coolify

nprasad2077/coolify

1 Fork 0

mirror of https://github.com/coollabsio/coolify.git synced 2026-11-04 10:42:23 +00:00

Files

T

Andras Bacsai f95ddd97fa fix: enforce webhook lockouts and stop cancelled runner provisioning

- Manual webhooks (GitHub, GitLab, Gitea, Bitbucket) now reject all
  deliveries for a locked-out scope before reading secrets or verifying
  signatures, including correctly signed ones, until the window expires.
- ProvisionGithubRunnerJob checks whether the execution has already
  finished before and after each provisioning step, and only sets
  ready_at or Failed while it is still occupying/provisioning. A runner
  that is cancelled, timed out or completed mid-provisioning is no longer
  started, retried or overwritten.
- VolumeCloneJob creates bind-volume clones as plain local volumes
  without the source driver options, so the clone never mounts the
  source host directory.
- Image pulls for additional servers no longer ignore docker pull errors.
- Add tests for each change.

2026-10-02 18:24:52 +02:00

Api

fix(api): return JSON validation errors and reject unknown fields on PATCH /team

2026-10-02 16:01:00 +02:00

Webhook

fix: enforce webhook lockouts and stop cancelled runner provisioning

2026-10-02 18:24:52 +02:00

Controller.php

refactor(events): broadcast team events to an explicit team

2026-09-29 10:46:16 +02:00

OauthController.php

fix(auth): show specific error messages for denied OAuth logins