What's Changed
- fix(access-log): rewrite access.log in place on cleanup by @narcisonunez in #5885
- fix(schedules): prevent cron jobs from being lost on cloud by @imrja8 in #5542
- fix(terminal): close SSH sessions when the terminal WebSocket closes by @imrja8 in #5874
- fix(security): enforce org/role boundaries across routers, webhooks and auth by @Siumauricio in #5899
- fix(security): cross-organization notification hijack on self-hosted by @Siumauricio in #5925
- fix(security): registry password and deploy webhook token exposed to read-only roles by @Siumauricio in #5924
- fix(security): deployment history exposes registry passwords from rollback snapshots by @Siumauricio in #5923
- fix(security): mounts.update can attach a mount to another organization's service by @Siumauricio in #5920
- fix(security): missing authorization on deployment killProcess/readLogs/remove and compose.readLogs by @Siumauricio in #5917
- fix(security): cross-organization SSH key attachment in server create/update by @Siumauricio in #5916
- fix(security): cross-organization project/environment/service takeover via update, move and duplicate by @Siumauricio in #5915
- fix(security): user.update mass assignment of server-managed fields by @Siumauricio in #5914
- fix(security): getWebServerSettings leaks SSH private key to any user by @Siumauricio in #5913
- fix(security): database changePassword command injection (all 5 DB types) by @Siumauricio in #5910
- fix(security): file mount delete command injection (member → root) by @Siumauricio in #5907
- Update README.md by @Siumauricio in #5905
- fix(onboarding): unblock plan step after starting a trial by @Siumauricio in #5887
- fix(traefik): harden the Traefik update and rollback by @imrja8 in #5881
- fix(security): "Access to API" permission not enforced in user.createApiKey by @Siumauricio in #5964
- fix(security): SSRF via custom template baseUrl for any authenticated user by @Siumauricio in #5966
- fix(security): stored XSS via whitelabeling customCss sanitizer bypass by @Siumauricio in #5930
- fix(security): missing authorization on network management endpoints by @Siumauricio in #5967
- fix(security): schedule appName command injection (member → root) by @Siumauricio in #5906
- fix(security): compose composePath command injection by @Siumauricio in #5912
- fix(security): domain path injected unvalidated into Traefik router rule by @Siumauricio in #5918
- fix(security): path traversal via appName on the docker stats websocket by @Siumauricio in #5928
- fix(security): SSRF through notification webhook URLs by @Siumauricio in #5965
- fix(security): application build fields command injection (member → root) by @Siumauricio in #5911
- fix(security): volume backups can target volumes the service does not own by @Siumauricio in #5929
- fix(profile): enforce minimum password length on profile update by @DevChiniwala in #5969
- fix(security): services can use another organization's git providers, SSH keys and registries by @Siumauricio in #5927
- fix(security): vault provider masked secret can be sent to a new endpoint by @Siumauricio in #5926
- fix(security): sshKey.all/one disclose private keys to read-only roles by @Siumauricio in #5922
- fix(security): volume backup prefix/serviceName/appName command injection (member → root) by @Siumauricio in #5909
- fix(security): backup prefix/bucket/serviceName command injection (member → root) by @Siumauricio in #5908
- fix(server): remove duplicate shell-quote import in deployment service by @EgerDev in #5971
- fix(security): "Access to API" bypass through better-auth's native api-key endpoint by @Siumauricio in #5972
- bump version to v0.31.1 in package.json by @Siumauricio in #5970
- fix(security): scope host schedule reads and the deployment queue by @Siumauricio in #5980
- fix(security): refuse file mount and patch writes that escape through a symlink by @Siumauricio in #5977
- fix(security): restrict GitLab/Gitea OAuth connect to provider editors and add state by @Siumauricio in #5978
- fix(security): require service access to read application monitoring stats by @Siumauricio in #5979
- fix(security): guard AI provider requests against SSRF by @Siumauricio in #5976
- fix(security): only fetch metrics from the organization's monitoring endpoints by @Siumauricio in #5975
- fix(security): refuse changing the profile email to one with a pending invitation by @Siumauricio in #5981
- fix(security): members can't attach an existing Docker volume that isn't their service's by @Siumauricio in #5982
- fix(security): block sensitive host paths in bind mounts for members (member → host root) by @Siumauricio in #5919
- 🚀 Release v0.31.1 by @github-actions[bot] in #5973
New Contributors
- @DevChiniwala made their first contribution in #5969
Full Changelog: v0.31.0...v0.31.1