/UPGRADE.md )
- [Commits](https://github.com/laravel/vite-plugin/compare/v2.0.1...v3.1.0 )
Updates `vite` from 7.3.2 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite )
---
updated-dependencies:
- dependency-name: esbuild
dependency-version:
dependency-type: indirect
- dependency-name: laravel-vite-plugin
dependency-version: 3.1.0
dependency-type: direct:development
- dependency-name: vite
dependency-version: 8.0.16
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-14 11:55:25 +00:00
Osamaali313
74b1077010
fix: accept underscores in domain hostnames for API URL validation
...
PHP's FILTER_VALIDATE_URL rejects underscores in the host, so domains
like https://myapp_service.example.com were rejected by the API and
never got a Let's Encrypt certificate. Add an isValidDomainUrl() helper
that validates a copy with underscores replaced by hyphens, and route
domain validation in the Applications and Services API controllers
through it.
Fixes #10597
2026-06-13 22:46:04 +03:00
ShadowArcanist
7717860109
chore(ci): gate docs reminder comments on "Waiting for Docs PR" label
2026-06-13 20:52:22 +05:30
ShadowArcanist
62d9e40186
fix(repo): remove bounty and beta referrences on contributors guidelines
2026-06-13 20:24:44 +05:30
ShadowArcanist
7b5415fdbe
fix(repo): remove beta from placeholder values on issue template
2026-06-13 20:15:25 +05:30
ShadowArcanist
46bfa3e4c5
Merge branch 'next' into shadow/improve-contributor-mds
2026-06-13 20:12:26 +05:30
Andras Bacsai
52739141ee
fix(previews): clean up closed PR previews after update failures ( #10180 )
2026-06-12 20:08:34 +02:00
Andras Bacsai
403f8abcb4
Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url
2026-06-12 20:02:23 +02:00
Andras Bacsai
78d7291929
fix(github): keep provided api_url on GitHub app updates
2026-06-12 19:56:13 +02:00
Andras Bacsai
4f509c02be
fix(auth): validate invitation magic link tokens
...
Accept invitation links across configured public origins while still
rejecting stored invitations whose token no longer matches.
2026-06-12 16:17:45 +02:00
Andras Bacsai
442ed98169
feat(project): add mobile action controls for resources
...
Show restart, stop, redeploy, and update actions directly in the mobile
headers for applications, databases, and services, with coverage for the
mobile resource menu behavior.
2026-06-12 16:09:26 +02:00
Andras Bacsai
1aca7ead8c
fix(logs): constrain activity monitor output width
2026-06-12 16:06:20 +02:00
Andras Bacsai
03d2fabc64
chore(release): bump Coolify to 4.2.0
2026-06-12 16:05:41 +02:00
Andras Bacsai
61d2d17f52
feat(subscription): add Stripe action controls
...
Add subscription action handling and tests for cancel, resume, and refund flows while resolving StripeClient through the container.
2026-06-12 15:54:21 +02:00
Torsten O'Donoghue
1e5e4ae61e
fix(service): correct Convex origin env vars and expose HTTP actions port
2026-06-12 10:45:52 +02:00
Andras Bacsai
1833ba7ce6
chore(boost): enable cloud config and agent skills
2026-06-11 11:59:08 +02:00
Andras Bacsai
8aea029782
chore(skills): add Nightwatch and MCP agent skills
...
Add Nightwatch configuration guidance and MCP development skill docs across agent integrations, and refresh existing Laravel skill references.
2026-06-11 11:58:42 +02:00
Rohit Tiwari
005f12442d
fix(template): removed volume, changed inggest url variable and limited to version inngest/inngest:v1.27.0
2026-06-10 13:46:21 +05:30
Rohit Tiwari
9196d8ed0a
fix(template): magic variable used on inngest changed to hex magic variable
2026-06-10 08:57:12 +05:30
Andras Bacsai
018d267b3f
fix(service): limit Grafana extra fields to Grafana images ( #10562 )
2026-06-09 22:16:52 +02:00
Rohit Tiwari
4d9ce2da6b
add(service): inngest one click service template
2026-06-09 23:25:41 +05:30
Andras Bacsai
ee74889f19
feat(resources): show mobile action buttons
2026-06-09 18:45:06 +02:00
Andras Bacsai
0d9a39ea23
fix(github): sync pending app credentials before slug lookup
2026-06-09 18:32:05 +02:00
Andras Bacsai
281184c040
fix(github): derive app API URLs from HTML hosts
...
Normalize GitHub organization values and derive API URLs for GitHub.com,
GHE.com, and enterprise hosts when creating or updating GitHub Apps.
2026-06-09 18:31:06 +02:00
Andras Bacsai
bc2c6068ea
fix(github): sync app slug before building install URL
...
Move GitHub App JWT generation and slug synchronization into shared helpers so installation URLs use the canonical GitHub slug. Encode GHE organization path segments and keep the app-scoped fallback for blank organizations.
2026-06-09 15:27:35 +02:00
Andras Bacsai
96adf9b0f4
Merge remote-tracking branch 'origin/next' into fix-ghe-app-install-url
2026-06-09 15:26:44 +02:00
Cornelis Terblanche
3f46710309
Refine cloud provider token form
2026-06-08 18:38:08 +02:00
vuguul
5e37024f10
fix(git): use cloud install path for ghe apps
2026-06-06 17:23:22 -06:00
Michalzarddev
cfd31327bb
Merge branch 'v4.x' into chore/gitea-runner-version-bump
2026-06-06 00:13:20 +02:00
michalzard
e5043f7cc2
chore(gitea-runner): patch version bump
2026-06-06 00:11:24 +02:00
vuguul
4c77504b5e
fix(service): limit Grafana extra fields to Grafana images
2026-06-05 14:29:29 -06:00
Andras Bacsai
a9d9bfdbe3
feat(resources): add responsive mobile navigation menus
...
Unify application, database, and service headings with mobile-friendly
resource menus, route-aware configuration tabs, and confirmation triggers for
advanced actions. Standardize restart warnings with status badges and cover the
responsive menu and badge rendering behavior with feature tests.
2026-06-05 14:57:57 +02:00
Andras Bacsai
51583069f4
feat(status): unify resource status badges
...
Introduce a shared status badge component and reuse it across resource status views, service cards, and the server navbar. Replace icon-only refresh controls with consistent badge buttons and cover the new status layout with feature tests.
2026-06-05 13:31:20 +02:00
vaguul
63ba33261b
fix(api): allow source commit build setting
2026-06-04 17:51:17 -06:00
Andras Bacsai
70eda65d19
fix(api): hide nested server secrets from read tokens
...
Require read:sensitive for nested server logdrain and sentinel fields in
application and database API responses.
Limit deployment configuration column migration SQL to PostgreSQL.
2026-06-04 16:51:52 +02:00
Andras Bacsai
7053f560c5
chore(navbar): replace theme selector with cycle button
2026-06-04 15:41:38 +02:00
Andras Bacsai
2fcc42b0a9
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-04 15:27:32 +02:00
Andras Bacsai
22f9f96db6
chore: inspect staged changes for commit message
2026-06-04 15:24:53 +02:00
Andras Bacsai
8a2373e49f
fix(ui): standardize permission denial callouts
2026-06-04 11:37:16 +02:00
Andras Bacsai
5973bb4d4f
fix(security): hide notification secrets from non-admins
...
Prevent users without update permission from reading notification credentials and manual webhook secrets in Livewire state or rendered forms.
2026-06-04 11:24:19 +02:00
Andras Bacsai
062ad57740
fix(security): enforce team access on mutable actions
...
Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.
2026-06-04 11:03:06 +02:00
Andras Bacsai
b01c2dd52b
Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber
2026-06-04 10:58:07 +02:00
Andras Bacsai
9dca7ca351
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-04 10:18:54 +02:00
Andras Bacsai
e7dff30b7c
v4.1.2 ( #10452 )
2026-06-04 09:53:54 +02:00
Andras Bacsai
981b670eb4
feat(services): show template update timestamps
2026-06-04 09:34:11 +02:00
Andras Bacsai