9344b6c62c
fix: security policy change for alpha features and few auth fixes
2026-08-06 22:54:01 +01:00
5741c8ea2c
feat: Alpha support for search (behind feature gate)
2026-08-06 22:24:05 +01:00
1303a27d05
fix: Hidden acctions are for display purposes only, not security
2026-08-06 11:22:22 +01:00
0b2a5995ff
chore: coderabbit knows better than me
2026-07-29 01:25:44 +01:00
7ecc7791d8
chore: golangci-lint fixes
2026-07-29 00:30:57 +01:00
a1f03e7d33
chore: fieldalignment across code base to reduce memory usage
2026-07-28 22:26:51 +01:00
7c4eefa378
fix: Max of 16 clients in an event stream
2026-07-28 17:22:34 +01:00
1396184777
fix(executor): always anchor custom regex patterns and harden shellAfterCompleted
...
Wrap regex: patterns in a non-capturing group before applying ^...$ so
alternation cannot bypass full-string matching. Return template parse
errors from buildShellAfterCommand, and guard nil binding/action before
building shellAfterCompleted commands.
2026-07-08 10:46:13 +01:00
904616b1b1
security: GHSA-jm28-2wcr-qf3h (LOW) enforce logs ACL on sync execution endpoints
...
StartActionAndWait and StartActionByGetAndWait now apply the same logs
permission check used by GetLogs and ExecutionStatus.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:52:30 +01:00
9dc51df01d
fix: harden checklist JSON wire format, entity pagination, and review findings across API and UI
2026-07-07 10:14:17 +01:00
afd9f9033a
feat: expand entity list and detail APIs with properties and related actions
...
Support filtered paginated entity lists, configurable instance columns, and
entity-scoped actions with prefilled arguments for richer entity workflows.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:37:26 +01:00
b18518ebea
fix: add support for entities in checklists
2026-07-06 12:17:03 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
9ac6acefd0
fix: emoji names regression, and webhook execution helper info
2026-06-01 00:29:48 +01:00
a3865704c8
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:08:47 +01:00
841ef770f3
chore: Dep update March 24th
2026-03-24 22:52:17 +00:00
cb3aa3362e
chore: fix potential panic in tests
2026-03-11 00:29:56 +00:00
606b705bdd
chore: fix potential panic in tests
2026-03-11 00:27:42 +00:00
acd6cb839e
security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream
2026-03-10 23:47:35 +00:00
b298a6bd8c
chore: Treat root fieldset separately for ordering
2026-03-09 09:31:40 +00:00
93a9636a82
chore: additional test coverage for view permission
2026-03-09 08:55:47 +00:00
71bb999950
security: Actions that people didnt have permission to view were being returned ( #921 )
2026-03-08 22:45:46 +00:00
5ff6b5d080
fix: Entity ordering ( #886 , #762 )
2026-03-08 22:16:24 +00:00
d7962710e7
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
2026-03-05 08:20:02 +00:00
b37f035ea6
fix: Move templating functionality to global, making it possible to replace templates across the config
2026-01-25 10:32:22 +00:00
6493f7bee7
feat: block notifications, and cleanup of action/binding IDs
2026-01-11 01:10:20 +00:00
3e23fed3d6
feat: Enable/Disable actions based on rules
2026-01-06 21:38:18 +00:00
8bad1b5400
fix : #703 - Entities order was non-deterministic
2025-11-27 00:02:08 +00:00
a464e6a445
fix: broken tests after changing the way arguments are parsed
2025-10-01 22:20:56 +01:00
570c0ba087
chore: Repair output streaming, lots of css/go lint
2025-09-06 08:42:13 +01:00
f46a02fced
chore: tests wip
2025-08-19 17:29:40 +01:00
a62d58f119
chore: OliveTin 3k progress
2025-08-03 22:10:51 +01:00
jamesread