e62dcdddf2
chore(release): version bump 2.33.8 ( #2581 )
2026-05-07 09:49:24 +12:00
d40462b756
fix(docker): add missing restrictions for Swarm BE-12772 ( #2561 )
2026-05-05 11:35:29 -03:00
d0018ce373
fix(docker): add more bind mount restriction checks BE-12771 ( #2553 )
2026-05-05 09:25:32 -03:00
b1d0f4708b
chore(deps): remediate CVE-affected Go modules across agents, servers… - release 2.33.8 [R8S-1001] ( #2543 )
2026-05-05 12:47:58 +12:00
8a46572174
fix(datastore): change EnforceEdgeID default to true BE-12925 ( #2549 )
2026-05-04 13:07:14 -03:00
6ea3e22cc3
fix(docker): enforce bind mount restrictions for Mounts field BE-12770 ( #2529 )
2026-05-04 13:05:46 -03:00
a33cc4886a
fix(git): forbid the usage of symlinks BE-12768 ( #2533 )
2026-05-04 12:57:08 -03:00
26f5a94546
fix(security): backport k8s, archive, and boltdb fixes [BE-12928] ( #2526 )
...
Co-authored-by: andres-portainer <andres-portainer@users.noreply.github.com >
2026-05-01 11:27:11 -03:00
b410694307
fix(api/docker): deny plugin related changes to regular users ( #2298 )
2026-04-20 17:08:28 +02:00
27c04caa27
fix(websocket): remove the JWT token query string parameter BE-12833 ( #2335 )
2026-04-16 14:10:11 -03:00
97c8553e20
fix(api/custom_template): validate UAC when retrieving custom template file ( #2300 )
2026-04-14 14:24:12 +02:00
379f4c3147
chore: bump version to 2.33.7 ( #1832 )
2026-02-10 09:48:08 +13:00
1f20add37f
fix(edgestack): EntryFileName not found [BE-12499] ( #1705 )
2026-01-22 08:44:04 +13:00
9f0facc0f3
chore(build): migrate to pnpm ( #1577 )
2025-12-30 11:42:33 +02:00
a622122486
fix(edgegroups): fix a nil pointer dereference BE-12487 ( #1574 )
2025-12-29 15:06:06 -03:00
6f9ddd47de
fix(swarm): stack deployments [BE-12478] ( #1547 )
...
This commit https://github.com/docker/cli/commit/9b9d103b297cdff32e35dde771c8c392c7caabeb , introduced in docker 29, changed the behaviour of how the --tlsXXX flags are handled. Before this change leading and trailing quotes would be stripped. This meant that an invalid path that we were passing for the tls ca cert was being cleaned up to be an empty string. To preserve the old behaviour we now pass an empty string.
2025-12-17 13:23:34 +13:00
9507cf9d8b
chore: version bump 2.33.6 ( #1541 )
2025-12-16 08:40:59 +09:00
0a3e13915c
fix(stack): stack start failed with private image [BE-12464] ( #1529 )
2025-12-12 11:00:28 +13:00
4eb1c7b11f
fix(stack/remote): fail to pull image in stack with relative path enabled [BE-12237] ( #1499 )
2025-12-10 08:31:08 +13:00
3afedce570
fix(api): do not give away information on error ( #1497 )
2025-12-08 16:50:10 -03:00
11f612a501
chore: version bump 2.33.5 ( #1448 )
2025-11-27 08:03:27 +09:00
cb8d8fcfd6
fix(snapshot): prevent from returning SnapshotRaw data [BE-12431] ( #1443 )
2025-11-26 12:56:55 +13:00
22bb1e604d
fix(docker): bump docker max api version [BE-12399] ( #1405 )
2025-11-21 15:28:17 +13:00
970b135261
chore: version bump 2.33.4 ( #1419 )
2025-11-20 10:16:25 +13:00
d98eb77067
chore: version bump 2.33.3 ( #1351 )
2025-10-30 11:47:33 +13:00
32926aa8bf
fix: add web socket headers for kubeconfig based access - 2.33.3 [r8s-592] ( #1329 )
2025-10-22 09:44:46 +13:00
fd6d74602c
feat(boltdb): attempt to compact using a read-only database BE-12287 ( #1268 )
2025-09-30 19:10:16 -03:00
7450501b7a
chore: version bump 2.33.2 ( #1257 )
2025-09-25 14:29:28 +12:00
dcfe2d9809
feat(database): add a flag to compact on startup BE-12283 ( #1256 )
2025-09-24 18:43:54 -03:00
732337615e
fix(edgestacks): add a missing webhook uniqueness check BE-12219 ( #1251 )
2025-09-23 17:20:25 -03:00
6ea16c0060
fix(api/endpoints): edge stack status type filter no longer always include Pending envs ( #1230 )
2025-09-22 16:10:46 +02:00
68b9fef3f0
fix(kubernetes/cli): fix a data-race BE-12259 ( #1227 )
2025-09-18 10:22:29 -03:00
405ce8f671
feat(edge): add option to allow always clone git repository [BE-12240] ( #1207 )
2025-09-17 18:25:47 +12:00
e9d31b3b7b
fix(csp): update the Content-Security-Policy header BE-12228 ( #1202 )
2025-09-15 10:47:57 -03:00
f97adc94ad
fix(api/custom-templates): UAC-allowed users cannot fetch custom template details ( #1199 )
2025-09-12 15:38:58 +02:00
11d6341765
fix(encryption): set correct default secret key path release [r8s-555] ( #1184 )
...
Co-authored-by: Gorbasch <57012534+mbegerau@users.noreply.github.com >
2025-09-11 16:32:52 +12:00
c3cf46b0e0
fix(auth): remove a nil pointer dereference BE-12149 ( #1174 )
2025-09-10 21:55:19 -03:00
ff746beba1
fix(csp): add google.com to the CSP header BE-12228 ( #1176 )
2025-09-10 15:01:00 -03:00
da1672fc17
fix(api): standard users cannot connect or disconnect containers to networks ( #1166 )
2025-09-09 22:07:24 +02:00
7a9376cbaf
fix(helm): update helm repo validation to match helm cli [r8s-531] ( #1142 )
2025-09-08 08:55:57 +12:00
c0f6410d80
fix(fips): encrypt the chisel private key file for fips [be-12132] ( #1149 )
2025-09-05 13:17:23 +12:00
4b9ab98fd2
fix(git): add a minimum interval validation BE-12220 ( #1145 )
2025-09-04 15:11:24 -03:00
3354ee4e4b
fix(registries): clear sensitive fields in the update handler BE-12215 ( #1129 )
2025-09-03 10:41:27 -03:00
af3c45bea0
chore: version bump 2.33.1 ( #1108 )
2025-08-27 10:45:29 +12:00
e86ea22900
fix(sslflags): Deprecate ssl flags [BE-12168] ( #1076 )
2025-08-25 20:25:07 +12:00
12b2acbc00
fix(standard): manual endpoint refresh fails to save new status [be-12188] ( #1096 )
2025-08-25 13:49:04 +12:00
4a8b42928e
fix(environments): create k8s specific edge agent before connecting [r8s-438] ( #1086 )
...
Merging because this change is unrelated to the failing kubernetes/tests/helm-oci.spec.ts tests
2025-08-25 09:32:16 +12:00
debf1a742b
chore: version bump 2.33.0 ( #1065 )
2025-08-20 11:28:05 +12:00
974682bd98
chore: version bump to 2.33.0-rc2 ( #1054 )
2025-08-19 11:04:56 +12:00
4169b045fb
fix(api/edge-stacks): avoid overriding updates with old values ( #1048 )
2025-08-16 03:52:21 +02:00
Steven Kang
andres-portainer
Oscar Zhou
LP B
Chaim Lev-Ari
Devon Steenberg
Malcolm Lockyer
Ali