vvzvlad
9e9bb1bbff
ci: install client deps with --no-frozen-lockfile explicitly
...
Build image / build (push) Waiting to run
pnpm ignores the npm_config_frozen_lockfile env var, so the previous fix did not take effect and CI still ran a frozen install. Add an explicit 'pnpm install --no-frozen-lockfile' step before 'make build-all' to reconcile the lockfile (missing pnpmfileChecksum for configDependencies); the subsequent frozen install in 'make client-deps' then succeeds.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-28 19:21:11 +03:00
vvzvlad
d0a0395337
ci: disable pnpm frozen-lockfile in build workflow
...
CI enables --frozen-lockfile by default, which fails with ERR_PNPM_LOCKFILE_CONFIG_MISMATCH because the committed pnpm-lock.yaml does not record the pnpmfileChecksum for the configDependencies declared in package.json. Set npm_config_frozen_lockfile=false so the bare 'pnpm install' run by 'make client-deps' reconciles the lockfile instead of failing.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-28 19:18:59 +03:00
vvzvlad
88589e4cb3
ci: add GitHub Actions workflow to build and publish fork image to GHCR
...
Builds the CE fork (frontend + Go server) and publishes a drop-in compatible image to ghcr.io/vvzvlad/portainer-ce on pushes to develop, v* tags, and manual dispatch. Single-arch linux/amd64, alpine base, production frontend build (ENV=production), tags <package.json version> and latest, GHCR auth via the built-in GITHUB_TOKEN.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-28 19:14:36 +03:00
vvzvlad
af74986e66
chore: add VS Code workspace file
2026-06-28 18:55:18 +03:00
andres-portainer
e664bf0e19
fix(helm): add missing SSRF protections BE-13136 ( #3001 )
2026-06-22 20:25:10 -03:00
nickl-portainer
152c89972b
chore(eslint): update eslint to latest v9 [R8S-1090] ( #2954 )
2026-06-23 11:04:33 +12:00
Oscar Zhou
25c69c6e9b
fix(ui): update server installation timeout redirect link [BE-13124] ( #2991 )
2026-06-23 08:49:43 +12:00
andres-portainer
a6370808ae
fix(ssrf): disable HTTP/2 for some specific cases BE-13121 ( #2996 )
2026-06-22 16:13:43 -03:00
Chaim Lev-Ari
6bfd2360d8
docs(security): add FAQ link to setup token messages [BE-13125] ( #2995 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-22 20:30:49 +03:00
Chaim Lev-Ari
872d1e03f6
feat(gitops): add "create new source" button to GitSourceSelector [BE-13054] ( #2960 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-22 17:19:53 +03:00
Chaim Lev-Ari
a5cacd712d
refactor(gitops): remove manual credential entry from git form [BE-13047] ( #2951 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-22 15:42:09 +03:00
Phil Calder
f596c862b3
fix(websocket): enforce environment authorization on kubernetes-shell [BE-13027] ( #2774 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
Co-authored-by: oscarzhou <oscar.zhou@portainer.io >
2026-06-22 15:09:41 +12:00
bernard-portainer
5395dee4c6
feat(gpu-stats): add gpu stats to environments [C9S-200] ( #2735 )
2026-06-22 09:21:43 +12:00
Josiah Clumont
217fe870ef
fix(git): use ListContext instead of List when fetching remote refs [C9S-263] ( #2939 )
2026-06-22 08:30:20 +12:00
andres-portainer
26334e9088
feat(ssrf): add missing transport wrappings and more checks BE-13021 ( #2968 )
2026-06-19 20:26:03 -03:00
RHCowan
cc45af2873
fix(lint): enforce consistent golangci-lint version across CI and pre-commit [PLA-777] ( #2966 )
2026-06-19 11:45:12 +12:00
RHCowan
37bd8c06b5
fix(security): gate docker dashboard and edge async command routes [R8S-1057] ( #2953 )
2026-06-19 11:08:01 +12:00
andres-portainer
c821a1c59f
fix(git): avoid cloning to memory and bypassing symlinking restriction BE-13115 ( #2961 )
2026-06-18 16:21:09 -03:00
Dakota Walsh
f5d0b3d849
feat(kubernetes): Gateway api client included in kubeclient [C9S-244] ( #2884 )
2026-06-18 14:37:42 +12:00
nickl-portainer
0dfd27f08c
fix(pnpm): pnpm format command failing [R8S-1071] ( #2932 )
2026-06-18 13:27:01 +12:00
nickl-portainer
0dfa0266c7
fix(webpack): update shell-quote [R8S-1074] ( #2934 )
2026-06-17 10:50:48 +12:00
nickl-portainer
9b807ca314
fix(axios): update axios [R8S-1075] ( #2935 )
2026-06-17 10:50:34 +12:00
nickl-portainer
de5d84ade4
fix(kubernetes): handling undefined responseStatus [R8S-1072] ( #2933 )
2026-06-17 09:32:59 +12:00
Chaim Lev-Ari
4d539a691d
feat(custom-templates): reuse existing git sources in create/update [BE-13053] ( #2925 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-16 21:45:35 +03:00
Chaim Lev-Ari
ee8e73d7f9
feat(edge/stacks): use source ID for edge stack git creation [BE-13044] ( #2926 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-16 17:33:19 +03:00
Chaim Lev-Ari
32c6bedb98
feat(stacks): use source for kubernetes manifest git stacks [BE-13045] ( #2915 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-16 14:35:16 +03:00
Ali
cd9bb18ba1
feat(policies): reuse filter status component, give consistent styles [c9s-210] ( #2723 )
2026-06-16 15:58:33 +12:00
nickl-portainer
f365035563
fix(git): update lint-staged to v17 [R8S-1071] ( #2907 )
2026-06-16 15:14:57 +12:00
Chaim Lev-Ari
d9673e33ec
feat(helm): reuse existing git sources in Kubernetes Helm-from-git install [BE-13046] ( #2900 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-15 22:01:31 +03:00
Chaim Lev-Ari
491df61fbf
chore(hey-api): disable api validator [BE-13102] ( #2918 )
2026-06-15 21:35:19 +03:00
Chaim Lev-Ari
ca1d9dc6a2
fix(edge/stacks): load envs by id [BE-13097] ( #2917 )
2026-06-15 21:23:49 +03:00
andres-portainer
16b5554f66
fix(customtemplates): add resource controls BE-13019 ( #2897 )
2026-06-15 14:59:07 -03:00
Chaim Lev-Ari
fcdd6b4510
feat(stacks): use source id to create git stacks [BE-13043] ( #2870 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-15 18:49:26 +03:00
Chaim Lev-Ari
04048c3818
fix(api): update environment status field to be optional [BE-13070] ( #2847 )
2026-06-15 13:36:12 +03:00
Chaim Lev-Ari
1afbc621a4
fix(editor): restore yaml syntax highlighting in web editor [BE-13073] ( #2848 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-15 10:50:02 +03:00
Devon Steenberg
ef807950f1
fix(compose-unpacker): port swarm commands to use libstack [BE-12915] ( #2890 )
2026-06-15 11:43:29 +12:00
Phil Calder
d37f3aa504
chore(server-ce): update Code of Conduct contact to contribute@portainer.io ( #2889 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-14 12:44:41 +12:00
Oscar Zhou
39b3eb3d64
fix(registry): standard user with access permission cannot browse and delete private images [BE-13072] ( #2877 )
2026-06-13 19:52:03 +12:00
Devon Steenberg
8b21dfc318
feat(ssrf): add ssrf allow list to settings [BE-13021] ( #2858 )
2026-06-12 15:16:06 +12:00
Steven Kang
f87fec6d61
fix(omni): prevent partial cluster creation on Talos/Kubernetes mismatch [R8S-1058] ( #2849 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-12 11:50:16 +12:00
Ali
391eb22d98
fix(ui): ui consistency and bug fixes [r8s-1061] ( #2880 )
2026-06-12 11:49:45 +12:00
andres-portainer
0da42c01b6
feat(gitcredential): remove GitCredential BE-12919 ( #2838 )
2026-06-11 18:53:24 -03:00
Cara Ryan
f3f0ca8e21
fix(rbac): Filter get namespace by allowed namespace list [SEC-61] ( #2743 )
2026-06-11 15:51:32 +12:00
RHCowan
96dc79e253
feat(alerting): add Kubernetes API server high request latency alert [R8S-1049] ( #2765 )
...
Co-authored-by: Steven Kang <skan070@gmail.com >
2026-06-11 15:44:33 +12:00
Xing
ac3416c5a2
feat(policies): define ObservabilityK8s policy type with deploy-and-connect and connect-only modes [C9S-121] ( #2706 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-11 15:09:33 +12:00
Cara Ryan
ade5b2a3db
feat(rbac): Add toggle for additive kubernetes RBAC policy [C9S-177] ( #2814 )
2026-06-11 13:44:43 +12:00
Steven Kang
1cd6017df6
fix(api): add endpoint authorization check to /api/kubernetes/{id}/* route - develop [R8S-1056] ( #2829 )
2026-06-11 09:49:50 +12:00
Oscar Zhou
06caea7b16
fix(security): bump golang to 1.26.4 [DEV-91] ( #2866 )
2026-06-11 09:31:35 +12:00
Oscar Zhou
114779d3af
fix(security): bump go-git/v5 to 5.19.1 [DEV-92] ( #2863 )
2026-06-11 09:31:07 +12:00
nickl-portainer
96d694b66b
fix(storybook): add row id for example data for datatable story [R8S-1062] ( #2856 )
2026-06-11 09:10:29 +12:00