sneak/upaas
1
0
Fork 1
Code Issues 7 Pull Requests Actions Packages Projects Releases 1 Wiki Activity
166 Commits 13 Branches 1 Tag
4f687aab4d8e8b47c816728995e81ac18fd5f419
Commit Graph
55 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
sneak b1c6b93d8e Merge pull request 'fix: simplify CI to docker build only (closes #130)' (#131) from fix/ci-docker-build-only into main
Check / check (push) Waiting to run
Details 
Reviewed-on: #131
 2026-02-26 11:53:14 +01:00
sneak 1875792ebe Merge branch 'main' into fix/ci-docker-build-only
Check / check (pull_request) Successful in 2m47s
Details
2026-02-26 11:53:03 +01:00
sneak 7bbaa1d08a Merge pull request 'Fix 1.0 audit bugs (closes #120, closes #121, closes #122, closes #123, closes #124, closes #125)' (#126) from fix/audit-bugs-120-125 into main
Check / check (push) Waiting to run
Details 
Reviewed-on: #126
 2026-02-26 11:52:54 +01:00
sneak e051245b5f Merge pull request 'Refactor: break up app.js into smaller modules' (#129) from refactor/split-app-js into main
Check / check (push) Successful in 11m41s
Details 
Reviewed-on: #129
 2026-02-26 10:59:02 +01:00
sneak 28f014ce95 Merge pull request 'fix: use imageID in createAndStartContainer (closes #124)' (#127) from fix/use-image-id-in-container into main
Check / check (push) Successful in 11m32s
Details 
Reviewed-on: #127
 2026-02-23 20:48:23 +01:00
sneak dc638a07f1 Merge pull request 'fix: pin all external refs to cryptographic identity (closes #118)' (#119) from fix/pin-external-refs-crypto-identity into main
Check / check (push) Has been cancelled
Details 
Reviewed-on: #119
 2026-02-23 20:48:09 +01:00
sneak ab526fc93d Merge pull request 'fix: disable API v1 write methods (closes #112)' (#115) from fix/disable-api-write-methods into main
Check / check (push) Successful in 11m20s
Details 
Reviewed-on: #115
 2026-02-20 14:35:12 +01:00
sneak 4217e62f27 Merge pull request 'fix: resolve 1.0 audit bugs (closes #104, #105, #106, #107, #108)' (#109) from fix/1.0-audit-bugs into main
Check / check (push) Has been cancelled
Details 
Reviewed-on: #109
 2026-02-20 13:47:12 +01:00
sneak 4a73a5575f Merge pull request 'ci: add Gitea Actions workflow for make check (closes #96)' (#100) from ci/check-workflow-only into main
Check / check (push) Waiting to run
Details 
Reviewed-on: #100
 2026-02-20 12:19:29 +01:00
sneak a5d703a670 Merge branch 'main' into ci/check-workflow-only
Check / check (pull_request) Failing after 6m16s
Details
2026-02-20 12:00:02 +01:00
sneak c8a8f88cd0 Merge pull request 'chore: code cleanup and best practices (closes #45)' (#95) from chore/code-cleanup into main 
Reviewed-on: #95
 2026-02-20 11:59:31 +01:00
sneak aab2375cfa Merge branch 'main' into chore/code-cleanup 2026-02-20 11:59:06 +01:00
sneak 2ba47d6ddd Merge pull request 'fix: validate repo URL format on app creation (closes #88)' (#91) from fix/repo-url-validation into main 
Reviewed-on: #91
 2026-02-20 11:58:48 +01:00
sneak 8ad2c6e42c Merge pull request 'Fix all main branch lint issues (closes #101)' (#102) from fix/main-lint-issues into main 
Reviewed-on: #102
 2026-02-20 11:42:34 +01:00
sneak 3a4e999382 Merge pull request 'revert: undo PR #98 (CI + linter config changes)' (#99) from revert/pr-98 into main 
Reviewed-on: #99
 2026-02-20 05:37:49 +01:00
sneak f61d4d0f91 Merge pull request 'feat: add Gitea Actions CI for make check (closes #96)' (#98) from feat/ci-make-check into main
check / check (push) Failing after 2s
Details 
Reviewed-on: #98
 2026-02-20 05:33:24 +01:00
sneak 06e8e66443 Merge pull request 'fix: clean up orphan resources on deploy cancellation (closes #89)' (#93) from fix/deploy-cancel-cleanup into main 
Reviewed-on: #93
 2026-02-20 05:22:58 +01:00
sneak b47f871412 Merge pull request 'fix: restrict CORS to configured origins (closes #40)' (#92) from fix/cors-wildcard into main 
Reviewed-on: #92
 2026-02-20 05:11:33 +01:00
sneak 38a744b489 Merge pull request 'feat: add JSON API with token auth (closes #69)' (#74) from feature/json-api into main 
Reviewed-on: #74
 2026-02-16 09:51:48 +01:00
sneak 11314629b6 Merge branch 'main' into feature/json-api 2026-02-16 09:51:36 +01:00
sneak bc3ee2bfc5 Merge pull request 'chore: remove TODO.md — all items tracked as Gitea issues' (#65) from chore/update-todo into main 
Reviewed-on: #65
 2026-02-16 09:51:14 +01:00
sneak b83e68fafd Merge pull request 'feat: edit existing env vars, labels, and volume mounts (closes #67)' (#77) from feature/edit-config-entities into main 
Reviewed-on: #77
 2026-02-16 09:33:46 +01:00
sneak f743837d49 Merge branch 'main' into feature/json-api 2026-02-16 09:33:09 +01:00
sneak 0c8dcc2eb1 Merge branch 'main' into feature/edit-config-entities 2026-02-16 09:28:30 +01:00
sneak d0375555af Merge pull request 'Update TODO.md with current status (closes #54)' (#55) from update-todo-md into main 
Reviewed-on: #55
 2026-02-16 09:26:15 +01:00
sneak 96a91b09ca Merge branch 'main' into update-todo-md 2026-02-16 09:26:01 +01:00
sneak 046cccf31f Merge pull request 'feat: deployment rollback to previous image (closes #71)' (#75) from feature/deployment-rollback into main 
Reviewed-on: #75
 2026-02-16 09:25:33 +01:00
sneak e31666ab5c Merge pull request 'feat: add user-facing deployment cancel endpoint (closes #66)' (#73) from feature/deploy-cancel into main 
Reviewed-on: #73
 2026-02-16 09:18:59 +01:00
sneak ebcae55302 Merge pull request 'fix: cancel in-progress deploy when webhook triggers new deploy (closes #38)' (#52) from clawbot/upaas:fix/deploy-race-condition-38 into main 
Reviewed-on: #52
 2026-02-16 09:06:40 +01:00
sneak e2ad42f0ac Merge pull request 'Fix all golangci-lint issues (closes #32)' (#51) from clawbot/upaas:fix/lint-cleanup into main 
Reviewed-on: #51
 2026-02-16 09:06:09 +01:00
sneak 07ac71974c Merge pull request 'fix: set DestroySession MaxAge to -1 instead of -1*time.Second (closes #39)' (#50) from clawbot/upaas:fix/destroy-session-maxage into main 
Reviewed-on: #50
 2026-02-16 07:09:25 +01:00
sneak f596990d9d Merge pull request 'Add server-side app name validation (closes #37)' (#49) from clawbot/upaas:fix/server-side-app-name-validation into main 
Reviewed-on: #49
 2026-02-16 07:07:48 +01:00
sneak 4f1f3e2494 Merge branch 'main' into fix/server-side-app-name-validation 2026-02-16 07:07:28 +01:00
sneak 9a284d40fd Merge pull request 'fix: buffer template execution to prevent corrupt HTML responses (closes #42)' (#48) from clawbot/upaas:fix/template-execution-buffering into main 
Reviewed-on: #48
 2026-02-16 07:05:45 +01:00
sneak 448879b4ef Merge branch 'main' into fix/template-execution-buffering 2026-02-16 07:05:36 +01:00
sneak 8194a02ac4 Merge pull request 'perf: adaptive frontend polling intervals (closes #43)' (#46) from clawbot/upaas:fix/adaptive-polling-issue-43 into main 
Reviewed-on: #46
 2026-02-16 07:03:47 +01:00
sneak c4c62c9aba Merge pull request 'fix: only trust proxy headers from RFC1918/loopback sources (closes #44)' (#47) from clawbot/upaas:fix/realip-trusted-proxy into main 
Reviewed-on: #47
 2026-02-16 07:03:22 +01:00
sneak e9bf63d18b Merge pull request 'Fix all golangci-lint issues (closes #32)' (#34) from clawbot/upaas:fix/lint-cleanup into main 
Reviewed-on: #34
 2026-02-16 06:57:19 +01:00
sneak e30a7568cf Merge pull request 'fix: validate and clamp container log tail parameter (closes #24)' (#33) from clawbot/upaas:fix/validate-tail-parameter into main 
Reviewed-on: #33
 2026-02-16 06:51:34 +01:00
sneak 297f6e64f4 Merge pull request 'fix: prevent setup endpoint race condition (closes #26)' (#31) from clawbot/upaas:fix/setup-race-condition-closes-26 into main 
Reviewed-on: #31
 2026-02-16 06:45:02 +01:00
sneak 03b0dbeb04 Merge branch 'main' into fix/setup-race-condition-closes-26 2026-02-16 06:44:40 +01:00
sneak ef271d2da9 Merge pull request 'Fix command injection in git clone arguments (closes #18)' (#29) from clawbot/upaas:fix/command-injection-git-clone into main 
Reviewed-on: #29
 2026-02-16 06:38:29 +01:00
sneak e0d74f04dc Merge pull request 'fix: validate port range 1-65535 in parsePortValues (closes #25)' (#30) from clawbot/upaas:fix/port-validation-upper-bound into main 
Reviewed-on: #30
 2026-02-16 06:36:44 +01:00
sneak 97ee1e212f Merge pull request 'Wait for final log flush before closing deploymentLogWriter (closes #4)' (#9) from clawbot/upaas:fix/issue-4 into main 
Reviewed-on: #9
 2026-02-16 06:29:18 +01:00
sneak 3e8f424129 Merge pull request 'Add rate limiting to login endpoint to prevent brute force (closes #12)' (#14) from clawbot/upaas:fix/issue-12 into main 
Reviewed-on: #14
 2026-02-16 06:15:48 +01:00
sneak dcdecafc61 Merge pull request 'Add ownership verification on resource deletion (closes #19)' (#28) from clawbot/upaas:fix/ownership-verification-on-delete into main 
Reviewed-on: #28
 2026-02-16 06:12:52 +01:00
sneak 3a2bd0e51d Merge pull request 'Set Secure flag on session cookie in production mode (closes #5)' (#10) from clawbot/upaas:fix/issue-5 into main 
Reviewed-on: #10
 2026-02-16 05:58:22 +01:00
sneak 79a3165f90 Merge pull request 'Clean up Docker container when deleting an app (closes #2)' (#7) from clawbot/upaas:fix/issue-2 into main 
Reviewed-on: #7
 2026-02-16 05:56:56 +01:00
sneak 86491b1367 Merge pull request 'Limit webhook request body size to 1MB to prevent DoS (closes #1)' (#6) from clawbot/upaas:fix/issue-1 into main 
Reviewed-on: #6
 2026-02-16 05:56:14 +01:00
sneak 98b8403e8b Merge branch 'main' into fix/issue-1 2026-02-16 05:56:06 +01:00
sneak 076442923c Merge pull request 'Use hashed webhook secrets for constant-time comparison (closes #13)' (#15) from clawbot/upaas:fix/issue-13 into main 
Reviewed-on: #15
 2026-02-16 05:55:46 +01:00
sneak 57ea724419 Merge branch 'main' into fix/issue-13 2026-02-16 05:55:17 +01:00
sneak 39bcfb7456 Merge pull request 'Add CSRF protection to state-changing POST endpoints (closes #11)' (#16) from clawbot/upaas:fix/issue-11 into main 
Reviewed-on: #16
 2026-02-16 05:53:37 +01:00
sneak 4247162d30 Merge branch 'main' into fix/issue-11 2026-02-16 05:51:25 +01:00
sneak 4bad74081b Merge pull request 'rewrite log viewer panes (closes #17)' (#27) from clawbot/upaas:fix/log-viewer-rewrite into main 
Reviewed-on: #27
 2026-02-16 05:51:12 +01:00