Commit Graph

Select branches

Hide Pull Requests

chore/code-cleanup

chore/update-todo

ci/add-check-action

ci/check-workflow-only

feat/ci-make-check

feature/api-token-auth

feature/backup-restore-config

feature/custom-healthcheck-command

feature/deploy-cancel

feature/deployment-rollback

feature/deployment-rollback-tests

feature/edit-config-entities

feature/edit-entities

feature/json-api

feature/observability-improvements

feature/private-registry-auth

fix/1.0-audit-bugs

fix/deploy-cancel-cleanup

fix/disable-api-write-methods

fix/js-formatting

fix/main-lint-issues

fix/module-path

fix/repo-url-validation

main

revert/pr-98

schema-consolidation

update-todo-md

1.0.0

Mono Color

• 11314629b6 Merge branch 'main' into feature/json-api feature/json-api Jeffrey Paul 2026-02-16 09:51:36 +01:00
• bc3ee2bfc5 Merge pull request 'chore: remove TODO.md — all items tracked as Gitea issues' (#65) from chore/update-todo into main Jeffrey Paul 2026-02-16 09:51:14 +01:00
• e09cf11c06 chore: remove TODO.md — all items tracked as Gitea issues chore/update-todo user 2026-02-16 00:35:23 -08:00
• 8d68a31366 fix: remove undeployed api_tokens migrations (006 + 007) user 2026-02-16 00:34:02 -08:00
• b83e68fafd Merge pull request 'feat: edit existing env vars, labels, and volume mounts (closes #67)' (#77) from feature/edit-config-entities into main Jeffrey Paul 2026-02-16 09:33:46 +01:00
• f743837d49 Merge branch 'main' into feature/json-api Jeffrey Paul 2026-02-16 09:33:09 +01:00
• 9ac1d25788 refactor: switch API from token auth to cookie-based session auth user 2026-02-16 00:31:10 -08:00
• 0c8dcc2eb1 Merge branch 'main' into feature/edit-config-entities feature/edit-config-entities Jeffrey Paul 2026-02-16 09:28:30 +01:00
• 3c1525d59e test: add rollback error condition tests feature/deployment-rollback-tests clawbot 2026-02-16 00:27:46 -08:00
• d0375555af Merge pull request 'Update TODO.md with current status (closes #54)' (#55) from update-todo-md into main Jeffrey Paul 2026-02-16 09:26:15 +01:00
• e9d284698a feat: edit existing env vars, labels, and volume mounts clawbot 2026-02-16 00:26:07 -08:00
• 96a91b09ca Merge branch 'main' into update-todo-md update-todo-md Jeffrey Paul 2026-02-16 09:26:01 +01:00
• 8156305705 feat: add edit support for env vars, labels, and volumes feature/edit-entities user 2026-02-16 00:25:34 -08:00
• 046cccf31f Merge pull request 'feat: deployment rollback to previous image (closes #71)' (#75) from feature/deployment-rollback into main Jeffrey Paul 2026-02-16 09:25:33 +01:00
• 0536f57ec2 feat: add JSON API with token auth (closes #69) user 2026-02-16 00:20:41 -08:00
• 2be6a748b7 feat: deployment rollback to previous image feature/deployment-rollback user 2026-02-16 00:23:11 -08:00
• e31666ab5c Merge pull request 'feat: add user-facing deployment cancel endpoint (closes #66)' (#73) from feature/deploy-cancel into main Jeffrey Paul 2026-02-16 09:18:59 +01:00
• c5f957477f feat: add user-facing deployment cancel endpoint feature/deploy-cancel user 2026-02-16 00:15:24 -08:00
• 6696db957d Update TODO.md: check off deployment cancellation clawbot 2026-02-16 09:12:08 +01:00
• ebcae55302 Merge pull request 'fix: cancel in-progress deploy when webhook triggers new deploy (closes #38)' (#52) from clawbot/upaas:fix/deploy-race-condition-38 into main Jeffrey Paul 2026-02-16 09:06:40 +01:00
• e2ad42f0ac Merge pull request 'Fix all golangci-lint issues (closes #32)' (#51) from clawbot/upaas:fix/lint-cleanup into main Jeffrey Paul 2026-02-16 09:06:09 +01:00
• a80b7ac0a6 refactor: export SanitizeTail and DefaultLogTail directly instead of wrapping user 2026-02-15 22:14:12 -08:00
• 69a5a8c298 fix: resolve all golangci-lint issues (fixes #32) clawbot 2026-02-15 22:09:59 -08:00
• 3f499163a7 fix: cancel in-progress deploy when webhook triggers new deploy (closes #38) clawbot 2026-02-15 22:12:03 -08:00
• 07ac71974c Merge pull request 'fix: set DestroySession MaxAge to -1 instead of -1*time.Second (closes #39)' (#50) from clawbot/upaas:fix/destroy-session-maxage into main Jeffrey Paul 2026-02-16 07:09:25 +01:00
• cdd7e3fd3a fix: set DestroySession MaxAge to -1 instead of -1*time.Second (closes #39) clawbot 2026-02-15 22:07:57 -08:00
• f596990d9d Merge pull request 'Add server-side app name validation (closes #37)' (#49) from clawbot/upaas:fix/server-side-app-name-validation into main Jeffrey Paul 2026-02-16 07:07:48 +01:00
• 4f1f3e2494 Merge branch 'main' into fix/server-side-app-name-validation Jeffrey Paul 2026-02-16 07:07:28 +01:00
• d27adc040d Add server-side app name validation (closes #37) user 2026-02-15 22:06:08 -08:00
• 9a284d40fd Merge pull request 'fix: buffer template execution to prevent corrupt HTML responses (closes #42)' (#48) from clawbot/upaas:fix/template-execution-buffering into main Jeffrey Paul 2026-02-16 07:05:45 +01:00
• 448879b4ef Merge branch 'main' into fix/template-execution-buffering Jeffrey Paul 2026-02-16 07:05:36 +01:00
• af9ffddf84 fix: buffer template execution to prevent corrupt HTML responses (closes #42) user 2026-02-15 22:04:09 -08:00
• 8194a02ac4 Merge pull request 'perf: adaptive frontend polling intervals (closes #43)' (#46) from clawbot/upaas:fix/adaptive-polling-issue-43 into main Jeffrey Paul 2026-02-16 07:03:47 +01:00
• c4c62c9aba Merge pull request 'fix: only trust proxy headers from RFC1918/loopback sources (closes #44)' (#47) from clawbot/upaas:fix/realip-trusted-proxy into main Jeffrey Paul 2026-02-16 07:03:22 +01:00
• b1a6fd5fca fix: only trust proxy headers from RFC1918/loopback sources (closes #44) clawbot 2026-02-15 22:01:54 -08:00
• 3a18221eea perf: adaptive polling intervals for frontend (closes #43) user 2026-02-15 22:00:10 -08:00
• e9bf63d18b Merge pull request 'Fix all golangci-lint issues (closes #32)' (#34) from clawbot/upaas:fix/lint-cleanup into main Jeffrey Paul 2026-02-16 06:57:19 +01:00
• 559bfa4131 fix: resolve all golangci-lint issues clawbot 2026-02-15 21:55:08 -08:00
• e30a7568cf Merge pull request 'fix: validate and clamp container log tail parameter (closes #24)' (#33) from clawbot/upaas:fix/validate-tail-parameter into main Jeffrey Paul 2026-02-16 06:51:34 +01:00
• 300de44853 fix: validate and clamp container log tail parameter (closes #24) user 2026-02-15 21:50:00 -08:00
• 297f6e64f4 Merge pull request 'fix: prevent setup endpoint race condition (closes #26)' (#31) from clawbot/upaas:fix/setup-race-condition-closes-26 into main Jeffrey Paul 2026-02-16 06:45:02 +01:00
• 03b0dbeb04 Merge branch 'main' into fix/setup-race-condition-closes-26 Jeffrey Paul 2026-02-16 06:44:40 +01:00
• e42f80814c fix: address noinlineerr lint warning user 2026-02-15 21:43:00 -08:00
• 97a5aae2f7 simplify: replace mutex + ON CONFLICT with a single DB transaction user 2026-02-15 21:41:52 -08:00
• ef271d2da9 Merge pull request 'Fix command injection in git clone arguments (closes #18)' (#29) from clawbot/upaas:fix/command-injection-git-clone into main Jeffrey Paul 2026-02-16 06:38:29 +01:00
• e0d74f04dc Merge pull request 'fix: validate port range 1-65535 in parsePortValues (closes #25)' (#30) from clawbot/upaas:fix/port-validation-upper-bound into main Jeffrey Paul 2026-02-16 06:36:44 +01:00
• 763e722607 fix: prevent setup endpoint race condition (closes #26) clawbot 2026-02-15 21:35:16 -08:00
• 35ef6c8fea fix: validate port range 1-65535 in parsePortValues (closes #25) user 2026-02-15 21:34:50 -08:00
• 7c0278439d fix: prevent command injection in git clone arguments (closes #18) clawbot 2026-02-15 21:33:02 -08:00
• 97ee1e212f Merge pull request 'Wait for final log flush before closing deploymentLogWriter (closes #4)' (#9) from clawbot/upaas:fix/issue-4 into main Jeffrey Paul 2026-02-16 06:29:18 +01:00
• 3e8f424129 Merge pull request 'Add rate limiting to login endpoint to prevent brute force (closes #12)' (#14) from clawbot/upaas:fix/issue-12 into main Jeffrey Paul 2026-02-16 06:15:48 +01:00
• ef0786c4b4 fix: extract real client IP from proxy headers (X-Real-IP / X-Forwarded-For) clawbot 2026-02-15 21:14:12 -08:00
• dcdecafc61 Merge pull request 'Add ownership verification on resource deletion (closes #19)' (#28) from clawbot/upaas:fix/ownership-verification-on-delete into main Jeffrey Paul 2026-02-16 06:12:52 +01:00
• 867cdf01ab fix: add ownership verification on env var, label, volume, and port deletion clawbot 2026-02-15 20:52:59 -08:00
• a1b06219e7 fix: add eviction for stale IP rate limiter entries and Retry-After header user 2026-02-15 14:18:07 -08:00
• 66661d1b1d Add rate limiting to login endpoint to prevent brute force clawbot 2026-02-15 14:04:52 -08:00
• 6475389280 test: add IDOR tests for resource deletion ownership verification clawbot 2026-02-15 20:52:19 -08:00
• 3a2bd0e51d Merge pull request 'Set Secure flag on session cookie in production mode (closes #5)' (#10) from clawbot/upaas:fix/issue-5 into main Jeffrey Paul 2026-02-16 05:58:22 +01:00
• 79a3165f90 Merge pull request 'Clean up Docker container when deleting an app (closes #2)' (#7) from clawbot/upaas:fix/issue-2 into main Jeffrey Paul 2026-02-16 05:56:56 +01:00
• 86491b1367 Merge pull request 'Limit webhook request body size to 1MB to prevent DoS (closes #1)' (#6) from clawbot/upaas:fix/issue-1 into main Jeffrey Paul 2026-02-16 05:56:14 +01:00
• 98b8403e8b Merge branch 'main' into fix/issue-1 Jeffrey Paul 2026-02-16 05:56:06 +01:00
• 076442923c Merge pull request 'Use hashed webhook secrets for constant-time comparison (closes #13)' (#15) from clawbot/upaas:fix/issue-13 into main Jeffrey Paul 2026-02-16 05:55:46 +01:00
• 57ea724419 Merge branch 'main' into fix/issue-13 Jeffrey Paul 2026-02-16 05:55:17 +01:00
• 39bcfb7456 Merge pull request 'Add CSRF protection to state-changing POST endpoints (closes #11)' (#16) from clawbot/upaas:fix/issue-11 into main Jeffrey Paul 2026-02-16 05:53:37 +01:00
• 4247162d30 Merge branch 'main' into fix/issue-11 Jeffrey Paul 2026-02-16 05:51:25 +01:00
• 4bad74081b Merge pull request 'rewrite log viewer panes (closes #17)' (#27) from clawbot/upaas:fix/log-viewer-rewrite into main Jeffrey Paul 2026-02-16 05:51:12 +01:00
• be6080280e rewrite log viewer panes: smart auto-scroll with follow button clawbot 2026-02-15 20:48:43 -08:00
• b1dc8fcc4e Add CSRF protection to state-changing POST endpoints clawbot 2026-02-15 14:17:55 -08:00
• 72786a9feb fix: use hashed webhook secrets for constant-time comparison clawbot 2026-02-15 14:06:53 -08:00
• 185daab909 fix: set Secure flag on session cookie in production mode (closes #5) clawbot 2026-02-08 12:05:09 -08:00
• 69456abd25 fix: wait for final log flush before closing deploymentLogWriter (closes #4) clawbot 2026-02-08 12:04:37 -08:00
• ed4ddc5536 fix: clean up Docker container when deleting an app (closes #2) clawbot 2026-02-08 12:02:56 -08:00
• e212910143 fix: limit webhook request body size to 1MB to prevent DoS (closes #1) clawbot 2026-02-08 12:02:06 -08:00
• d4eae284b5 Fix build logs auto-scroll with double RAF and change detection sneak 2026-01-08 10:31:19 -08:00
• ee4afbde80 Fix build logs overflow by using Alpine.js reactive bindings sneak 2026-01-08 10:21:16 -08:00
• aaa55fd153 Fix app status not updated when deployment fails or service restarts sneak 2026-01-01 06:59:03 -08:00
• a71bf07dbf Fix deploy button strobing by using deployment status sneak 2026-01-01 06:52:43 -08:00
• ee34f3b70c Change Docker image naming to upaas-appname:deploymentID sneak 2026-01-01 06:50:54 -08:00
• ba4893a98a Simplify logs pane structure to fix scrolling sneak 2026-01-01 06:48:06 -08:00
• c01bfcc9a9 Fix logs pane overflow by moving background/padding to wrapper sneak 2026-01-01 06:40:31 -08:00
• 2b63219f66 Fix realtime build logs scrolling in deployment history sneak 2026-01-01 06:10:25 -08:00
• 2cbcd3d72a Add build log file storage and download functionality sneak 2026-01-01 06:08:00 -08:00
• c4362c3143 Add commit URL to Slack notifications with link and backtick formatting sneak 2025-12-31 16:29:22 -08:00
• 4cd12d717c Remove separate live logs section, update logs in deployment card sneak 2025-12-31 15:06:35 -08:00
• a2539ebf3a Fix finished time showing for in-progress deployments sneak 2025-12-31 14:58:41 -08:00
• 58687e77f5 Always scroll logs to bottom on every update sneak 2025-12-31 14:56:56 -08:00
• 83986626a4 Fix container name conflict on redeployment sneak 2025-12-31 14:48:16 -08:00
• d2f2747ae6 Fix real-time build log streaming and scroll behavior sneak 2025-12-31 14:44:15 -08:00
• f1cc7d65a6 Integrate Alpine.js for reactive UI sneak 2026-01-01 05:37:46 +07:00
• ab7e917b03 Add real-time deployment updates and refactor JavaScript sneak 2026-01-01 05:22:56 +07:00
• 307955dae1 Improve footer styling and fix license to WTFPL sneak 2025-12-30 15:08:22 +07:00
• b3ac3c60c2 Add deployment improvements and UI enhancements sneak 2025-12-30 15:05:26 +07:00
• bc275f7b9c Add TCP/UDP port mapping support sneak 2025-12-30 12:11:57 +07:00
• 4ece7431af Use app name and deployment ID in build directory structure sneak 2025-12-30 11:57:02 +07:00
• 2ed23912a9 Update branding to µPaaS by @sneak sneak 2025-12-29 17:04:53 +07:00
• dc6500eac6 Fix repository cloning when running inside a container sneak 2025-12-29 17:02:01 +07:00
• 5dc454d752 Improve deploy key and webhook URL display sneak 2025-12-29 16:51:42 +07:00
• 4d03350943 Fix logout route to accept POST sneak 2025-12-29 16:46:30 +07:00
• ee823b6a84 Fix static file route to serve at /s/ sneak 2025-12-29 16:39:51 +07:00
• cc6dee9fd8 Install golangci-lint v2 in Docker build sneak 2025-12-29 16:29:16 +07:00