Commit Graph

Select branches

Hide Pull Requests

master

1.0.0

1.0.1

Mono Color

• 1477138dad chore(frontend-templates): bump admin-dist v2.2.5, user-dist v2.3.2 and aobobo-dist v1.4.5 naibaandnaiba/CloudCode 2026-07-04 11:08:03 +00:00
• c778472571 fix: panic on nil pointer dereference in notification sending and fix date parsing formats Bot 2026-07-01 23:36:21 +08:00
• cabbfff858 fix: correctly parse VPS expiry from PublicNote and enhance domain date parsing Bot 2026-07-01 23:05:34 +08:00
• fd31e5f1b0 chore(frontend-templates): add aobobo template naibaandnaiba/CloudCode 2026-06-28 01:07:56 +00:00
• e1045ffd30 fix(api): redact profile password hash naibaandnaiba/CloudCode 2026-06-28 01:07:14 +00:00
• 015c49c8e3 update contributors[no ci] github-actions[bot] 2026-06-27 11:30:20 +08:00
• 6aab2e4919 Merge pull request #1213 from nezhahq/dependabot/github_actions/github-actions-02325a8da5 naiba 2026-06-27 11:30:04 +08:00
• 94a70a668b chore(deps): bump the github-actions group with 2 updates dependabot[bot] 2026-06-23 16:14:34 +00:00
• d750fa035d chore(frontend-templates): bump user-dist v2.3.1 naibaandnaiba/CloudCode 2026-06-20 11:01:54 +00:00
• 39d398066d fix(api): redact third-party credentials in ddns/notification list naiba 2026-06-20 01:54:50 +00:00
• d556c3216f chore(frontend-templates): bump user-dist v2.3.0 and nazhua-dist v1.1.0 naiba 2026-06-20 00:40:38 +00:00
• 8cd2da79b8 chore(frontend-templates): bump admin-dist v2.2.4 naiba 2026-06-20 00:39:36 +00:00
• d9ae9cc772 update contributors[no ci] github-actions[bot] 2026-06-20 08:25:32 +08:00
• 874a47c32c Merge pull request #1211 from hamster1963/fix-service naiba 2026-06-20 08:25:15 +08:00
• 7a61da098b fix(service): filter service stats based on user permissions hamster1963 2026-06-20 00:45:53 +08:00
• 3d74cd9431 fix(alert): retain Duration samples for offline rules so they fire naiba 2026-06-08 00:57:14 +00:00
• 576e6773c0 fix(release): bump user-dist to v2.1.2 (v2.1.1 never released upstream) naiba 2026-06-07 16:23:24 +00:00
• b12b1709d9 test(alert): pin sample-slice memory-boundedness invariant naiba 2026-06-07 16:14:31 +00:00
• e756b4540c fix(alert): keep sample history by rule-defined retention window naiba 2026-06-07 16:11:43 +00:00
• 66de244c2e feat(oauth2): add dashboard_host setting for callback URL naiba 2026-06-06 05:03:12 +00:00
• c595728609 chore(frontend-templates): bump admin-dist v2.2.2 and user-dist v2.1.1 naiba 2026-06-06 04:55:31 +00:00
• d8d8729ecb chore(deps): bump the github-actions group with 11 updates (#1198) dependabot[bot] 2026-06-05 11:01:02 +08:00
• 6e9510d26a chore(frontend-templates): bump admin-dist v2.2.0 naiba 2026-06-05 02:42:58 +00:00
• 5fd91c44b0 test(rpc): cover both-key-styles present in agent auth metadata naiba 2026-06-05 02:42:58 +00:00
• 0759f5c801 fix(alert): prevent divide-by-zero panic and unbounded growth on zero-duration rule naiba 2026-06-05 02:42:49 +00:00
• 36240f5888 fix(rpc): cap concurrent IO streams per user and per server naiba 2026-06-05 02:42:38 +00:00
• fb5c37e983 fix(oauth2): validate Host header against allowlist for callback URL naiba 2026-06-05 02:42:28 +00:00
• 1927b0c6a4 chore(ci): add dependabot version updates for gomod and actions naiba 2026-06-04 16:19:25 +00:00
• 78f5b014ee fix(csrf): set Secure on csrf cookie only over HTTPS naiba 2026-06-04 16:19:25 +00:00
• 806036d75b update contributors[no ci] github-actions[bot] 2026-06-05 09:07:02 +08:00
• 4289d30357 fix(auth): accept hyphenated agent metadata (#1197) zhdsmy 2026-06-05 09:06:38 +08:00
• c3c361ad66 fix(service): flip CopyStats public filter to HideForGuest naiba 2026-06-02 03:32:10 +00:00
• e47b5b99f8 chore(frontend-templates): bump admin-dist v2.1.2 and user-dist v2.1.0 naiba 2026-06-02 03:31:36 +00:00
• 8285a3d99f docs(mcp): note server.exec reaps the whole process tree naiba 2026-06-02 03:31:36 +00:00
• 836f1db4b7 feat(service): replace EnableShowInService with HideForGuest naiba 2026-06-02 03:31:36 +00:00
• bb38a9d4d2 fix(mcp): accept agents reporting version without v prefix and stop masking tool errors naiba 2026-05-31 16:18:57 +00:00
• 9b5199ac6c chore(frontend-templates): bump admin-frontend to v2.1.1 naiba 2026-05-31 15:14:48 +00:00
• 083bc985c5 feat(auth): split inventory scope out of server scope naiba 2026-05-31 15:14:41 +00:00
• f7f8264ec0 fix(auth): always serialize User.Role so admin (role 0) is not omitted naiba 2026-05-31 12:05:11 +00:00
• 34ab8a31bc chore(frontend-templates): bump admin-frontend to v2.1.0 naibaandcloudcode 2026-05-31 10:26:41 +00:00
• 7432efde04 chore(frontend-templates): bump user-frontend to v2.0.4 naibaandcloudcode 2026-05-31 09:49:57 +00:00
• 4b92934af4 Added translation using Weblate (Romanian) Hosted WeblateandA 2026-05-31 11:44:05 +02:00
• 401713bab5 ci(gosec): silence G101 false positives on PAT context keys and scope const naibaandcloudcode 2026-05-31 08:16:55 +00:00
• f246668586 ci(gosec): silence G101 false positives on PAT context keys and scope const naibaandcloudcode 2026-05-31 08:16:55 +00:00
• 18c044d959 fix(security): set real IP from peer in ConfigUsePeerIP gRPC mode naibaandcloudcode 2026-05-31 07:40:34 +00:00
• 440ef8e714 fix(security): set real IP from peer in ConfigUsePeerIP gRPC mode naibaandcloudcode 2026-05-31 07:40:34 +00:00
• b1d84c6b2f fix(security): harden gRPC stream WAF, MCP fs arg validation, and PAT server binding naibaandcloudcode 2026-05-31 05:51:32 +00:00
• 4f79fd6c2b fix(security): harden gRPC stream WAF, MCP fs arg validation, and PAT server binding naibaandcloudcode 2026-05-31 05:51:32 +00:00
• 05e14981b5 fix(security): verify transfer-token HMAC and sign CSRF double-submit cookie naibaandcloudcode 2026-05-31 05:48:50 +00:00
• 834ae25024 fix(security): verify transfer-token HMAC and sign CSRF double-submit cookie naibaandcloudcode 2026-05-31 05:48:50 +00:00
• d4837dfc7a fix(security): reserve dashboard hosts from NAT and re-check DDNS profile ownership at worker time naibaandcloudcode 2026-05-31 02:04:35 +00:00
• f18232eafa fix(security): reserve dashboard hosts from NAT and re-check DDNS profile ownership at worker time naibaandcloudcode 2026-05-31 02:04:35 +00:00
• e8dabf5bc6 feat(auth): add PAT auth, scoped REST/MCP access, CSRF, and tenant isolation naibaandcloudcode 2026-05-30 15:56:44 +00:00
• ab25662ddd feat(auth): add PAT auth, scoped REST/MCP access, CSRF, and tenant isolation naibaandcloudcode 2026-05-30 15:56:44 +00:00
• 029695344c chore(frontend-templates): bump admin-frontend to v2.0.9 3 people 2026-05-26 07:12:31 +00:00
• 58c1ea7b0b chore(frontend-templates): bump admin-frontend to v2.0.9 3 people 2026-05-26 07:12:31 +00:00
• 57703c4c3e ci(gosec): mark jwt secret env var name as non-secret 3 people 2026-05-26 05:27:46 +00:00
• 35fc24e2b2 ci(gosec): mark jwt secret env var name as non-secret 3 people 2026-05-26 05:27:46 +00:00
• c94639e199 fix(server-group): hide guest-empty groups from guest listing naibaandcloudcode 2026-05-26 04:07:50 +00:00
• 76a5e2b261 fix(server-group): hide guest-empty groups from guest listing naibaandcloudcode 2026-05-26 04:07:50 +00:00
• a4f4cb1f34 fix(fm): switch create FM session to POST to defeat CSRF naibaandcloudcode 2026-05-26 04:07:49 +00:00
• 00fde59d4d fix(fm): switch create FM session to POST to defeat CSRF naibaandcloudcode 2026-05-26 04:07:49 +00:00
• a8f014838c fix(service): hide EnableShowInService=false services from sideband endpoints naibaandcloudcode 2026-05-26 03:59:59 +00:00
• 94b7deef24 fix(service): hide EnableShowInService=false services from sideband endpoints naibaandcloudcode 2026-05-26 03:59:59 +00:00
• 9c0fa84c95 fix(cron): switch manual trigger to POST to defeat CSRF naibaandcloudcode 2026-05-26 03:59:50 +00:00
• 9929e04643 fix(cron): switch manual trigger to POST to defeat CSRF naibaandcloudcode 2026-05-26 03:59:50 +00:00
• e05700c2f0 feat(jwt): server-side session table with keyId + obfuscated uid claims naibaandcloudcode 2026-05-26 03:51:05 +00:00
• 7b54a2d5ea feat(jwt): server-side session table with keyId + obfuscated uid claims naibaandcloudcode 2026-05-26 03:51:05 +00:00
• d6f381d078 feat(idcodec): add hashid obfuscation derived from jwt secret naibaandcloudcode 2026-05-26 03:50:36 +00:00
• 304afd9e09 feat(idcodec): add hashid obfuscation derived from jwt secret naibaandcloudcode 2026-05-26 03:50:36 +00:00
• 95c3a775d5 feat(config): make jwt_secret_key env-first and never persist when injected naibaandcloudcode 2026-05-26 03:50:26 +00:00
• 6811f730e9 feat(config): make jwt_secret_key env-first and never persist when injected naibaandcloudcode 2026-05-26 03:50:26 +00:00
• d202ecf8db chore(frontend-templates): bump admin-frontend to v2.0.8 naiba 2026-05-25 11:42:39 +00:00
• 1e0f479bb5 chore(frontend-templates): bump admin-frontend to v2.0.8 naiba 2026-05-25 11:42:39 +00:00
• b83d93fdc9 fix(server-transfer): break loader sort ties by transferID naiba 2026-05-25 10:36:43 +00:00
• 3619e5551a fix(server-transfer): break loader sort ties by transferID naiba 2026-05-25 10:36:43 +00:00
• 6b88cdb012 feat: server transfer rotation naiba 2026-05-25 10:15:21 +00:00
• e816e94fca feat: server transfer rotation naiba 2026-05-25 10:15:21 +00:00
• 37b6db806f update contributors[no ci] github-actions[bot] 2026-05-22 23:55:19 +08:00
• 636f4a9716 update contributors[no ci] github-actions[bot] 2026-05-22 23:55:19 +08:00
• 79a6dd76f8 Update vulnerability reporting contact method naiba 2026-05-22 22:58:18 +08:00
• 6612d151cd Update vulnerability reporting contact method naiba 2026-05-22 22:58:18 +08:00
• 8d21062c3b fix(rpc): authorize agent task results naibaandnaiba/CloudCode 2026-05-21 02:02:02 +00:00
• 02129f16fb fix(rpc): authorize agent task results naibaandnaiba/CloudCode 2026-05-21 02:02:02 +00:00
• 0f7af0bcb2 fix(rpc): bind io streams to target agents naibaandnaiba/CloudCode 2026-05-21 02:01:54 +00:00
• 8add559ec8 fix(rpc): bind io streams to target agents naibaandnaiba/CloudCode 2026-05-21 02:01:54 +00:00
• a5e2b0c36d ci: free gitee release storage before uploads naibaandnaiba/CloudCode 2026-05-19 05:06:38 +00:00
• 79c06d0f95 ci: free gitee release storage before uploads naibaandnaiba/CloudCode 2026-05-19 05:06:38 +00:00
• d8f077ffa2 ci: relax gitee release upload timeout naibaandnaiba/CloudCode 2026-05-19 03:59:48 +00:00
• fd08b35d81 ci: relax gitee release upload timeout naibaandnaiba/CloudCode 2026-05-19 03:59:48 +00:00
• d61f953c81 ci: make gitee release sync retryable naibaandnaiba/CloudCode 2026-05-19 03:17:33 +00:00
• 8d8fcb1275 ci: make gitee release sync retryable naibaandnaiba/CloudCode 2026-05-19 03:17:33 +00:00
• 1efe2bf053 fix(rpc): allow global agent secret across server owners naibaandnaiba/CloudCode 2026-05-19 01:58:53 +00:00
• fa31ba402e fix(rpc): allow global agent secret across server owners naibaandnaiba/CloudCode 2026-05-19 01:58:53 +00:00
• 9d67134148 fix(controller): filter service transfer stats by viewer naibaandnaiba/CloudCode 2026-05-19 00:35:02 +00:00
• 43624792a3 fix(controller): filter service transfer stats by viewer naibaandnaiba/CloudCode 2026-05-19 00:35:02 +00:00
• fb120074ac chore(security): pin JWT algorithm + SameSite and harden OAuth2 state cookie naibaandnaiba/CloudCode 2026-05-18 15:17:59 +00:00
• 59ccc12e58 chore(security): pin JWT algorithm + SameSite and harden OAuth2 state cookie naibaandnaiba/CloudCode 2026-05-18 15:17:59 +00:00
• 7c493e8f0b fix(rpc): verify gRPC client UUID belongs to the agent secret owner naibaandnaiba/CloudCode 2026-05-18 15:17:37 +00:00
• ee01a174fb fix(rpc): verify gRPC client UUID belongs to the agent secret owner naibaandnaiba/CloudCode 2026-05-18 15:17:37 +00:00