Commit Graph

Select branches

Hide Pull Requests

ci/add-check-action

feature/api-token-auth

feature/backup-restore-config

feature/custom-healthcheck-command

feature/deployment-rollback-tests

feature/edit-entities

feature/observability-improvements

feature/prettierrc

feature/private-registry-auth

fix-gosec-g710

fix-noctx-lint

fix/js-formatting

fix/module-path

main

next

#10

#100

#102

#109

#115

#116

#117

#119

#126

#127

#129

#131

#14

#147

#148

#149

#15

#150

#152

#154

#155

#158

#159

#16

#160

#162

#164

#165

#166

#167

#168

#169

#170

#172

#173

#174

#183

#186

#187

#193

#194

#195

#196

#199

#200

#201

#202

#204

#207

#209

#210

#212

#217

#218

#219

#221

#222

#27

#28

#29

#30

#31

#33

#34

#46

#47

#48

#49

#50

#51

#52

#53

#55

#6

#65

#7

#73

#74

#75

#76

#77

#78

#8

#9

#91

#92

#93

#94

#95

#97

#98

#99

1.0.0

Mono Color

• a57efeed12 Build apps with BuildKit so build stages stop piling up (closes #220) next clawbot 2026-09-23 12:45:42 +02:00
• a60ea144fb Remove images from earlier deploys after a successful deploy (closes #216) clawbot 2026-09-23 12:24:36 +02:00
• 56345bc6f6 Remove the git clone container's anonymous volume with it (closes #215) clawbot 2026-09-23 12:04:32 +02:00
• ddcd179841 Keep deployment logs findable after the container is recreated (closes #214) clawbot 2026-09-23 11:44:30 +02:00
• 19619b1cd2 Wait for webhook deployments in handlers tests instead of sleeping (closes #211) clawbot 2026-09-23 03:04:31 +02:00
• 567f982c3b Re-vendor canonical .golangci.yml from prompts (closes #208) clawbot 2026-09-23 02:34:27 +02:00
• 1d769834de Vendor pinned prettier/format toolchain from prompts scaffold (closes #203) clawbot 2026-09-22 14:43:07 +02:00
• 6026e3923d 1.1.0 milestone: security, lint, and bootstrap fixes (#199) main sneak 2026-09-22 20:39:11 +02:00
• 214df3976f Add root .prettierrc pinning prettier settings (closes #197) feature/prettierrc sneak 2026-09-22 10:34:13 +00:00
• f2e4be5eed Fix flaky t.TempDir cleanup race in webhook tests (closes #198) clawbot 2026-09-22 12:28:23 +02:00
• d946fa68f9 Run all linting in Docker via Dockerfile.lint (closes #188) clawbot 2026-09-22 12:11:19 +02:00
• 727bd50935 Install pinned goimports in script/bootstrap (closes #184) clawbot 2026-09-22 11:11:15 +02:00
• f1dfd382a4 Reject path traversal in deploy log download handler (closes #177) clawbot 2026-09-22 11:01:07 +02:00
• 1d38585431 Add .prettierignore for vendored minified JS (closes #185) clawbot 2026-09-22 10:00:50 +02:00
• 8597b70954 Fix four deployability blockers found by QA (#193) sneak 2026-09-10 11:17:40 +02:00
• cdcf527b25 Fix four deployability blockers found by QA (closes #189, closes #190, closes #191, closes #192) sneak 2026-09-09 14:12:09 +00:00
• 7a34fc999c Update golangci-lint to v2.12.2 with canonical config (#187) clawbotandsneak 2026-08-07 22:21:42 +02:00
• b580dbbd2c fix: resolve all 22 gosec G710 open-redirect findings fix-gosec-g710 sneak 2026-08-07 16:58:10 +00:00
• 21642900e6 fix: resolve all 47 noctx lint findings in tests fix-noctx-lint sneak 2026-08-07 16:47:16 +00:00
• 291f85f3ed scripts-to-rule-them-all (#174) sneak 2026-07-07 02:15:20 +02:00
• bee933ce8e TODO (#173) sneak 2026-07-06 21:36:27 +02:00
• d5c3d4d55f Move schema_migrations table creation into 000.sql with INTEGER version column (#172) 3 people 2026-03-30 21:40:16 +02:00
• 57ec4331ef feat: add GitHub and GitLab webhook support (#170) clawbotanduser 2026-03-22 00:46:10 +01:00
• 067cb86124 feat: add custom health check commands per app feature/custom-healthcheck-command user 2026-03-17 02:11:08 -07:00
• b593f544d2 fix: address review findings for observability PR feature/observability-improvements clawbot 2026-03-17 02:52:34 -07:00
• 96f391282e feat: add observability improvements (metrics, audit log, structured logging) clawbot 2026-03-17 02:23:44 -07:00
• 67361419f5 feat: CPU/memory resource limits per app (#165) clawbotanduser 2026-03-20 06:44:48 +01:00
• 9627942573 fix: move writeLogsToFile doc comment to correct position feature/private-registry-auth clawbot 2026-03-17 02:39:38 -07:00
• bb91f314c5 feat: add backup/restore of app configurations feature/backup-restore-config user 2026-03-17 02:17:34 -07:00
• 0f4acb554e feat: add private Docker registry authentication for base images user 2026-03-17 02:14:39 -07:00
• fd110e69db feat: monolithic env var editing with bulk save (#158) 4 people 2026-03-11 12:06:56 +01:00
• d22daf1f0a Merge branch 'main' into fix/js-formatting fix/js-formatting sneak 2026-03-10 18:54:08 +01:00
• e1dc865226 feat: add webhook event history UI page (#164) clawbotandclawbot 2026-03-10 18:53:58 +01:00
• 49ff625ac4 fix: add missing Makefile targets (docker, hooks) and test timeout (#159) 3 people 2026-03-10 01:09:15 +01:00
• 602046b329 Merge branch 'main' into fix/js-formatting sneak 2026-03-10 01:07:26 +01:00
• ab63670043 fix: pass notification settings from create form to service (#160) clawbotandclawbot 2026-03-10 01:01:32 +01:00
• 7920e723a6 style: run make fmt on JS static files clawbot 2026-03-09 17:01:10 -07:00
• 1cd433b069 chore: add REPO_POLICIES compliance files (#155) clawbotandclawbot 2026-03-03 18:07:44 +01:00
• 94639a47e9 fix: add COPY --from=lint to builder stage to force lint execution (#154) clawbotandclawbot 2026-03-01 23:46:52 +01:00
• 12446f9f79 fix: change module path to sneak.berlin/go/upaas (closes #143) (#149) 3 people 2026-03-01 23:22:18 +01:00
• 877fb2c0c5 Split Dockerfile into lint + build stages for faster CI feedback (#152) 3 people 2026-03-01 21:19:21 +01:00
• 14525523cb chore: update module path to sneak.berlin/go/upaas (fixes #143) fix/module-path clawbot 2026-02-26 06:00:17 -08:00
• 578c6ec842 Merge pull request 'tidy' (#148) from fix/tidy into main 1.0.0 sneak 2026-02-26 13:55:28 +01:00
• 1c2bf80d7d tidy sneak 2026-02-26 19:52:09 +07:00
• 019ba7fe1f Merge pull request 'Fix dashboard CSRFField crash (closes #146)' (#147) from fix/dashboard-csrf-field into main sneak 2026-02-26 12:07:42 +01:00
• c22a2877d5 fix: pass CSRFField to dashboard template (closes #146) user 2026-02-26 02:56:12 -08:00
• 43cde0eefd test: add failing test for dashboard CSRFField (refs #146) user 2026-02-26 02:56:00 -08:00
• b1c6b93d8e Merge pull request 'fix: simplify CI to docker build only (closes #130)' (#131) from fix/ci-docker-build-only into main sneak 2026-02-26 11:53:14 +01:00
• 1875792ebe Merge branch 'main' into fix/ci-docker-build-only sneak 2026-02-26 11:53:03 +01:00
• 7bbaa1d08a Merge pull request 'Fix 1.0 audit bugs (closes #120, closes #121, closes #122, closes #123, closes #124, closes #125)' (#126) from fix/audit-bugs-120-125 into main sneak 2026-02-26 11:52:54 +01:00
• 43a0cbac70 fix: use pre-built golangci-lint binary instead of go install user 2026-02-26 02:17:54 -08:00
• fb866af4e5 simplify CI to docker build only (refs #130) clawbot 2026-02-26 02:11:15 -08:00
• 91d6da0796 fix: move inline comments above FROM lines (fixes docker build) user 2026-02-26 02:06:11 -08:00
• 57e0735afa docs: expand Important note — HOST_DATA_DIR must be absolute path clawbot 2026-02-23 13:17:21 -08:00
• 2eeead7e64 docs: clarify UPAAS_DATA_DIR default is for local dev only clawbot 2026-02-23 13:16:06 -08:00
• 76fe014e9a docs: remove relative path default for HOST_DATA_DIR in docker-compose example user 2026-02-23 13:15:10 -08:00
• f36732eaf5 refactor: remove internal/domain package, move types to correct packages user 2026-02-23 13:14:15 -08:00
• 3a1b1e3cd4 refactor: add String() methods to domain types, replace string() casts user 2026-02-23 11:58:00 -08:00
• 594537e6f5 rework: address review feedback on PR #126 clawbot 2026-02-22 03:40:57 -08:00
• a6c76232bf fix: assign commit error to err so deferred rollback triggers (closes #125) clawbot 2026-02-21 00:55:53 -08:00
• 46574f8cf1 fix: rename GetBuildDir param from appID to appName (closes #123) clawbot 2026-02-21 00:55:24 -08:00
• 074903619d fix: add 1MB size limit on deployment logs with truncation (closes #122) clawbot 2026-02-21 00:55:12 -08:00
• 6cf6e89db4 fix: use renderTemplate in all error paths of HandleAppCreate/HandleAppUpdate (closes #121) clawbot 2026-02-21 00:54:49 -08:00
• 5c20b0b23d fix: use bind mount with HOST_DATA_DIR in docker-compose.yml (closes #120) clawbot 2026-02-21 00:54:32 -08:00
• e051245b5f Merge pull request 'Refactor: break up app.js into smaller modules' (#129) from refactor/split-app-js into main sneak 2026-02-26 10:59:02 +01:00
• 5fe11f24d4 refactor: break up app.js into smaller modules user 2026-02-23 11:52:41 -08:00
• 28f014ce95 Merge pull request 'fix: use imageID in createAndStartContainer (closes #124)' (#127) from fix/use-image-id-in-container into main sneak 2026-02-23 20:48:23 +01:00
• dc638a07f1 Merge pull request 'fix: pin all external refs to cryptographic identity (closes #118)' (#119) from fix/pin-external-refs-crypto-identity into main sneak 2026-02-23 20:48:09 +01:00
• 0e8efe1043 fix: use imageID in createAndStartContainer (closes #124) user 2026-02-21 02:24:51 -08:00
• 0ed2d02dfe fix: pin all external refs to cryptographic identity (closes #118) user 2026-02-20 10:45:02 -08:00
• ab526fc93d Merge pull request 'fix: disable API v1 write methods (closes #112)' (#115) from fix/disable-api-write-methods into main sneak 2026-02-20 14:35:12 +01:00
• ab7c43b887 fix: disable API v1 write methods (closes #112) user 2026-02-20 05:33:07 -08:00
• 4217e62f27 Merge pull request 'fix: resolve 1.0 audit bugs (closes #104, #105, #106, #107, #108)' (#109) from fix/1.0-audit-bugs into main sneak 2026-02-20 13:47:12 +01:00
• 327d7fb982 fix: resolve lint issues in handlers and middleware clawbot 2026-02-20 03:35:44 -08:00
• 6cfd5023f9 fix: SetupRequired middleware exempts health, static, and API routes (closes #108) clawbot 2026-02-20 03:33:34 -08:00
• efd3500dac fix: HandleVolumeAdd validates host and container paths (closes #107) clawbot 2026-02-20 03:33:19 -08:00
• ec87915234 fix: API delete endpoint cleans up Docker container before DB deletion (closes #106) clawbot 2026-02-20 03:33:04 -08:00
• cd0354e86c fix: API deploy handler uses detached context to prevent cancellation (closes #105) clawbot 2026-02-20 03:32:42 -08:00
• 7d1849c8df fix: HandleEnvVarDelete uses correct varID route param (closes #104) clawbot 2026-02-20 03:32:20 -08:00
• 4a73a5575f Merge pull request 'ci: add Gitea Actions workflow for make check (closes #96)' (#100) from ci/check-workflow-only into main sneak 2026-02-20 12:19:29 +01:00
• a5d703a670 Merge branch 'main' into ci/check-workflow-only sneak 2026-02-20 12:00:02 +01:00
• c8a8f88cd0 Merge pull request 'chore: code cleanup and best practices (closes #45)' (#95) from chore/code-cleanup into main sneak 2026-02-20 11:59:31 +01:00
• aab2375cfa Merge branch 'main' into chore/code-cleanup sneak 2026-02-20 11:59:06 +01:00
• 2ba47d6ddd Merge pull request 'fix: validate repo URL format on app creation (closes #88)' (#91) from fix/repo-url-validation into main sneak 2026-02-20 11:58:48 +01:00
• 0bb59bf9c2 feat: sanitize container log output beyond Content-Type user 2026-02-19 20:36:13 -08:00
• dcff249fe5 fix: sanitize container log output and fix lint issues clawbot 2026-02-19 20:30:11 -08:00
• a2087f4898 fix: restrict SCP-like URLs to git user only and reject path traversal clawbot 2026-02-19 20:17:25 -08:00
• a2fb42520d fix: validate repo URL format on app creation (closes #88) clawbot 2026-02-19 13:44:08 -08:00
• 6d600010b7 ci: add Gitea Actions workflow for make check (closes #96) clawbot 2026-02-20 02:46:00 -08:00
• 8ad2c6e42c Merge pull request 'Fix all main branch lint issues (closes #101)' (#102) from fix/main-lint-issues into main sneak 2026-02-20 11:42:34 +01:00
• 0fcf12d2cc fix: resolve all lint issues on main branch clawbot 2026-02-20 02:39:18 -08:00
• e73409b567 fix: resolve lint issues for make check compliance feature/api-token-auth clawbot 2026-02-19 23:43:41 -08:00
• a891fb2489 fix: increase API token entropy from 128 to 256 bits clawbot 2026-02-19 20:16:32 -08:00
• 96eea71c54 fix: set authenticated user on request context in bearer token auth clawbot 2026-02-19 13:54:09 -08:00
• 7387ba6b5c feat: add API token authentication (closes #87) clawbot 2026-02-19 13:47:39 -08:00
• 3a4e999382 Merge pull request 'revert: undo PR #98 (CI + linter config changes)' (#99) from revert/pr-98 into main sneak 2026-02-20 05:37:49 +01:00
• 728b29ef16 Revert "Merge pull request 'feat: add Gitea Actions CI for make check (closes #96)' (#98) from feat/ci-make-check into main" clawbot 2026-02-19 20:36:22 -08:00
• f61d4d0f91 Merge pull request 'feat: add Gitea Actions CI for make check (closes #96)' (#98) from feat/ci-make-check into main sneak 2026-02-20 05:33:24 +01:00
• 8ec04fdadb feat: add Gitea Actions CI for make check (closes #96) clawbot 2026-02-19 20:29:21 -08:00
• 5d87d386c3 ci: pin actions to commit SHAs to prevent RCE ci/add-check-action user 2026-02-19 20:25:23 -08:00