v0.31.1

What's Changed

• fix(access-log): rewrite access.log in place on cleanup by @narcisonunez in #5885
• fix(schedules): prevent cron jobs from being lost on cloud by @imrja8 in #5542
• fix(terminal): close SSH sessions when the terminal WebSocket closes by @imrja8 in #5874
• fix(security): enforce org/role boundaries across routers, webhooks and auth by @Siumauricio in #5899
• fix(security): cross-organization notification hijack on self-hosted by @Siumauricio in #5925
• fix(security): registry password and deploy webhook token exposed to read-only roles by @Siumauricio in #5924
• fix(security): deployment history exposes registry passwords from rollback snapshots by @Siumauricio in #5923
• fix(security): mounts.update can attach a mount to another organization's service by @Siumauricio in #5920
• fix(security): missing authorization on deployment killProcess/readLogs/remove and compose.readLogs by @Siumauricio in #5917
• fix(security): cross-organization SSH key attachment in server create/update by @Siumauricio in #5916
• fix(security): cross-organization project/environment/service takeover via update, move and duplicate by @Siumauricio in #5915
• fix(security): user.update mass assignment of server-managed fields by @Siumauricio in #5914
• fix(security): getWebServerSettings leaks SSH private key to any user by @Siumauricio in #5913
• fix(security): database changePassword command injection (all 5 DB types) by @Siumauricio in #5910
• fix(security): file mount delete command injection (member → root) by @Siumauricio in #5907
• Update README.md by @Siumauricio in #5905
• fix(onboarding): unblock plan step after starting a trial by @Siumauricio in #5887
• fix(traefik): harden the Traefik update and rollback by @imrja8 in #5881
• fix(security): "Access to API" permission not enforced in user.createApiKey by @Siumauricio in #5964
• fix(security): SSRF via custom template baseUrl for any authenticated user by @Siumauricio in #5966
• fix(security): stored XSS via whitelabeling customCss sanitizer bypass by @Siumauricio in #5930
• fix(security): missing authorization on network management endpoints by @Siumauricio in #5967
• fix(security): schedule appName command injection (member → root) by @Siumauricio in #5906
• fix(security): compose composePath command injection by @Siumauricio in #5912
• fix(security): domain path injected unvalidated into Traefik router rule by @Siumauricio in #5918
• fix(security): path traversal via appName on the docker stats websocket by @Siumauricio in #5928
• fix(security): SSRF through notification webhook URLs by @Siumauricio in #5965
• fix(security): application build fields command injection (member → root) by @Siumauricio in #5911
• fix(security): volume backups can target volumes the service does not own by @Siumauricio in #5929
• fix(profile): enforce minimum password length on profile update by @DevChiniwala in #5969
• fix(security): services can use another organization's git providers, SSH keys and registries by @Siumauricio in #5927
• fix(security): vault provider masked secret can be sent to a new endpoint by @Siumauricio in #5926
• fix(security): sshKey.all/one disclose private keys to read-only roles by @Siumauricio in #5922
• fix(security): volume backup prefix/serviceName/appName command injection (member → root) by @Siumauricio in #5909
• fix(security): backup prefix/bucket/serviceName command injection (member → root) by @Siumauricio in #5908
• fix(server): remove duplicate shell-quote import in deployment service by @EgerDev in #5971
• fix(security): "Access to API" bypass through better-auth's native api-key endpoint by @Siumauricio in #5972
• bump version to v0.31.1 in package.json by @Siumauricio in #5970
• fix(security): scope host schedule reads and the deployment queue by @Siumauricio in #5980
• fix(security): refuse file mount and patch writes that escape through a symlink by @Siumauricio in #5977
• fix(security): restrict GitLab/Gitea OAuth connect to provider editors and add state by @Siumauricio in #5978
• fix(security): require service access to read application monitoring stats by @Siumauricio in #5979
• fix(security): guard AI provider requests against SSRF by @Siumauricio in #5976
• fix(security): only fetch metrics from the organization's monitoring endpoints by @Siumauricio in #5975
• fix(security): refuse changing the profile email to one with a pending invitation by @Siumauricio in #5981
• fix(security): members can't attach an existing Docker volume that isn't their service's by @Siumauricio in #5982
• fix(security): block sensitive host paths in bind mounts for members (member → host root) by @Siumauricio in #5919
• 🚀 Release v0.31.1 by @github-actions[bot] in #5973

New Contributors

• @DevChiniwala made their first contribution in #5969

Full Changelog: v0.31.0...v0.31.1