Devon Steenberg
b1752bd55a
fix(swarm): stack deployments [BE-12478] ( #1547 )
...
This commit 9b9d103b29 , introduced in docker 29, changed the behaviour of how the --tlsXXX flags are handled. Before this change leading and trailing quotes would be stripped. This meant that an invalid path that we were passing for the tls ca cert was being cleaned up to be an empty string. To preserve the old behaviour we now pass an empty string.
2025-12-17 10:29:04 +09:00
Steven Kang
9507cf9d8b
chore: version bump 2.33.6 ( #1541 )
2025-12-16 08:40:59 +09:00
Oscar Zhou
0a3e13915c
fix(stack): stack start failed with private image [BE-12464] ( #1529 )
2025-12-12 11:00:28 +13:00
Oscar Zhou
4eb1c7b11f
fix(stack/remote): fail to pull image in stack with relative path enabled [BE-12237] ( #1499 )
2025-12-10 08:31:08 +13:00
LP B
3afedce570
fix(api): do not give away information on error ( #1497 )
2025-12-08 16:50:10 -03:00
Steven Kang
11f612a501
chore: version bump 2.33.5 ( #1448 )
2025-11-27 08:03:27 +09:00
Oscar Zhou
cb8d8fcfd6
fix(snapshot): prevent from returning SnapshotRaw data [BE-12431] ( #1443 )
2025-11-26 12:56:55 +13:00
Devon Steenberg
22bb1e604d
fix(docker): bump docker max api version [BE-12399] ( #1405 )
2025-11-21 15:28:17 +13:00
Steven Kang
970b135261
chore: version bump 2.33.4 ( #1419 )
2025-11-20 10:16:25 +13:00
Steven Kang
d98eb77067
chore: version bump 2.33.3 ( #1351 )
2025-10-30 11:47:33 +13:00
Steven Kang
32926aa8bf
fix: add web socket headers for kubeconfig based access - 2.33.3 [r8s-592] ( #1329 )
2025-10-22 09:44:46 +13:00
andres-portainer
fd6d74602c
feat(boltdb): attempt to compact using a read-only database BE-12287 ( #1268 )
2025-09-30 19:10:16 -03:00
Steven Kang
7450501b7a
chore: version bump 2.33.2 ( #1257 )
2025-09-25 14:29:28 +12:00
andres-portainer
dcfe2d9809
feat(database): add a flag to compact on startup BE-12283 ( #1256 )
2025-09-24 18:43:54 -03:00
andres-portainer
732337615e
fix(edgestacks): add a missing webhook uniqueness check BE-12219 ( #1251 )
2025-09-23 17:20:25 -03:00
LP B
6ea16c0060
fix(api/endpoints): edge stack status type filter no longer always include Pending envs ( #1230 )
2025-09-22 16:10:46 +02:00
andres-portainer
68b9fef3f0
fix(kubernetes/cli): fix a data-race BE-12259 ( #1227 )
2025-09-18 10:22:29 -03:00
Oscar Zhou
405ce8f671
feat(edge): add option to allow always clone git repository [BE-12240] ( #1207 )
2025-09-17 18:25:47 +12:00
andres-portainer
e9d31b3b7b
fix(csp): update the Content-Security-Policy header BE-12228 ( #1202 )
2025-09-15 10:47:57 -03:00
LP B
f97adc94ad
fix(api/custom-templates): UAC-allowed users cannot fetch custom template details ( #1199 )
2025-09-12 15:38:58 +02:00
Malcolm Lockyer
11d6341765
fix(encryption): set correct default secret key path release [r8s-555] ( #1184 )
...
Co-authored-by: Gorbasch <57012534+mbegerau@users.noreply.github.com >
2025-09-11 16:32:52 +12:00
andres-portainer
c3cf46b0e0
fix(auth): remove a nil pointer dereference BE-12149 ( #1174 )
2025-09-10 21:55:19 -03:00
andres-portainer
ff746beba1
fix(csp): add google.com to the CSP header BE-12228 ( #1176 )
2025-09-10 15:01:00 -03:00
LP B
da1672fc17
fix(api): standard users cannot connect or disconnect containers to networks ( #1166 )
2025-09-09 22:07:24 +02:00
Ali
7a9376cbaf
fix(helm): update helm repo validation to match helm cli [r8s-531] ( #1142 )
2025-09-08 08:55:57 +12:00
Malcolm Lockyer
c0f6410d80
fix(fips): encrypt the chisel private key file for fips [be-12132] ( #1149 )
2025-09-05 13:17:23 +12:00
andres-portainer
4b9ab98fd2
fix(git): add a minimum interval validation BE-12220 ( #1145 )
2025-09-04 15:11:24 -03:00
andres-portainer
3354ee4e4b
fix(registries): clear sensitive fields in the update handler BE-12215 ( #1129 )
2025-09-03 10:41:27 -03:00
Steven Kang
af3c45bea0
chore: version bump 2.33.1 ( #1108 )
2025-08-27 10:45:29 +12:00
Devon Steenberg
e86ea22900
fix(sslflags): Deprecate ssl flags [BE-12168] ( #1076 )
2025-08-25 20:25:07 +12:00
Malcolm Lockyer
12b2acbc00
fix(standard): manual endpoint refresh fails to save new status [be-12188] ( #1096 )
2025-08-25 13:49:04 +12:00
Ali
4a8b42928e
fix(environments): create k8s specific edge agent before connecting [r8s-438] ( #1086 )
...
Merging because this change is unrelated to the failing kubernetes/tests/helm-oci.spec.ts tests
2025-08-25 09:32:16 +12:00
Steven Kang
debf1a742b
chore: version bump 2.33.0 ( #1065 )
2025-08-20 11:28:05 +12:00
Steven Kang
974682bd98
chore: version bump to 2.33.0-rc2 ( #1054 )
2025-08-19 11:04:56 +12:00
LP B
4169b045fb
fix(api/edge-stacks): avoid overriding updates with old values ( #1048 )
2025-08-16 03:52:21 +02:00
andres-portainer
0a2a786aa3
fix(migrator): rewrite a migration so it is idempotent BE-12053 ( #1043 )
2025-08-15 09:18:31 -03:00
Cara Ryan
ed6fa82904
fix(pending-actions): Small improvements to pending actions (R8S-350) ( #1025 )
2025-08-15 10:51:45 +12:00
andres-portainer
9fc301110b
fix(crypto): replace fips140 calls with fips calls BE-11979 ( #1035 )
2025-08-14 19:36:05 -03:00
andres-portainer
69101ac89a
feat(openai): remove OpenAI BE-12018 ( #1034 )
2025-08-14 19:35:43 -03:00
Malcolm Lockyer
69d33dd432
fix(fips): use standard lib pbkdf2 [be-12164] ( #1037 )
2025-08-15 09:45:49 +12:00
LP B
d01b31f707
feat(api): Permissions-Policy header deny all ( #1022 )
2025-08-13 22:07:52 +02:00
Andrew Amesbury
3ade5cdf19
bump version to 2.33.0-rc1 ( #1019 )
2025-08-13 14:40:34 +12:00
Devon Steenberg
6ca0085ec8
fix(stackbuilders): swarm and k8s deploys [BE-12138] ( #1003 )
2025-08-11 15:44:36 +12:00
Malcolm Lockyer
2cf1649c67
fix(encryption): in fips mode, use pbkdf2 for db password [be-11933] ( #985 )
...
Co-authored-by: andres-portainer <andres-portainer@users.noreply.github.com >
2025-08-11 12:03:38 +12:00
andres-portainer
64ed988169
fix(linters): upgrade golangci-lint to v2.3.1 BE-12136 ( #997 )
2025-08-08 21:39:21 -03:00
LP B
85b7e881eb
docs(api/dashboard): docker/{envId}/dashboard incorrectly marked as POST instead of GET ( #996 )
2025-08-08 09:31:34 +02:00
andres-portainer
9325cb2872
fix(all): avoid using pointers to zero sized structs BE-12129 ( #986 )
2025-08-07 09:47:42 -03:00
Devon Steenberg
84b4b30f21
fix(rand): Use crypto/rand instead of math/rand in FIPS mode [BE-12071] ( #961 )
...
Co-authored-by: codecov-ai[bot] <156709835+codecov-ai[bot]@users.noreply.github.com>
2025-08-06 10:19:15 +12:00
andres-portainer
6c47598cd9
fix(apikey): use HMAC-SHA256 for FIPS mode API keys BE-11936 ( #980 )
2025-08-05 13:09:35 -03:00
andres-portainer
d00d71ecbf
fix(linter): add linter rules to reduce the chance for invalid FIPS settings BE-11979 ( #975 )
2025-08-05 09:23:07 -03:00