38a744b489Merge pull request 'feat: add JSON API with token auth (closes#69)' (#74) from feature/json-api into main
main
Jeffrey Paul2026-02-16 09:51:48 +0100
6696db957dUpdate TODO.md: check off deployment cancellationclawbot2026-02-16 09:12:08 +0100
ebcae55302Merge pull request 'fix: cancel in-progress deploy when webhook triggers new deploy (closes#38)' (#52) from clawbot/upaas:fix/deploy-race-condition-38 into mainJeffrey Paul2026-02-16 09:06:40 +0100
e2ad42f0acMerge pull request 'Fix all golangci-lint issues (closes#32)' (#51) from clawbot/upaas:fix/lint-cleanup into mainJeffrey Paul2026-02-16 09:06:09 +0100
a80b7ac0a6refactor: export SanitizeTail and DefaultLogTail directly instead of wrapping
user
2026-02-15 22:14:12 -0800
16640ef88efix: cancel in-progress deploy on new webhook trigger
user
2026-02-15 22:13:20 -0800
69a5a8c298fix: resolve all golangci-lint issues (fixes#32)
clawbot
2026-02-15 22:09:59 -0800
3f499163a7fix: cancel in-progress deploy when webhook triggers new deploy (closes#38)clawbot2026-02-15 22:12:03 -0800
07ac71974cMerge pull request 'fix: set DestroySession MaxAge to -1 instead of -1*time.Second (closes#39)' (#50) from clawbot/upaas:fix/destroy-session-maxage into mainJeffrey Paul2026-02-16 07:09:25 +0100
cdd7e3fd3afix: set DestroySession MaxAge to -1 instead of -1*time.Second (closes#39)clawbot2026-02-15 22:07:57 -0800
f596990d9dMerge pull request 'Add server-side app name validation (closes#37)' (#49) from clawbot/upaas:fix/server-side-app-name-validation into mainJeffrey Paul2026-02-16 07:07:48 +0100
4f1f3e2494Merge branch 'main' into fix/server-side-app-name-validationJeffrey Paul2026-02-16 07:07:28 +0100
d27adc040dAdd server-side app name validation (closes#37)
user
2026-02-15 22:06:08 -0800
9a284d40fdMerge pull request 'fix: buffer template execution to prevent corrupt HTML responses (closes#42)' (#48) from clawbot/upaas:fix/template-execution-buffering into mainJeffrey Paul2026-02-16 07:05:45 +0100
448879b4efMerge branch 'main' into fix/template-execution-bufferingJeffrey Paul2026-02-16 07:05:36 +0100
af9ffddf84fix: buffer template execution to prevent corrupt HTML responses (closes#42)
user
2026-02-15 22:04:09 -0800
8194a02ac4Merge pull request 'perf: adaptive frontend polling intervals (closes#43)' (#46) from clawbot/upaas:fix/adaptive-polling-issue-43 into mainJeffrey Paul2026-02-16 07:03:47 +0100
c4c62c9abaMerge pull request 'fix: only trust proxy headers from RFC1918/loopback sources (closes#44)' (#47) from clawbot/upaas:fix/realip-trusted-proxy into mainJeffrey Paul2026-02-16 07:03:22 +0100
b1a6fd5fcafix: only trust proxy headers from RFC1918/loopback sources (closes#44)clawbot2026-02-15 22:01:54 -0800
3a18221eeaperf: adaptive polling intervals for frontend (closes#43)
user
2026-02-15 22:00:10 -0800
e9bf63d18bMerge pull request 'Fix all golangci-lint issues (closes#32)' (#34) from clawbot/upaas:fix/lint-cleanup into mainJeffrey Paul2026-02-16 06:57:19 +0100
559bfa4131fix: resolve all golangci-lint issues
clawbot
2026-02-15 21:55:08 -0800
e30a7568cfMerge pull request 'fix: validate and clamp container log tail parameter (closes#24)' (#33) from clawbot/upaas:fix/validate-tail-parameter into mainJeffrey Paul2026-02-16 06:51:34 +0100
300de44853fix: validate and clamp container log tail parameter (closes#24)
user
2026-02-15 21:50:00 -0800
297f6e64f4Merge pull request 'fix: prevent setup endpoint race condition (closes#26)' (#31) from clawbot/upaas:fix/setup-race-condition-closes-26 into mainJeffrey Paul2026-02-16 06:45:02 +0100
03b0dbeb04Merge branch 'main' into fix/setup-race-condition-closes-26Jeffrey Paul2026-02-16 06:44:40 +0100
e42f80814cfix: address noinlineerr lint warning
user
2026-02-15 21:43:00 -0800
97a5aae2f7simplify: replace mutex + ON CONFLICT with a single DB transaction
user
2026-02-15 21:41:52 -0800
ef271d2da9Merge pull request 'Fix command injection in git clone arguments (closes#18)' (#29) from clawbot/upaas:fix/command-injection-git-clone into mainJeffrey Paul2026-02-16 06:38:29 +0100
e0d74f04dcMerge pull request 'fix: validate port range 1-65535 in parsePortValues (closes#25)' (#30) from clawbot/upaas:fix/port-validation-upper-bound into mainJeffrey Paul2026-02-16 06:36:44 +0100
97ee1e212fMerge pull request 'Wait for final log flush before closing deploymentLogWriter (closes#4)' (#9) from clawbot/upaas:fix/issue-4 into mainJeffrey Paul2026-02-16 06:29:18 +0100
3e8f424129Merge pull request 'Add rate limiting to login endpoint to prevent brute force (closes#12)' (#14) from clawbot/upaas:fix/issue-12 into mainJeffrey Paul2026-02-16 06:15:48 +0100
ef0786c4b4fix: extract real client IP from proxy headers (X-Real-IP / X-Forwarded-For)clawbot2026-02-15 21:14:12 -0800
dcdecafc61Merge pull request 'Add ownership verification on resource deletion (closes#19)' (#28) from clawbot/upaas:fix/ownership-verification-on-delete into mainJeffrey Paul2026-02-16 06:12:52 +0100
867cdf01abfix: add ownership verification on env var, label, volume, and port deletionclawbot2026-02-15 20:52:59 -0800
a1b06219e7fix: add eviction for stale IP rate limiter entries and Retry-After header
user
2026-02-15 14:18:07 -0800
66661d1b1dAdd rate limiting to login endpoint to prevent brute force
clawbot
2026-02-15 14:04:52 -0800
3a2bd0e51dMerge pull request 'Set Secure flag on session cookie in production mode (closes#5)' (#10) from clawbot/upaas:fix/issue-5 into mainJeffrey Paul2026-02-16 05:58:22 +0100
79a3165f90Merge pull request 'Clean up Docker container when deleting an app (closes#2)' (#7) from clawbot/upaas:fix/issue-2 into mainJeffrey Paul2026-02-16 05:56:56 +0100
86491b1367Merge pull request 'Limit webhook request body size to 1MB to prevent DoS (closes#1)' (#6) from clawbot/upaas:fix/issue-1 into mainJeffrey Paul2026-02-16 05:56:14 +0100
39bcfb7456Merge pull request 'Add CSRF protection to state-changing POST endpoints (closes#11)' (#16) from clawbot/upaas:fix/issue-11 into mainJeffrey Paul2026-02-16 05:53:37 +0100
sneak
user
clawbot
clawbot
clawbot
clawbot