e1f8c01fe5
chore: coderabbit suggestions
2026-07-24 16:26:13 +01:00
fe1ac20935
feat: Show config issues in diagnostics
2026-07-24 15:27:02 +01:00
c72d180fae
fix: Dashboards now can have ACLs ( #445 )
2026-07-18 23:57:09 +01:00
5b1a29db7f
docs: Standardize on "Server Diagnostics", update many screenshots
2026-07-09 11:30:16 +01:00
1396184777
fix(executor): always anchor custom regex patterns and harden shellAfterCompleted
...
Wrap regex: patterns in a non-capturing group before applying ^...$ so
alternation cannot bypass full-string matching. Return template parse
errors from buildShellAfterCommand, and guard nil binding/action before
building shellAfterCompleted commands.
2026-07-08 10:46:13 +01:00
904616b1b1
security: GHSA-jm28-2wcr-qf3h (LOW) enforce logs ACL on sync execution endpoints
...
StartActionAndWait and StartActionByGetAndWait now apply the same logs
permission check used by GetLogs and ExecutionStatus.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:52:30 +01:00
a58e2fe0c3
chore: fix flakey test
2026-07-07 10:32:33 +01:00
9dc51df01d
fix: harden checklist JSON wire format, entity pagination, and review findings across API and UI
2026-07-07 10:14:17 +01:00
1325ba6a72
Merge branch 'next' into feat/entity-list-related-actions-api
2026-07-06 23:57:06 +01:00
58dc804e78
fix: coderabbit suggestions on the justification
2026-07-06 23:35:04 +01:00
afd9f9033a
feat: expand entity list and detail APIs with properties and related actions
...
Support filtered paginated entity lists, configurable instance columns, and
entity-scoped actions with prefilled arguments for richer entity workflows.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:37:26 +01:00
a530dca579
refactor: collapse action justification into a string template field
...
Use a single justification string for both requirement and templating so
empty values skip prompts while templates can prefill audit reasons at start.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:36:30 +01:00
b18518ebea
fix: add support for entities in checklists
2026-07-06 12:17:03 +01:00
03af6890c2
fix: flakey unit tests
2026-06-29 16:25:10 +01:00
c5cd5295b0
chore: fix race condition in tests
2026-06-29 00:39:49 +01:00
57f3ef46ad
fix: several merge messes
2026-06-28 22:52:16 +01:00
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
03a9a05e38
fix: action group display fixes
2026-06-18 11:55:14 +01:00
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
d9c8cfb573
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:30:39 +01:00
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
37cde0d982
fix: custom CSS and custom JS ( #804 and #803 ) hopefully
2026-06-16 11:56:14 +01:00
92f564ab45
feat: Action grouping for concurrency limit and queuing
2026-06-16 01:34:41 +01:00
8f6d53a029
chore: tweak reconnect login to avoid reconnect spam
2026-06-15 00:50:04 +01:00
65ed5c1ff4
feat: more intelligent reconnect method
2026-06-15 00:10:07 +01:00
9ac6acefd0
fix: emoji names regression, and webhook execution helper info
2026-06-01 00:29:48 +01:00
cbed6d68c2
feat: Show exec conditions in the UI, and allow right clicking buttons for action details
2026-05-23 10:32:50 +01:00
437255e247
Merge commit from fork
...
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:10:49 +01:00
a3865704c8
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:08:47 +01:00
246e33d565
feat: API Key (bearer) auth
2026-05-21 22:59:12 +01:00
fe68264c2b
feat: popupOnStart history, and logs in reverse order on action details view
2026-05-19 23:19:42 +01:00
841ef770f3
chore: Dep update March 24th
2026-03-24 22:52:17 +00:00
cb3aa3362e
chore: fix potential panic in tests
2026-03-11 00:29:56 +00:00
606b705bdd
chore: fix potential panic in tests
2026-03-11 00:27:42 +00:00
acd6cb839e
security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream
2026-03-10 23:47:35 +00:00
b298a6bd8c
chore: Treat root fieldset separately for ordering
2026-03-09 09:31:40 +00:00
dcb5bd0c82
chore: Allow entity key ordering for actionless components
2026-03-09 09:18:24 +00:00
93a9636a82
chore: additional test coverage for view permission
2026-03-09 08:55:47 +00:00
71bb999950
security: Actions that people didnt have permission to view were being returned ( #921 )
2026-03-08 22:45:46 +00:00
5ff6b5d080
fix: Entity ordering ( #886 , #762 )
2026-03-08 22:16:24 +00:00
b032ae5e5e
chore: fix regression on arguments not being found
2026-03-05 08:29:30 +00:00
93d983c506
Merge branch 'next' into advisory-fix-1
2026-03-05 03:24:12 -05:00
d7962710e7
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
2026-03-05 08:20:02 +00:00
5e0c052e68
Merge branch 'next' into advisory-fix-1
2026-03-04 19:16:07 -05:00
6202736d53
Merge commit from fork
...
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-04 19:05:48 -05:00
cb46a597b2
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-05 00:04:58 +00:00
d6a0abc375
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 23:31:15 +00:00
bb14c5da3e
security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references
2026-03-04 22:51:58 +00:00
jamesread