Commit Graph

12171 Commits

Author SHA1 Message Date
Andras Bacsai
68168c810e refactor(policies): remove Response type hint from update methods in ApplicationPreviewPolicy and DatabasePolicy for improved flexibility 2025-08-26 16:40:08 +02:00
Andras Bacsai
3ed5f3c99d chore(docker): update soketi image version to 1.0.10 in production and Windows configurations 2025-08-26 16:19:55 +02:00
Andras Bacsai
c1e0548a78 chore(versions): update coolify version to 4.0.0-beta.420.8 and nightly version to 4.0.0-beta.420.9 in versions.json and constants.php 2025-08-26 16:19:46 +02:00
Andras Bacsai
03f203a266 feat(docs): expand Backlog.md guidelines with comprehensive usage instructions, CLI commands, and best practices for task management to enhance project organization and collaboration 2025-08-26 16:19:31 +02:00
github-actions[bot]
4ea71ee050 docs: update changelog 2025-08-26 13:32:36 +00:00
Andras Bacsai
b3245d9077 Merge pull request #6171 from coollabsio/next
v4.0.0-beta.420.7
2025-08-26 15:32:07 +02:00
Andras Bacsai
96814409d1 task(ui): introduce task for simplifying resource operations UI by replacing boxes with dropdown selections to enhance user experience and streamline interactions 2025-08-26 15:26:45 +02:00
Andras Bacsai
ce14574e5d chore(config): disable auto_commit in backlog configuration to prevent automatic commits 2025-08-26 15:25:18 +02:00
Andras Bacsai
3b9031dcee chore(workflows): add backlog directory to build triggers for production and staging workflows 2025-08-26 14:44:37 +02:00
Andras Bacsai
ed93031a39 feat(docker): implement Docker cleanup processing in ScheduledJobManager; refactor server task scheduling to streamline cleanup job dispatching 2025-08-26 14:43:57 +02:00
Andras Bacsai
c2e3487745 feat(docs): add tasks for implementing Docker build caching and optimizing staging builds; include detailed acceptance criteria and implementation plans 2025-08-26 14:43:19 +02:00
Andras Bacsai
d61c5863f9 feat(docs): add Backlog.md guidelines and project manager backlog agent; enhance CLAUDE.md with new links for task management 2025-08-26 14:43:00 +02:00
Andras Bacsai
13397b62cf refactor: update check frequency logic for cloud and self-hosted environments; streamline server task scheduling and timezone handling 2025-08-26 13:51:42 +02:00
Andras Bacsai
63fcc0ebc3 feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled. 2025-08-26 10:27:38 +02:00
Andras Bacsai
5a88377a67 chore(cleanup): remove unused GitLab view files for change, new, and show pages 2025-08-26 10:27:38 +02:00
Andras Bacsai
74ebaef17b feat(api): enhance IP access control in middleware and settings; support CIDR notation and special case for 0.0.0.0 to allow all IPs 2025-08-26 10:27:38 +02:00
Andras Bacsai
0f8b86c253 chore(docs): remove AGENTS.md file; enhance CLAUDE.md with detailed form authorization patterns and service configuration examples 2025-08-26 10:27:38 +02:00
Andras Bacsai
83f2e856ec feat(sentinel): implement SentinelRestarted event and update Livewire components to handle server restart notifications 2025-08-26 10:27:38 +02:00
Andras Bacsai
be47884ee0 feat(docs): expand authorization documentation for custom Alpine.js components; include manual protection patterns and implementation guidelines 2025-08-26 10:27:38 +02:00
Andras Bacsai
0831905443 feat(docs): update architecture and development guidelines; enhance form components with built-in authorization system and improve routing documentation 2025-08-26 10:27:38 +02:00
Andras Bacsai
990331cd74 feat(validation): add ValidIpOrCidr rule for validating IP addresses and CIDR notations; update API access settings UI and add comprehensive tests 2025-08-26 10:27:38 +02:00
Andras Bacsai
ae1b0de561 feat(auth): enhance authorization checks in Livewire components for resource management 2025-08-26 10:27:38 +02:00
Andras Bacsai
ae79a98d72 feat(auth): add middleware for resource creation authorization 2025-08-26 10:27:38 +02:00
Andras Bacsai
3e1f47a243 feat(auth): introduce resource creation authorization middleware and policies for enhanced access control 2025-08-26 10:27:38 +02:00
Andras Bacsai
0702d29ae1 Update claude-code-review.yml 2025-08-25 14:20:41 +02:00
Andras Bacsai
fd141e4d87 Merge pull request #6434 from coollabsio/add-claude-github-actions-1756124021474
Add Claude Code GitHub Workflow
2025-08-25 14:14:48 +02:00
Andras Bacsai
e565d8f6c4 "Claude Code Review workflow" 2025-08-25 14:13:44 +02:00
Andras Bacsai
3f6834ea41 "Claude PR Assistant workflow" 2025-08-25 14:13:42 +02:00
Andras Bacsai
b1334a1bc6 feat(auth): implement comprehensive authorization checks across API controllers 2025-08-23 18:51:10 +02:00
Andras Bacsai
b5fe5dd909 feat(auth): refine authorization checks for S3 storage and service management 2025-08-23 18:50:50 +02:00
Andras Bacsai
adb8f9d88e feat(auth): implement authorization checks for database management 2025-08-23 18:50:35 +02:00
Andras Bacsai
6d02f6a60b feat(auth): add comprehensive authorization checks for all kind of resource creations 2025-08-23 18:47:31 +02:00
Andras Bacsai
b2de69a9ba feat(auth): enhance API error handling for authorization exceptions 2025-08-23 18:45:56 +02:00
Andras Bacsai
6ef16f6170 fix(auth): enhance authorization checks in application management 2025-08-23 18:19:50 +02:00
Andras Bacsai
40f108d6e1 feat(auth): implement authorization checks for application management 2025-08-22 16:47:59 +02:00
Andras Bacsai
37ee6717e9 feat(security): add authorization checks for package updates in Livewire components 2025-08-22 14:43:18 +02:00
Andras Bacsai
8408205955 feat(validation): add custom validation rules for Git repository URLs and branches
- Introduced `ValidGitRepositoryUrl` and `ValidGitBranch` validation rules to ensure safe and valid input for Git repository URLs and branch names.
- Updated relevant Livewire components and API controllers to utilize the new validation rules, enhancing security against command injection and invalid inputs.
- Refactored existing validation logic to improve consistency and maintainability across the application.
2025-08-22 14:38:21 +02:00
Andras Bacsai
841e33bac0 fix(github-deploy-key): update background color for selected private keys in deployment key selection UI 2025-08-22 14:12:24 +02:00
Andras Bacsai
6772cfe603 feat(auth): implement authorization for Docker and server management
- Added authorization checks in Livewire components related to Docker and server management to ensure only authorized users can create, update, and manage Docker instances and server settings.
- Introduced new policies for StandaloneDocker and SwarmDocker to define access control rules based on user roles and team associations.
- Updated AuthServiceProvider to register the new policies, enhancing security and access control for Docker functionalities and server management operations.
2025-08-22 14:04:25 +02:00
Andras Bacsai
6c75e89303 fix(errors): update error pages to provide navigation options
- Modified error pages (400, 401, 402, 403, 404, 419, 429, 500, 503) to replace "Go back home" button with "Go back" and added a "Dashboard" button for improved navigation.
- Updated links to use `url()->previous()` for returning to the previous page and `route('dashboard')` for accessing the dashboard directly.
2025-08-22 14:00:01 +02:00
Andras Bacsai
d8d01e6886 feat(auth): implement authorization for PrivateKey management
- Added authorization checks in the Create and Show Livewire components to ensure only authorized users can create, update, and delete PrivateKey instances.
- Introduced a new PrivateKeyPolicy to define access control rules for viewing, creating, updating, and deleting PrivateKey models based on user roles and team associations.
- Updated AuthServiceProvider to register the new PrivateKeyPolicy, enhancing security and access control for PrivateKey functionalities.
2025-08-22 13:02:20 +02:00
Andras Bacsai
3ffc751f1a feat(auth): implement authorization checks for server updates across multiple components
- Added authorization checks using the `authorize` method in various Livewire components to ensure only authorized users can update server settings.
- Updated `ServerPolicy` to restrict update permissions to admin users and their respective teams.
- Enhanced security and access control for server management functionalities.
2025-08-22 13:02:11 +02:00
Andras Bacsai
0748ef3ee5 refactor(jobs): rename job classes to indicate deprecation status 2025-08-22 12:09:12 +02:00
Andras Bacsai
7d10711a65 fix(servercheck): Properly check server statuses with and without Sentinel 2025-08-22 11:50:56 +02:00
Andras Bacsai
0aef9b3f5c docs: add AGENTS.md for project guidance and development instructions 2025-08-22 11:49:58 +02:00
Andras Bacsai
a6fc39e798 feat(git-settings): add support for shallow cloning in application settings
- Introduced a new boolean setting `is_git_shallow_clone_enabled` to the application settings model.
- Updated the `Advanced` component to include a checkbox for enabling shallow cloning.
- Modified the `setGitImportSettings` and `generateGitImportCommands` methods to handle shallow clone logic.
- Created a migration to add the new setting to the database schema.
- Enhanced the deployment process to utilize shallow cloning for improved performance.
2025-08-21 10:16:57 +02:00
Andras Bacsai
d832abaa35 fix(sanitization): enhance DOMPurify hook to remove Alpine.js directives for improved XSS protection
- Added logic to remove Alpine.js directives (x-*, @*, :*) from sanitized nodes to prevent potential XSS vulnerabilities.
- Maintained existing link sanitization to ensure safe handling of anchor elements.
2025-08-19 18:54:16 +02:00
Andras Bacsai
46440f2f8a fix(settings-dropdown): adjust unread count badge size and display logic for better consistency 2025-08-19 14:29:13 +02:00
Andras Bacsai
ea5b33b923 fix(init): improve error handling for deployment and template pulling processes 2025-08-19 14:22:48 +02:00
Andras Bacsai
5c4a265542 refactor(validation): implement centralized validation patterns across components
- Introduced `ValidationPatterns` class to standardize validation rules and messages for various fields across multiple components.
- Updated components including `General`, `StackForm`, `Create`, and `Show` to utilize the new validation patterns, ensuring consistent validation logic.
- Enhanced error messages for required fields and added regex validation for names and descriptions to improve user feedback.
- Adjusted styling in the `create.blade.php` view for better visual hierarchy.
2025-08-19 14:15:31 +02:00