 Jeppe B
|
67d62eff70
|
Sync fake email deliveries across API tests
|
2026-06-10 18:53:13 +02:00 |
|
|
Jeppe B
|
8ebbd52a99
|
Normalize attachment object type lookups
|
2026-06-10 18:40:34 +02:00 |
|
|
Jeppe B
|
cb34b030c8
|
Add order booking completion confirmation resend route
|
2026-06-10 17:55:57 +02:00 |
|
|
Jeppe Bundgaard
|
5c67fe419f
|
Add timeout settings for Shelly cloud HTTP requests and update related tests
|
2026-06-09 14:03:12 +02:00 |
|
|
Jeppe Bundgaard
|
aca8be51dc
|
Implement move collected invoice to customer functionality with API endpoint and associated tests
|
2026-06-09 13:12:55 +02:00 |
|
|
Jeppe Bundgaard
|
07441c4ed1
|
Harden API auto deploy gate
|
2026-06-08 18:44:25 +02:00 |
|
|
Jeppe Bundgaard
|
4fc66c72b8
|
Prefer selected Coolify deployment commit
|
2026-06-08 18:14:45 +02:00 |
|
|
Jeppe Bundgaard
|
a3ea5fee83
|
Clean up stale Coolify API routes
|
2026-06-08 18:02:08 +02:00 |
|
|
Jeppe Bundgaard
|
ef8d97c821
|
Verify API release commit in gateway gate
|
2026-06-08 17:48:01 +02:00 |
|
|
Jeppe Bundgaard
|
91d3332d4e
|
Add Slack customer registration notification functionality
|
2026-06-08 12:42:03 +02:00 |
|
|
Jeppe Bundgaard
|
bedbf21c29
|
Add superuser new customer email notification preferences
|
2026-06-08 12:20:07 +02:00 |
|
|
Jeppe Bundgaard
|
716929bd7b
|
Inject frontend commit SHA into Coolify runtime environment for manifest builds
|
2026-06-04 00:38:31 +02:00 |
|
|
Jeppe Bundgaard
|
33b7c3e51a
|
Widen self-serve task descriptions
|
2026-06-03 19:06:09 +02:00 |
|
|
Jeppe Bundgaard
|
6d739cfebc
|
Add configuration for GitHub self-hosted runners
|
2026-06-02 11:25:00 +02:00 |
|
|
Jeppe B
|
0bf19c9d33
|
Restrict indexed department filters to scoped entities
|
2026-06-02 01:34:21 +02:00 |
|
|
Jeppe B
|
fd51a5b119
|
Fix search table argument ordering
|
2026-06-02 01:07:45 +02:00 |
|
|
Jeppe B
|
140365c8bb
|
Resolve PHP merge conflict test failures
|
2026-06-02 00:58:15 +02:00 |
|
|
Jeppe B
|
3a6685c345
|
Merge pull request #255 from copenhagentruckwash/fix-system-search-authorization-bypass
Enforce department scoping in system search for generic entities
|
2026-06-02 00:33:02 +02:00 |
|
|
Jeppe B
|
a60983f328
|
Merge pull request #266 from copenhagentruckwash/propose-fix-for-n8n-ssrf-vulnerability
Harden n8n webhook trigger URL validation against SSRF
|
2026-06-02 00:32:47 +02:00 |
|
|
Jeppe B
|
e2c2eb21cb
|
Harden n8n webhook trigger URL validation
|
2026-06-02 00:32:35 +02:00 |
|
|
copilot-swe-agent[bot]
|
1505464095
|
Plan: Resolve merge conflicts with master
|
2026-06-01 22:25:49 +00:00 |
|
|
Jeppe B
|
7f38cf2f7e
|
Merge pull request #264 from copenhagentruckwash/propose-fix-for-ssrf-in-workfeed-api
Restrict Workfeed API base URL to trusted hosts (prevent SSRF)
|
2026-06-02 00:22:35 +02:00 |
|
|
Jeppe B
|
d281dddbc1
|
Restrict Workfeed API base URL
|
2026-06-02 00:22:18 +02:00 |
|
|
Jeppe B
|
ce8e6d0dab
|
Scope economic transfer queue jobs by creator
|
2026-06-02 00:20:30 +02:00 |
|
|
Jeppe B
|
8a749cffa3
|
Fix system search department scoping for generic entities
|
2026-06-01 23:58:03 +02:00 |
|
|
Jeppe B
|
4730eebdb4
|
Merge pull request #245 from copenhagentruckwash/fix-internal-ip-address-leakage
Stop exposing relay local IPs by default
|
2026-06-01 23:44:05 +02:00 |
|
|
Jeppe B
|
b25ce9cb11
|
Stop exposing relay local IPs by default
|
2026-06-01 23:43:53 +02:00 |
|
|
copilot-swe-agent[bot]
|
3555904423
|
Merge origin/master and resolve invoice_period_flag_service conflict
|
2026-06-01 21:37:53 +00:00 |
|
|
Jeppe B
|
dcd57c7092
|
Merge pull request #221 from copenhagentruckwash/fix-system-search-associations-vulnerability
Prevent association expansion from bypassing own-only access
|
2026-06-01 23:31:00 +02:00 |
|
|
Jeppe B
|
bd7deaeded
|
Fix invoice period flag cache fallbacks
|
2026-06-01 23:29:05 +02:00 |
|
|
Jeppe B
|
9c85135a07
|
Merge pull request #233 from copenhagentruckwash/fix-cross-tenant-vehicle-reference-leak
Restrict vehicle reference suggestions by department context
|
2026-06-01 23:26:36 +02:00 |
|
|
Jeppe B
|
a8a47104dd
|
Restrict vehicle reference suggestions by department context
|
2026-06-01 23:26:27 +02:00 |
|
|
Jeppe B
|
2c0907c486
|
Merge pull request #232 from copenhagentruckwash/fix-vulnerability-in-automatic-invoice-flags
Fix automatic invoice period flag suppression
|
2026-06-01 23:26:02 +02:00 |
|
|
Jeppe B
|
0ae28af309
|
Fix invoice period automatic flag cache misses
|
2026-06-01 23:25:54 +02:00 |
|
|
copilot-swe-agent[bot]
|
64d7e6f061
|
Merge master into fix-system-search-associations-vulnerability
|
2026-06-01 21:25:51 +00:00 |
|
|
Jeppe B
|
4f9a10402b
|
Merge pull request #231 from copenhagentruckwash/fix-exposure-of-private-git-commit-metadata
Redact GitHub commit metadata from public release runtime
|
2026-06-01 23:25:38 +02:00 |
|
|
Jeppe B
|
5e8ec85943
|
Redact release GitHub metadata from public runtime
|
2026-06-01 23:25:28 +02:00 |
|
|
Jeppe B
|
5282ee10ba
|
Merge pull request #229 from copenhagentruckwash/propose-fix-for-booking-po-vulnerability
Validate booking ownership before defaulting order PO (prevent cross-tenant leak)
|
2026-06-01 23:24:00 +02:00 |
|
|
Jeppe B
|
eab8394579
|
Fix booking PO default tenant validation
|
2026-06-01 23:23:49 +02:00 |
|
|
Jeppe B
|
b88c2742e8
|
Merge pull request #228 from copenhagentruckwash/fix-partial-release-tests-bypassing-promotion-gate
Require app-scoped release gates for bundle promotion
|
2026-06-01 23:23:34 +02:00 |
|
|
Jeppe B
|
4ea5eeb942
|
Require app-scoped release gates for bundle promotion
|
2026-06-01 23:23:23 +02:00 |
|
|
Jeppe B
|
7cb248a112
|
Merge pull request #226 from copenhagentruckwash/fix-ssrf-vulnerability-in-release-gate
Harden release gate diagnostics fetches
|
2026-06-01 23:17:01 +02:00 |
|
|
Jeppe B
|
dfa0441266
|
Harden release gate diagnostics fetches
|
2026-06-01 23:16:51 +02:00 |
|
|
Jeppe B
|
a0b1dcb3e3
|
Fix system search association expansion for own-only types
|
2026-06-01 23:13:50 +02:00 |
|
|
Jeppe B
|
b6beb9622b
|
Fail closed when edge broker secret is missing
|
2026-06-01 23:13:04 +02:00 |
|
|
copilot-swe-agent[bot]
|
fbe700a4db
|
Merge remote-tracking branch 'origin/master' into fix-subuser-tokens-allowing-user-impersonation
# Conflicts:
# services/nginx/app/classes/authentication.php
|
2026-06-01 20:39:16 +00:00 |
|
|
copilot-swe-agent[bot]
|
4e9575cd87
|
Merge master and resolve conflict: use rawToken in get_user() exception-handled lookup
|
2026-06-01 20:35:51 +00:00 |
|
|
Jeppe B
|
fd4ec3dda2
|
Fix subuser token confusion in user auth flow
|
2026-06-01 22:35:24 +02:00 |
|
|
Jeppe B
|
721e2670dd
|
Reject 2FA verification tokens for API authentication
|
2026-06-01 22:22:42 +02:00 |
|
|
Jeppe B
|
b03500d2d1
|
Merge pull request #189 from copenhagentruckwash/fix-subuser-token-authorization-vulnerability
Validate subuser grants before resolving subuser customer context
|
2026-06-01 22:21:58 +02:00 |
|