a530dca579
refactor: collapse action justification into a string template field
...
Use a single justification string for both requirement and templating so
empty values skip prompts while templates can prefill audit reasons at start.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:36:30 +01:00
b18518ebea
fix: add support for entities in checklists
2026-07-06 12:17:03 +01:00
03af6890c2
fix: flakey unit tests
2026-06-29 16:25:10 +01:00
c5cd5295b0
chore: fix race condition in tests
2026-06-29 00:39:49 +01:00
57f3ef46ad
fix: several merge messes
2026-06-28 22:52:16 +01:00
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
03a9a05e38
fix: action group display fixes
2026-06-18 11:55:14 +01:00
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
d9c8cfb573
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:30:39 +01:00
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
37cde0d982
fix: custom CSS and custom JS ( #804 and #803 ) hopefully
2026-06-16 11:56:14 +01:00
92f564ab45
feat: Action grouping for concurrency limit and queuing
2026-06-16 01:34:41 +01:00
8f6d53a029
chore: tweak reconnect login to avoid reconnect spam
2026-06-15 00:50:04 +01:00
65ed5c1ff4
feat: more intelligent reconnect method
2026-06-15 00:10:07 +01:00
9ac6acefd0
fix: emoji names regression, and webhook execution helper info
2026-06-01 00:29:48 +01:00
cbed6d68c2
feat: Show exec conditions in the UI, and allow right clicking buttons for action details
2026-05-23 10:32:50 +01:00
437255e247
Merge commit from fork
...
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:10:49 +01:00
a3865704c8
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:08:47 +01:00
246e33d565
feat: API Key (bearer) auth
2026-05-21 22:59:12 +01:00
fe68264c2b
feat: popupOnStart history, and logs in reverse order on action details view
2026-05-19 23:19:42 +01:00
841ef770f3
chore: Dep update March 24th
2026-03-24 22:52:17 +00:00
cb3aa3362e
chore: fix potential panic in tests
2026-03-11 00:29:56 +00:00
606b705bdd
chore: fix potential panic in tests
2026-03-11 00:27:42 +00:00
acd6cb839e
security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream
2026-03-10 23:47:35 +00:00
b298a6bd8c
chore: Treat root fieldset separately for ordering
2026-03-09 09:31:40 +00:00
dcb5bd0c82
chore: Allow entity key ordering for actionless components
2026-03-09 09:18:24 +00:00
93a9636a82
chore: additional test coverage for view permission
2026-03-09 08:55:47 +00:00
71bb999950
security: Actions that people didnt have permission to view were being returned ( #921 )
2026-03-08 22:45:46 +00:00
5ff6b5d080
fix: Entity ordering ( #886 , #762 )
2026-03-08 22:16:24 +00:00
b032ae5e5e
chore: fix regression on arguments not being found
2026-03-05 08:29:30 +00:00
93d983c506
Merge branch 'next' into advisory-fix-1
2026-03-05 03:24:12 -05:00
d7962710e7
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
2026-03-05 08:20:02 +00:00
5e0c052e68
Merge branch 'next' into advisory-fix-1
2026-03-04 19:16:07 -05:00
6202736d53
Merge commit from fork
...
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-04 19:05:48 -05:00
cb46a597b2
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-05 00:04:58 +00:00
d6a0abc375
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 23:31:15 +00:00
bb14c5da3e
security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references
2026-03-04 22:51:58 +00:00
aa2bd95ccb
feat(policy): add policy to show/hide version number
...
Made-with: Cursor
2026-02-27 21:26:55 +00:00
54eb2a6586
fix: User login log message fixed when password matches, but user lookup fails
2026-02-27 00:10:45 +00:00
03da2ff2e7
security: Try to set cookies secure, with force override option
2026-02-26 23:43:50 +00:00
4744169aa0
chore: code cleanup, remove todos, etc
2026-02-26 23:07:07 +00:00
e9a3863b1b
chore: codestyle
2026-02-26 20:56:51 +00:00
4af4d516be
fix: ShowDiagnostics now behind policy checks
2026-02-26 20:43:14 +00:00
24cced0c8c
security: IDOR on ExecutionStatus API
2026-02-26 20:23:48 +00:00
a7be68b359
security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks
2026-02-26 16:49:29 +00:00
1335302e80
chore: codestyle
2026-02-26 00:48:21 +00:00
ea4cdf9df2
fix: Logs page pagination ( #883 )
2026-02-19 20:33:51 +00:00
1248ee8765
chore: remove extranious comments
2026-02-13 23:36:16 +00:00
jamesread