0e45f3b0e3
security: GHSA-xc5w-4v5w-7x65 (HIGH) harden shell argument type safety
...
Block additional unvalidated argument types from shell actions, enforce
full-string custom regex matching, and allowlist http/https URL schemes.
Update checkbox integration test to use exec, matching the intended shell
vs exec split for choiceless checkbox arguments.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:40:48 +01:00
ec114e95d2
Merge commit from fork
...
security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
2026-07-08 08:59:51 +01:00
422044317c
security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth
...
Sweep expired OAuth2 state entries, cap the map at 10000 entries, and
remove stale state on failed callback validation.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 14:26:37 +01:00
42f2572616
fix(config): reject ambiguous checklist comma format and propagate encode errors
...
ParseChecklistValue now accepts JSON arrays or single bare values and rejects
legacy comma-separated input. Empty JSON segments are validated consistently,
and FormatChecklistValue returns marshal errors instead of an empty string
2026-07-07 11:57:20 +01:00
a58e2fe0c3
chore: fix flakey test
2026-07-07 10:32:33 +01:00
9dc51df01d
fix: harden checklist JSON wire format, entity pagination, and review findings across API and UI
2026-07-07 10:14:17 +01:00
1325ba6a72
Merge branch 'next' into feat/entity-list-related-actions-api
2026-07-06 23:57:06 +01:00
58dc804e78
fix: coderabbit suggestions on the justification
2026-07-06 23:35:04 +01:00
afd9f9033a
feat: expand entity list and detail APIs with properties and related actions
...
Support filtered paginated entity lists, configurable instance columns, and
entity-scoped actions with prefilled arguments for richer entity workflows.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:37:26 +01:00
a530dca579
refactor: collapse action justification into a string template field
...
Use a single justification string for both requirement and templating so
empty values skip prompts while templates can prefill audit reasons at start.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:36:30 +01:00
b18518ebea
fix: add support for entities in checklists
2026-07-06 12:17:03 +01:00
6077c63cfd
chore: Fix coderabbit warnings
2026-07-06 11:39:43 +01:00
e24ae6265b
feat: Checklist support ( #922 )
2026-07-06 11:01:22 +01:00
ba7d9f51a1
chore: flakey test finder
2026-06-29 20:40:05 +01:00
1cbd1cfb6b
fix: windows installer branding
2026-06-29 16:44:01 +01:00
03af6890c2
fix: flakey unit tests
2026-06-29 16:25:10 +01:00
c5cd5295b0
chore: fix race condition in tests
2026-06-29 00:39:49 +01:00
a413f9d6af
chore: fix flakey tests
2026-06-29 00:03:31 +01:00
5fca2d9482
Merge branch 'next' into feat/better-prometheus-metrics
2026-06-28 23:17:28 +01:00
57f3ef46ad
fix: several merge messes
2026-06-28 22:52:16 +01:00
e63094e8e8
fix: several merge messes
2026-06-28 22:15:46 +01:00
4b2e78926c
Merge branch 'next' of github.com:OliveTin/OliveTin into next
2026-06-27 07:50:29 +01:00
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
abf4fc2cf0
feat: Windows icons and MSI support
2026-06-26 21:19:19 +01:00
d1787a3823
feat: Better prometheus support
2026-06-25 23:05:47 +01:00
e61c8b036d
Substitute environment variables when loading yaml config to fix #840 ( #880 )
2026-06-20 01:45:29 +01:00
d23fb2fd77
Merge branch 'next' into wip
2026-06-20 01:27:37 +01:00
03d188337e
fix: Parse templates in action ( #1035 )
2026-06-20 00:26:13 +01:00
c442efe204
chore: register executor listener before startup
2026-06-19 10:37:33 +01:00
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
03a9a05e38
fix: action group display fixes
2026-06-18 11:55:14 +01:00
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
f4b3c4289a
chore: Fix many little niggly bugs, test flakes, etc
2026-06-17 22:18:26 +01:00
d9c8cfb573
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:30:39 +01:00
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
37cde0d982
fix: custom CSS and custom JS ( #804 and #803 ) hopefully
2026-06-16 11:56:14 +01:00
f6fc775ef7
feat: Action grouping for concurrency limit and queuing ( #1048 )
2026-06-16 11:42:31 +01:00
9d64b64bf9
fix: configurable log directory for windows
...
9;133u
0;133u
2026-06-16 11:24:19 +01:00
8622b5b06c
chore: coderabbit suggestions
2026-06-16 11:17:15 +01:00
0e8f7c7be3
chore: coderabbit suggestions
2026-06-16 11:02:37 +01:00
3471e2fb12
chore: coderabbit suggestions
2026-06-16 09:51:55 +01:00
92f564ab45
feat: Action grouping for concurrency limit and queuing
2026-06-16 01:34:41 +01:00
21716e0a7e
feat: log file save path on windows #932
2026-06-16 00:33:49 +01:00
8f6d53a029
chore: tweak reconnect login to avoid reconnect spam
2026-06-15 00:50:04 +01:00
65ed5c1ff4
feat: more intelligent reconnect method
2026-06-15 00:10:07 +01:00
9ac6acefd0
fix: emoji names regression, and webhook execution helper info
2026-06-01 00:29:48 +01:00
ebffd9f040
security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE
...
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
2026-05-31 22:44:40 +01:00
1a7e44eb42
chore: dep update May 26th 2026
2026-05-26 00:44:15 +01:00
e0eea9bc90
feat default icon cli hugeicon ( #1036 )
2026-05-26 00:37:58 +01:00
jamesread