Commit Graph

3238 Commits

Author SHA1 Message Date
GitHub Actions
122030269e fix: enhance API interactions by adding authorization headers and improving page reload handling 2026-02-25 19:12:43 +00:00
Jeremy
5b436a883d Merge pull request #761 from Wikid82/renovate/feature/beta-release-pin-dependencies
chore(deps): pin github/codeql-action action to 4558047 (feature/beta-release)
2026-02-25 14:07:59 -05:00
GitHub Actions
a1c88de3c4 fix: enhance GHCR API interaction by adding recommended headers and improved JSON error handling 2026-02-25 18:59:27 +00:00
GitHub Actions
a6c6ce550e fix: improve destination URL handling in HTTP wrapper to enhance security and maintain original hostname 2026-02-25 17:39:36 +00:00
GitHub Actions
1af04987e0 fix: update protected regex pattern for container pruning scripts and enhance logging details 2026-02-25 17:35:47 +00:00
GitHub Actions
ad31bacc1c fix: enhance error classification for notification provider tests and improve error messages in HTTP wrapper 2026-02-25 17:19:23 +00:00
renovate[bot]
bab8414666 chore(deps): pin github/codeql-action action to 4558047 2026-02-25 16:47:54 +00:00
GitHub Actions
0deffd37e7 fix: change default DRY_RUN value to false in prune-container-images script 2026-02-25 16:40:52 +00:00
GitHub Actions
a98c9ed311 chore: add EthicalCheck workflow for automated API security testing 2026-02-25 16:14:43 +00:00
GitHub Actions
12a04b4744 chore: update devDependencies to include ESLint plugins for CSS, JSON, and Markdown 2026-02-25 16:04:07 +00:00
Jeremy
d97c08bada Merge pull request #760 from Wikid82/renovate/feature/beta-release-non-major-updates
chore(deps): update non-major-updates (feature/beta-release)
2026-02-25 11:03:14 -05:00
renovate[bot]
ce335ff342 chore(deps): update non-major-updates 2026-02-25 15:50:29 +00:00
GitHub Actions
cb16ac05a2 fix: implement security severity policy and enhance CodeQL checks for blocking findings 2026-02-25 15:05:41 +00:00
GitHub Actions
0917edb863 fix: enhance notification provider handling by adding token visibility logic and updating related tests 2026-02-25 12:46:11 +00:00
GitHub Actions
4d0df36e5e fix: streamline group management functions and enhance directory checks in entrypoint script 2026-02-25 12:36:19 +00:00
GitHub Actions
7b1861f5a9 fix: enhance security in account settings and notifications payload tests with API key masking and authorization headers 2026-02-25 12:15:34 +00:00
GitHub Actions
29f6664ab0 fix: enforce admin role requirement for SMTP configuration access 2026-02-25 06:29:52 +00:00
GitHub Actions
690480e181 fix: Implement user API enhancements with masked API keys and updated invite link handling 2026-02-25 06:14:03 +00:00
GitHub Actions
c156183666 fix: Enhance security handler tests and implement role-based access control
- Added role-based middleware to various security handler tests to ensure only admin users can access certain endpoints.
- Created a new test file for authorization checks on security mutators, verifying that non-admin users receive forbidden responses.
- Updated existing tests to include role setting for admin users, ensuring consistent access control during testing.
- Introduced sensitive data masking in settings handler responses, ensuring sensitive values are not exposed in API responses.
- Enhanced user handler responses to mask API keys and invite tokens, providing additional security for user-related endpoints.
- Refactored routes to group security admin endpoints under a dedicated route with role-based access control.
- Added tests for import handler routes to verify authorization guards, ensuring only admin users can access import functionalities.
2026-02-25 05:41:35 +00:00
GitHub Actions
d8e6d8d9a9 fix: update vulnerability reporting methods in SECURITY.md 2026-02-25 05:41:00 +00:00
GitHub Actions
7591d2cda8 fix: update minimum coverage threshold to 87 for frontend and backend test scripts 2026-02-25 05:39:06 +00:00
GitHub Actions
aa2e7a1685 choredocker): enhance local Docker socket access and error handling
- Added guidance for Docker socket group access in docker-compose files.
- Introduced docker-compose.override.example.yml for supplemental group configuration.
- Improved entrypoint diagnostics to include socket GID and group guidance.
- Updated README with instructions for setting up Docker socket access.
- Enhanced backend error handling to provide actionable messages for permission issues.
- Updated frontend components to display troubleshooting information regarding Docker socket access.
- Added tests to ensure proper error messages and guidance are rendered in UI.
- Revised code coverage settings to include Docker service files for better regression tracking.
2026-02-25 03:42:01 +00:00
GitHub Actions
9a683c3231 fix: enhance authentication token retrieval and header building across multiple test files 2026-02-25 02:53:10 +00:00
GitHub Actions
e5cebc091d fix: remove model references from agent markdown files 2026-02-25 02:52:28 +00:00
Jeremy
15cdaa8294 Merge pull request #759 from Wikid82/renovate/feature/beta-release-non-major-updates
chore(deps): update non-major-updates (feature/beta-release)
2026-02-24 19:44:12 -05:00
renovate[bot]
32f2d25d58 chore(deps): update non-major-updates 2026-02-25 00:43:29 +00:00
GitHub Actions
a9dcc007e5 fix: enhance DockerUnavailableError to include detailed error messages and improve handling in ListContainers 2026-02-24 22:24:38 +00:00
GitHub Actions
bf53712b7c fix: implement bearer token handling in TestDataManager and add API helper authorization tests 2026-02-24 21:07:10 +00:00
GitHub Actions
2b4f60615f fix: add Docker socket volume for container discovery in E2E tests 2026-02-24 20:34:35 +00:00
GitHub Actions
bbaad17e97 fix: enhance notification provider validation and error handling in Test method 2026-02-24 19:56:57 +00:00
Jeremy
bc4c7c1406 Merge pull request #758 from Wikid82/renovate/feature/beta-release-non-major-updates
chore(deps): update github/codeql-action digest to 28737ec (feature/beta-release)
2026-02-24 14:55:39 -05:00
renovate[bot]
e13b49cfd2 chore(deps): update github/codeql-action digest to 28737ec 2026-02-24 19:45:29 +00:00
GitHub Actions
4d4a5d3adb fix: update trustTestCertificate function to remove unnecessary parameter 2026-02-24 13:02:44 +00:00
GitHub Actions
7983de9f2a fix: enhance workflow triggers and context handling for security scans 2026-02-24 12:45:25 +00:00
GitHub Actions
0034968919 fix: enforce secure cookie settings and enhance URL validation in HTTP wrapper 2026-02-24 12:41:20 +00:00
GitHub Actions
6cec0a67eb fix: add exception handling for specific SSRF rule in CodeQL SARIF checks 2026-02-24 12:41:20 +00:00
GitHub Actions
f56fa41301 fix: ensure delete confirmation dialog is always open when triggered 2026-02-24 12:41:20 +00:00
GitHub Actions
b1a1a7a238 fix: enhance CodeQL SARIF parsing for improved severity level detection 2026-02-24 12:41:20 +00:00
GitHub Actions
8381790b0b fix: improve CodeQL SARIF parsing for accurate high/critical findings detection 2026-02-24 12:41:20 +00:00
GitHub Actions
65228c5ee8 fix: enhance Docker image loading and tagging in security scan workflow 2026-02-24 12:41:20 +00:00
GitHub Actions
b531a840e8 fix: refactor logout function to use useCallback for improved performance 2026-02-24 12:41:20 +00:00
GitHub Actions
5a2e11878b fix: correct configuration key from 'linters-settings' to 'settings' in golangci-lint files 2026-02-24 12:41:20 +00:00
Jeremy
fcc60a0aa3 Merge branch 'development' into feature/beta-release 2026-02-24 01:46:39 -05:00
GitHub Actions
fdbf1a66cd fix: implement outbound request URL validation and redirect guard in HTTPWrapper 2026-02-24 06:45:14 +00:00
GitHub Actions
e8a513541f fix: enhance Trivy scan result uploads with conditional checks and category tagging 2026-02-24 06:22:03 +00:00
GitHub Actions
bc9f2cf882 chore: enable Gotify and Custom Webhhok notifications and improve payload validation
- Enhanced Notifications component tests to include support for Discord, Gotify, and Webhook provider types.
- Updated test cases to validate the correct handling of provider type options and ensure proper payload structure during creation, preview, and testing.
- Introduced new tests for Gotify token handling and ensured sensitive information is not exposed in the UI.
- Refactored existing tests for clarity and maintainability, including improved assertions and error handling.
- Added comprehensive coverage for payload validation scenarios, including malformed requests and security checks against SSRF and oversized payloads.
2026-02-24 05:34:25 +00:00
Jeremy
1329b00ed5 Merge pull request #750 from Wikid82/renovate/feature/beta-release-non-major-updates
chore(deps): update actions/download-artifact digest to 70fc10c (feature/beta-release)
2026-02-23 17:13:46 -05:00
renovate[bot]
a9c5b5b2d8 chore(deps): update actions/download-artifact digest to 70fc10c 2026-02-23 21:17:50 +00:00
Jeremy
4b9508a9be Merge pull request #741 from Wikid82/feature/beta-release
Caddy Version bump to 2.11.1
2026-02-23 16:14:36 -05:00
Jeremy
dc1426ae31 Merge pull request #749 from Wikid82/renovate/feature/beta-release-non-major-updates
fix(deps): update non-major-updates (feature/beta-release)
2026-02-23 15:16:07 -05:00