Mauricio Siu a42614004f fix: don't leak git provider secrets to non-owner org members ... gitlab.one, github.one, gitea.one and bitbucket.one returned the full DB record (OAuth access/refresh tokens, client secrets, private keys, webhook secrets, app passwords) to any org member who merely had access to *use* a shared provider (sharedWithOrganization: true), not just its owner or an org owner/admin. Add canViewGitProviderSecrets() and null out the secret fields in each .one response when the caller isn't the provider owner or an org owner/admin.		2026-09-01 03:22:52 -06:00
..
api	feat: upgrade to TypeScript 7 and Next.js 16.3	2026-08-11 01:39:09 -06:00
dokploy	fix: don't leak git provider secrets to non-owner org members	2026-09-01 03:22:52 -06:00
monitoring	fix: enhance container metrics query to support wildcard matching for container names	2026-03-08 16:16:45 -06:00
schedules	fix: pass timezone when removing repeatable schedule job	2026-09-01 01:31:59 -06:00