Commit Graph

903 Commits

Author SHA1 Message Date
饺子w (Yumechi)
2a485c9c9f doc(security): amend outdated security policy info 2026-07-09 17:42:35 +08:00
Jannis Mattheis
ed8af76a09 Merge pull request #990 from gotify/appid-spec
fix: appid spec
2026-07-06 10:15:57 +00:00
Jannis Mattheis
509707737a fix: appid spec
It's optional on POST, so not readonly and not required.
2026-07-05 20:36:18 +02:00
饺子w (Yumechi)
0fd65a075f Merge pull request #988 from gotify/sec-update-rekey
fixup! feat(security): application token refresh
2026-07-04 12:53:41 +00:00
Yumechi
5e81bed709 fix(security): check app ownership in security endpoint 2026-07-04 14:45:15 +02:00
饺子w (Yumechi)
89e1968374 Merge pull request #933 from gotify/renovate/vitejs-plugin-react-6.x
chore(deps): update dependency @vitejs/plugin-react to v6
2026-07-01 12:45:57 +00:00
renovate[bot]
3fb6708077 chore(deps): update dependency @vitejs/plugin-react to v6 2026-07-01 20:39:05 +08:00
饺子w (Yumechi)
85e6e653c9 Merge pull request #970 from gotify/renovate/npm-vitest-vulnerability
chore(deps): update dependency vitest to v4.1.0 [security]
2026-07-01 11:49:41 +00:00
renovate[bot]
704bd4f60b chore(deps): update dependency vitest to v4.1.0 [security] 2026-07-01 19:41:36 +08:00
饺子w (Yumechi)
d7403d4c0a Merge pull request #915 from gotify/renovate/bump-dependencies-npm
chore(deps): update bump npm dependencies
2026-07-01 11:28:22 +00:00
Yumechi
a053be7b8d chore(ci): exclude node_modules from golangci 2026-07-01 19:19:48 +08:00
renovate[bot]
9c4fc2ca3c chore(deps): update bump npm dependencies 2026-07-01 11:16:19 +00:00
饺子w (Yumechi)
102edbc1f6 Merge pull request #987 from gotify/renovate/major-react-router-monorepo
chore(deps): update dependency react-router to v8
2026-07-01 10:53:59 +00:00
Yumechi
a749402723 manual migration 2026-07-01 18:46:59 +08:00
renovate[bot]
22d5cb80ba chore(deps): update dependency react-router to v8 2026-07-01 10:18:10 +00:00
饺子w (Yumechi)
eb01ceacab Merge pull request #972 from gotify/renovate/npm-react-router-vulnerability
chore(deps): update dependency react-router to v7.15.1 [security]
2026-07-01 10:09:54 +00:00
Yumechi
36e3d15c9d bump package version 2026-07-01 18:03:17 +08:00
renovate[bot]
d35542a868 chore(deps): update dependency react-router to v7.15.1 [security] 2026-07-01 09:47:25 +00:00
饺子w (Yumechi)
0dc6af15ab Merge pull request #932 from gotify/renovate/bump-dependencies-go
chore(deps): update bump go dependencies
2026-07-01 09:31:43 +00:00
renovate[bot]
43f8c04648 chore(deps): update bump go dependencies 2026-07-01 09:03:55 +00:00
饺子w (Yumechi)
6fcdf956d9 Merge pull request #986 from gotify/sec-update-rekey
feat(security): application token refresh
2026-07-01 08:37:33 +00:00
Yumechi
2dfdee284a apply suggestions 2026-07-01 16:25:45 +08:00
Yumechi
13ebe86724 fixup: fix elevation test 2026-06-30 20:12:35 +08:00
Yumechi
52e2b6d764 fixup: go testify style 2026-06-30 19:52:27 +08:00
Yumechi
e7c55fdd92 fixup: lift token dialog 2026-06-30 19:49:24 +08:00
Yumechi
41cde67072 feat(security): application token refresh 2026-06-30 18:57:12 +08:00
饺子w (Yumechi)
e33d576ce9 Merge pull request #978 from gotify/renovate/npm-vite-vulnerability
chore(deps): update dependency vite to v8.0.16 [security]
2026-06-30 09:39:53 +00:00
renovate[bot]
57005f5d3c chore(deps): update dependency vite to v8.0.16 [security] 2026-06-30 09:04:13 +00:00
饺子w (Yumechi)
06b749894c Merge pull request #948 from gotify/renovate/npm-axios-vulnerability
chore(deps): update dependency axios to v1.16.0 [security]
2026-06-30 07:34:54 +00:00
renovate[bot]
e4018b44e2 chore(deps): update dependency golangci/golangci-lint to v2.12.2 (#958)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-29 14:30:31 +00:00
renovate[bot]
3101675639 chore(deps): update dependency fractional-indexing to v4 (#984)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-29 14:01:58 +00:00
renovate[bot]
ba8317ae18 chore(deps): update actions/checkout action to v7 (#979)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-29 12:15:17 +00:00
饺子w (Yumechi)
ad977d3d9c feat: EdDSA token for database leakage/index mitigation (#971)
* feat: EdDSA token for database leakage/index mitigation

* [skip ci]: remove token from api output

* fix: e2e tests

* fixup! fix: e2e tests

* doc: document tokens are now optional fields for app and aclient

* fixup(doc): swagger version again

* address review comments

* address review comments
2026-06-28 14:58:20 +00:00
Jannis Mattheis
8221c0b895 Merge pull request #982 from gotify/oidc-discover-algs
fix: discover oidc signing algs
2026-06-20 15:34:06 +02:00
Jannis Mattheis
7a95321bd5 fix: discover oidc signing algs 2026-06-20 15:13:15 +02:00
Jannis Mattheis
fe3e36635d Merge pull request #977 from gotify/oidc-link-user
OIDC link user by iss/sub
2026-06-20 14:21:42 +02:00
Jannis Mattheis
6229f36147 test: add e2e oidc test 2026-06-20 14:07:49 +02:00
Jannis Mattheis
bf6d8eee85 fix: map oidc user to iss/sub 2026-06-20 14:07:49 +02:00
Jannis Mattheis
3db7dbc429 Merge pull request #967 from gotify/env
Rework config parsing
2026-06-14 12:57:54 +02:00
Jannis Mattheis
14a83682d2 feat: add config migration 2026-06-14 12:44:50 +02:00
Jannis Mattheis
f67cf94f24 feat!: add cli
serving the server now requires the serve action
2026-06-14 12:44:48 +02:00
Jannis Mattheis
edfe99ee40 fix: add missing loglevel setting 2026-06-14 12:32:55 +02:00
Jannis Mattheis
74657db971 ci: load gotify-server.env.local for ui 2026-06-14 12:32:55 +02:00
Jannis Mattheis
b13080615c fix: default for oidc scopes 2026-06-14 12:32:55 +02:00
Jannis Mattheis
c5fc8b7f8c fix: don't ignore cors requests in dev mode
This will make testing easier, as it's more similar to the actual prod
deployment. We don't have to rewrite anything in vite, as the host and
origin is the same.
2026-06-14 12:32:55 +02:00
Jannis Mattheis
303bd05ab5 feat!: rework config parsing 2026-06-14 12:32:55 +02:00
Jannis Mattheis
67b65898fc Merge pull request #975 from gotify/reduce-renovate-spam
ci(renovate): don't automatically rebase PRs
2026-06-14 10:22:36 +02:00
Jannis Mattheis
eb7b1ecb79 ci(renovate): don't automatically rebase PRs 2026-06-14 10:22:08 +02:00
renovate[bot]
a4b62931f6 chore(deps): update dependency axios to v1.16.0 [security] 2026-06-13 19:20:24 +00:00
Jannis Mattheis
1b42270f6d Merge pull request #973 from gotify/renovate/codecov-codecov-action-7.x
chore(deps): update codecov/codecov-action action to v7
2026-06-13 21:19:23 +02:00