1955 Commits

Author SHA1 Message Date
Cara Ryan 965c8e0ced feat(rbac): restrict access to secret data for read-only users [C9S-359] (#3449) 2026-08-21 08:18:04 +12:00
andres-portainer 1117f33e38 fix(stacks): add more bind mount protections BE-13352 (#3510) 2026-08-19 22:18:41 -03:00
Chaim Lev-Ari 8c631445ea fix(gitops): skip orphaned workflows when loading sources [BE-13346] (#3505) 2026-08-19 15:00:44 +02:00
Ali 4d3b5ceb99 chore: bump version to 2.45.0 (#3497) 2026-08-18 17:41:06 +12:00
andres-portainer 4250f22c10 fix(unpacker): add private registry support for compose-unpacker BE-13192 (#3485) 2026-08-17 10:13:28 -03:00
Devon Steenberg 3df3a2d44d fix(docker): correctly trim version for proxy requests [BE-13269] (#3296) 2026-08-17 15:13:19 +12:00
Steven Kang 7a39730087 feat(kubernetes): add manifest dry-run api [R8S-1111] (#3446) 2026-08-17 11:22:28 +12:00
andres-portainer b1993042c6 fix(docker): improve bind mount restrictions BE-12548 (#3482) 2026-08-15 01:17:56 -03:00
andres-portainer 119f481f03 fix(gitops): detach orphaned stack/edgestack artifacts BE-13300 (#3470) 2026-08-14 20:41:05 -03:00
andres-portainer a9020198f0 perf(datastore): use batching in the hot path BE-13247 (#3468) 2026-08-14 19:57:52 -03:00
andres-portainer 0a5c7c1e21 fix(filesystem): use safer path handling functions BE-13308 (#3480) 2026-08-14 19:39:01 -03:00
LP B 017e58f514 feat(api/stacks): remove unused builder setGeneralInfo param (#3383) 2026-08-14 14:11:10 +02:00
Xing 1ac21e4c13 fix(kubernetes): return 403 instead of 500 on RBAC authorization denials [C9S-344] (#3479) 2026-08-14 18:54:37 +12:00
Devon Steenberg 7a10f6f39e feat(edge): set edge compute settings on initial setup [BE-13281] (#3385) 2026-08-13 10:35:10 +12:00
andres-portainer aaf229380f feat(useractivity): parse the forwarded IP address from trusted proxies BE-12868 (#3441) 2026-08-12 14:10:49 -03:00
Steven Kang ecb352db9c feat(kubernetes): add native secret and configmap write apis [R8S-1110] (#3379)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-12 10:21:43 +12:00
andres-portainer ac7587a971 fix(docker): clean up multipart temp files after successful build upload BE-13313 (#3397) 2026-08-11 11:40:54 -03:00
LP B b37604c254 feat(api/slicesx): slicesx.Reduce (#3382) 2026-08-11 13:59:46 +02:00
Cara Ryan 359b3c5dc1 fix(websocket): set pod exec query params [C9S-353] (#3423)
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-08-11 13:33:39 +12:00
Cara Ryan d4eea31e91 fix(rbac): Switch to users service account for k8s rbac where admin is incorrect [C9S-342] (#3386) 2026-08-11 12:43:53 +12:00
andres-portainer 3b5bcd0f35 fix(stacks): use tx instead of DataStore in Kubernetes stack update BE-13315 (#3414) 2026-08-10 20:48:03 -03:00
Cara Ryan b80c6b4765 fix(kubernetes): Reload admin token for local k8s environments every 30s [C9S-362] (#3405)
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-08-10 14:38:34 +12:00
Dakota Walsh 10b0a8f175 fix(rbac): Use discoveryv1 endpoints API on backend (#3388)
Co-authored-by: Bernard Setz <bernard.setz@portainer.io>
2026-08-10 13:26:54 +12:00
Chaim Lev-Ari 4097b69bcf feat(gitops/workflows): add the edit workflow wizard [BE-13183] (#3300)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: andres-portainer <91705312+andres-portainer@users.noreply.github.com>
Co-authored-by: LP B <xAt0mZ@users.noreply.github.com>
2026-08-07 18:23:47 +02:00
andres-portainer a8fc3585b4 fix(workflows): clean up stale environment/edge group references BE-13305 (#3365) 2026-08-07 12:00:38 -03:00
Steven Kang 567511d738 feat(kubernetes): add native deployment and pvc write apis [R8S-1110] (#3378)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-07 16:57:05 +12:00
andres-portainer e957e11c24 perf(endpointedge): avoid slice allocation when parsing If-None-Match BE-13247 (#3406) 2026-08-07 01:03:57 -03:00
andres-portainer 363f6537f3 fix(middlewares): forward ErrAbortHandler instead of logging it as a panic BE-13294 (#3366) 2026-08-06 17:35:56 -03:00
andres-portainer 315f8b674a fix(deps): replace dchest/uniuri with librand.String BE-13306 (#3377) 2026-08-06 09:48:08 -03:00
bernard-portainer 6af854dfbc fix(nodeShell): detect bash shell [C9S-298] (#3328) 2026-08-06 13:46:58 +12:00
Xing c58edcb81f fix(kubernetes): scope pod delete and restart to the user's rbac client (CE) [C9S-355] (#3376) 2026-08-05 14:39:27 +12:00
andres-portainer ff9dd45bc0 fix(deps): replace orcaman/concurrent-map with stdlib sync.Map BE-13306 (#3372) 2026-08-04 23:10:37 -03:00
Oscar Zhou 1ff35385a6 fix(teams): preserve user direct access when deleting a team [BE-13303] (#3356) 2026-08-05 12:25:33 +12:00
Xing 935b1d42d0 test(kubernetes): add rbac test coverage for pv listing [C9S-343] (#3350) 2026-08-05 12:10:41 +12:00
Xing 5d4dbb5a67 feat(kubernetes): advanced node drain options with agent failover [C9S-334] (#3346) 2026-08-05 12:09:44 +12:00
andres-portainer b2009d1937 chore(gitops): increase coverage BE-13171 (#3314) 2026-08-04 16:26:28 -03:00
Oscar Zhou 66289f9a22 fix(stacks): reconcile swarm stack status after recovery [BE-13214] (#3317) 2026-08-03 09:26:16 +12:00
Chaim Lev-Ari 7bfc542c50 refactor(edgestacks): move update machinery into the service [BE-13183] (#3301)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: andres-portainer <91705312+andres-portainer@users.noreply.github.com>
2026-08-02 14:40:00 +03:00
andres-portainer 2cd35f0b22 fix(gitops): resolve shared git credentials in git operations everywhere BE-13282 (#3330) 2026-07-30 09:11:19 +12:00
andres-portainer b7fea4342a fix(sources): allow non-owners with read access to persist source sync status BE-13284 (#3329) 2026-07-29 17:47:15 -03:00
Chaim Lev-Ari 42ea6a53e5 fix(datastore): skip missing stacks in 2.44.0 source-interval migration [BE-13277] (#3323) 2026-07-28 10:38:01 -03:00
Cara Ryan 459d526a66 chore: bump version to 2.44.0 (#3313) 2026-07-28 11:02:19 +12:00
andres-portainer 3e65adb608 fix(stacks): fix delete/update race condition BE-13171 (#3277) 2026-07-27 18:41:58 -03:00
andres-portainer e08d15f221 fix(edgestacks): reset stale status on edge group reassignment BE-13141 (#3275) 2026-07-27 17:20:22 -03:00
andres-portainer c2d1dbbe15 fix(stacks): ensure consistent validation rules BE-12802 (#3274) 2026-07-27 12:55:49 -03:00
andres-portainer 7616319900 fix(edge): verify endpoint assignment for edge resources BE-13248 (#3280) 2026-07-27 09:09:23 -03:00
andres-portainer e178cd67bb feat(db): add rules to avoid some nested transactions BE-12617 (#3271) 2026-07-27 09:06:15 -03:00
andres-portainer 244b0d63fe fix(websocket): return accurate errors BE-13117 (#3276) 2026-07-27 08:59:57 -03:00
Chaim Lev-Ari 4c872de6fc refactor(gitops): remove read cache from sources and workflows handlers (#3283)
Co-authored-by: Claude <noreply@anthropic.com>
2026-07-27 08:17:59 +03:00
RHCowan 0852cf7f8f feat(addons): deny team access to Portainer, redirect to Portainer-Run [R8S-1192] (#3264) 2026-07-27 17:00:17 +12:00