Furox
08e08f4904
chore: remove fork-only issue 416 validation workflow
2026-09-11 16:27:31 +03:00
Furox
c0e58657fd
ci: remove temporary issue 416 final audit workflow
2026-09-11 16:27:31 +03:00
Furox
05a2e695b6
ci: preserve sealed Vitest checks with workspace compatibility
2026-09-11 16:27:31 +03:00
Furox
4747a5db07
ci: run sealed final Plan Auditor gate for issue 416
2026-09-11 16:27:31 +03:00
Furox
0d1f38e827
ci: remove one-shot issue 416 formatter
2026-09-11 16:27:31 +03:00
github-actions[bot]
d1307e23b5
style: apply Biome fixes for issue 416
2026-09-11 16:27:31 +03:00
Furox
dd6138b199
ci: add one-shot Biome formatter for issue 416
2026-09-11 16:27:31 +03:00
Furox
99cb25fa00
ci: validate issue 416 implementation
2026-09-11 16:27:31 +03:00
Furox
d6aef0367b
test: cover FTP and SFTP credential redaction
2026-09-11 16:27:31 +03:00
Furox
a52768e8f0
test: cover non-S3 rclone destination routing
2026-09-11 16:27:31 +03:00
Furox
d96e7f7c30
fix: preserve volume backup cleanup wildcard expansion
2026-09-11 16:27:31 +03:00
Furox
47b0f79c4b
feat: restore volumes from generic destinations
2026-09-11 16:27:31 +03:00
Furox
e0e2b4abb3
feat: make volume backup retention destination-neutral
2026-09-11 16:27:31 +03:00
Furox
d5b9c58030
feat: route volume backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
55dccaddfa
feat: browse backup files across all destination types
2026-09-11 16:27:31 +03:00
Furox
549d7de528
feat: restore web-server backups from generic destinations
2026-09-11 16:27:31 +03:00
Furox
4c14dc6f52
feat: restore compose backups from generic destinations
2026-09-11 16:27:31 +03:00
Furox
b6c197be24
feat: restore libsql from generic destinations
2026-09-11 16:27:31 +03:00
Furox
1d4ae272c0
feat: restore mariadb from generic destinations
2026-09-11 16:27:31 +03:00
Furox
8dd3c1e8cf
feat: restore mongo from generic destinations
2026-09-11 16:27:31 +03:00
Furox
cba8f608db
feat: restore mysql from generic destinations
2026-09-11 16:27:31 +03:00
Furox
8def29a688
feat: restore postgres from generic destinations
2026-09-11 16:27:31 +03:00
Furox
a3a3f2ce2e
feat: make backup retention destination-neutral
2026-09-11 16:27:31 +03:00
Furox
31be3b98dc
feat: route web-server backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
1753a3e1df
feat: route compose backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
7008ac6e4e
feat: route libsql backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
cea07b79c5
feat: route mariadb backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
460eb913b8
feat: route mongo backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
2cf6791ff8
feat: route mysql backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
6dfae93855
feat: route postgres backups through generic destinations
2026-09-11 16:27:31 +03:00
Furox
c99d214e8d
feat: add provider-aware backup destination UI
2026-09-11 16:27:31 +03:00
Furox
88b43d77f0
feat: expose Google Drive OneDrive FTP and SFTP destinations
2026-09-11 16:27:31 +03:00
Furox
7d2b8065e9
feat: test all backup destination types through rclone
2026-09-11 16:27:31 +03:00
Furox
99f036c7c1
fix: redact FTP and SFTP rclone credentials
2026-09-11 16:27:31 +03:00
Furox
f8571c0556
feat: add provider-neutral rclone destination builder
2026-09-11 16:27:31 +03:00
Furox
05605ef239
feat: validate provider-specific backup destinations
2026-09-11 16:27:31 +03:00
Furox
7ca717a375
feat: define non-S3 backup destination providers
2026-09-11 16:27:31 +03:00
Mauricio Siu
853ca33659
Merge pull request #5416 from Dokploy/fix/critical-next-rce-16.3.4
...
Auto PR to main when version changes / create-pr (push) Has been cancelled
Build Docker images / build-and-push-cloud-image (push) Has been cancelled
Build Docker images / build-and-push-schedule-image (push) Has been cancelled
Build Docker images / build-and-push-server-image (push) Has been cancelled
Dokploy Docker Build / docker-amd (push) Has been cancelled
Dokploy Docker Build / docker-arm (push) Has been cancelled
autofix.ci / format (push) Has been cancelled
Dokploy Monitoring Build / docker-amd (push) Has been cancelled
Dokploy Monitoring Build / docker-arm (push) Has been cancelled
Dokploy Docker Build / combine-manifests (push) Has been cancelled
Dokploy Docker Build / generate-release (push) Has been cancelled
Dokploy Docker Build / sync-version (push) Has been cancelled
Dokploy Monitoring Build / combine-manifests (push) Has been cancelled
fix(deps): bump next to 16.3.4 to patch critical RCE advisories
2026-09-11 02:20:20 -06:00
Mauricio Siu
a90c2a662f
Merge pull request #5418 from EgerDev/feat/compose-models
...
feat(compose): support models in Compose specification
2026-09-11 02:20:07 -06:00
EgerDev
45dcdfc5be
test(compose): tighten models types and regression tests
2026-09-11 00:11:40 -07:00
EgerDev
29cdc815db
feat(compose): support AI models in Compose specification
2026-09-10 20:28:28 -07:00
Narciso E. Núñez Arias
9fa98de9c1
Merge pull request #5350 from RezaRahemtola/fix/ntfy-database-backup-newline
...
Auto PR to main when version changes / create-pr (push) Waiting to run
Build Docker images / build-and-push-cloud-image (push) Waiting to run
Build Docker images / build-and-push-schedule-image (push) Waiting to run
Build Docker images / build-and-push-server-image (push) Waiting to run
Dokploy Docker Build / docker-amd (push) Waiting to run
Dokploy Docker Build / docker-arm (push) Waiting to run
Dokploy Docker Build / combine-manifests (push) Blocked by required conditions
Dokploy Docker Build / generate-release (push) Blocked by required conditions
Dokploy Docker Build / sync-version (push) Blocked by required conditions
autofix.ci / format (push) Waiting to run
Dokploy Monitoring Build / docker-amd (push) Waiting to run
Dokploy Monitoring Build / docker-arm (push) Waiting to run
Dokploy Monitoring Build / combine-manifests (push) Blocked by required conditions
fix(notifications): add missing newline to ntfy database backup message
2026-09-10 19:00:08 -04:00
Dokploy Bot
a4a1d15656
chore: sync hotfix from main into canary [skip ci]
2026-09-10 22:40:21 +00:00
Narciso E. Núñez Arias
8075a7ce95
Merge pull request #5358 from KingIronMan2011/patch-1
...
feat: added missing Railpack versions
(cherry picked from commit 326908869d
2026-09-10 22:40:19 +00:00
Narciso E. Núñez Arias
326908869d
Merge pull request #5358 from KingIronMan2011/patch-1
...
feat: added missing Railpack versions
2026-09-10 18:40:09 -04:00
Narciso E. Núñez Arias
18d07c7254
Merge pull request #5364 from maks-oleksyuk/chore/ci-update-actions
...
chore(ci): update GitHub Actions to latest versions and harden workflows
2026-09-10 18:32:42 -04:00
Narciso
4cd4b83523
fix(deps): bump next to 16.3.4 to patch critical RCE advisories
...
GHSA-2xp9-vwfh-vxw4 and GHSA-p293-qw3h-jr36
2026-09-10 18:23:38 -04:00
Narciso E. Núñez Arias
f91b2e2ca6
Merge pull request #5414 from aspatari/fix/infisical-imported-secrets
...
fix(vault): read Infisical secrets pulled in through an import
2026-09-10 18:16:08 -04:00
Artur Spatari
e70c880612
test(vault): lock the precedence between two imports
...
Review flagged that multi-import collisions were untested. The order the code
implements is the documented one — Infisical: "If two imports carry a secret
with the same name, the value from the bottom-most import wins" — and the
response lists imports in that order, so sequential assignment matches it.
Added a case with two imports defining the same key. Reversing the merge order
in the client fails it, so the test pins the behaviour rather than restating
the implementation.
vault.test.ts: 58 passed.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-10 10:32:09 +03:00
Artur Spatari
0c1dfe978c
fix(vault): read Infisical secrets pulled in through an import
...
Fixes #5413 . A secret brought into a folder with "Import Secrets" was reported
as not found. Two reasons, and the first is easy to miss:
The list endpoint takes the flag in **snake_case**. `includeImports` is
silently ignored — the request still returns 200, with `imports` present but
empty — so the imported secret looked like it simply did not exist. Measured
against app.infisical.com with a registered import (confirmed via
GET /api/v1/secret-imports):
expandSecretReferences=true imports[] empty
expandSecretReferences=true&includeImports=true imports[] empty
expandSecretReferences=true&include_imports=true imports[] has the secret
Second, imported secrets never appear in `secrets` — they come back in a
separate `imports` array, one entry per source path, which the client did not
read at all.
Imported entries are merged before the folder's own, so a name defined in both
resolves to the local value, matching how Infisical resolves it.
Also measured, for whoever looks next: `/api/v4/secrets` returns imports with
no flag at all, and single-secret reads (`/raw/{name}`) never see an imported
key — 404 on v3, no such route on v4. So a folder listing is the only way to
reach them.
vault.test.ts: 57 passed. Reverting the fix fails the new merge test.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-10 10:26:52 +03:00
