Stavros
996316b524
chore: remove gateway extractors
2026-09-21 14:19:05 +03:00
Stavros
90e898abbf
Merge branch 'main' into feat/k8s_gateways
2026-09-21 14:11:52 +03:00
4341445290
chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.0 ( #1146 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-20 21:29:55 +03:00
856c9b3d5b
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.43.0 to 1.45.0 ( #1142 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-20 21:29:14 +03:00
a10b24dfe0
chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 ( #1138 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-20 21:28:54 +03:00
Stavros
34456b94b1
chore: add missing acls service modification for domain normalization
2026-09-20 21:22:56 +03:00
Stavros and Codex
45e165f742
tests: add tests for kubernetes service and extractors
...
Co-authored-by: Codex <noreply@openai.com >
2026-09-20 21:21:36 +03:00
Stavros
b43cf76d9b
refactor: use typed objects for kubernetes
2026-09-20 21:07:06 +03:00
Stavros
5a685c4a6b
Merge branch 'main' into feat/k8s_gateways
2026-09-20 18:51:23 +03:00
653b747829
chore(deps): bump the minor-patch group in /frontend with 6 updates ( #1121 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-07 20:03:52 +03:00
ba79a30f2e
chore(deps): bump the minor-patch group with 3 updates ( #1120 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-07 20:03:34 +03:00
Stavros
8c5094bbcd
chore: remove instapods sponsor
2026-09-07 19:59:50 +03:00
c28d9fe55e
chore(deps): bump the minor-patch group in /frontend with 3 updates ( #1117 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-06 20:00:12 +03:00
Stavros and GitHub
f58a6dccf5
New Crowdin updates ( #1118 )
2026-09-06 19:59:49 +03:00
Stavros and OpenAI
0cf64e8598
fix: use constant-time secret comparisons
...
Co-Authored-By: OpenAI <noreply@openai.com >
2026-09-06 19:56:58 +03:00
b61fc6b54e
chore(deps): bump the minor-patch group across 1 directory with 3 updates ( #1116 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 12:15:04 +03:00
Stavros and GitHub
bbcc8cafa6
feat: add backoff to docker connection for proxies ( #1114 )
2026-09-03 12:14:30 +03:00
b63a6917fe
chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 ( #1111 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stavros <steveiliop56@gmail.com >
2026-09-01 16:08:10 +03:00
59116f7344
chore(deps): bump the minor-patch group in /frontend with 3 updates ( #1112 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-01 16:07:18 +03:00
97eb1efb0e
chore(deps): bump node from 26.7-alpine3.23 to 26.8-alpine3.23 ( #1106 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-01 16:06:58 +03:00
Stavros
1112d84667
fix: use retries in e2e tests and increase timeouts
2026-09-01 16:04:04 +03:00
Stavros and GitHub
b01f49cc44
refactor: use optimized image for background ( #1110 )
2026-09-01 00:18:35 +03:00
11ba687dd6
chore(deps): bump the minor-patch group with 2 updates ( #1107 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 16:14:35 +03:00
7e1d9fce6d
chore(deps): bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 ( #1108 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 16:14:13 +03:00
fb07d2efda
chore(deps): bump the minor-patch group across 1 directory with 10 updates ( #1109 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 16:13:52 +03:00
Stavros and GitHub
88901d342f
fix: consent screen skip status should get checked after auth ( #1099 )
2026-08-30 20:09:41 +03:00
Stavros
4bb766997b
chore: remove dosu from sponsors
2026-08-25 17:16:50 +03:00
Stavros
5de4e8e23e
chore: disable e2e tests for now
2026-08-25 17:12:24 +03:00
306d91f00a
chore(deps): bump the minor-patch group across 1 directory with 8 updates ( #1095 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-25 17:11:38 +03:00
bd5a727492
chore(deps): bump the minor-patch group with 3 updates ( #1091 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-25 17:10:57 +03:00
640354fedd
chore(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8 ( #1092 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-25 17:10:27 +03:00
Stavros and GitHub
847d8325c7
fix: auth module selection ( #1089 )
2026-08-25 17:07:56 +03:00
Stavros and GitHub
be48d712ee
feat: support for custom claims in oauth ( #1087 )
2026-08-22 19:58:05 +03:00
b541b612c5
chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 ( #1085 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stavros <steveiliop56@gmail.com >
2026-08-21 21:11:58 +03:00
d7f35615c1
chore(deps): bump @hookform/resolvers from 5.8.0 to 5.9.0 in /frontend in the minor-patch group ( #1084 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-21 21:11:24 +03:00
eba6a2ce90
chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in the minor-patch group ( #1086 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-21 21:05:04 +03:00
Contre and Claude Sonnet 4.6
e1b1e722e7
fix(acl): only let a label provider define ACLs for domains it routes
...
The app name fallback matches any domain that starts with the app name,
so an app named myapp served on myapp.example.com also defined the ACLs
of myapp.evil.com. Behind a proxy with a catch-all route, a request can
be authorized against the wrong app that way.
Label providers now receive the domain being authorized. The Kubernetes
provider keeps the hosts of every Ingress, HTTPRoute and GRPCRoute it
watches and withholds the apps of the resources that do not route the
domain, which bounds the name fallback to the hosts a resource actually
serves. Wildcard hostnames keep matching as a suffix, so nested
subdomains stay resolvable by app name.
Container labels carry no routing information, so the Docker provider
cannot narrow its results down and keeps yielding every app.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-08-19 12:18:02 +02:00
Contre and Claude Sonnet 4.6
3a216e95e2
Merge branch 'main' into feat/k8s_gateways
...
Reapply the Gateway API support on top of the KubernetesService rework
from main, which moved the service to ding-managed watchers and a
Lookup based LabelProvider, and started requiring an app to match a host
the resource actually routes.
Ingresses declare their hosts in spec.rules[].host while HTTPRoutes and
GRPCRoutes use spec.hostnames, so host extraction is now dispatched per
resource kind. Route hostnames may carry the Gateway API wildcard label,
which is matched as a suffix, and routes without hostnames are skipped
since the hosts of the gateway listeners they attach to cannot be
resolved from the route alone.
The cache key gains the resource kind because an Ingress and an
HTTPRoute may share a name within a namespace, and the catch-all path
warning is extended to HTTPRoute path matches.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-08-19 12:03:13 +02:00
3e25c6af46
chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 ( #1079 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stavros <steveiliop56@gmail.com >
2026-08-18 20:14:45 +03:00
296c7110c6
chore(deps): bump pnpm/action-setup from 6.0.9 to 6.0.10 ( #1077 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stavros <steveiliop56@gmail.com >
2026-08-18 20:14:38 +03:00
a62e946988
chore(deps): bump the minor-patch group with 5 updates ( #1081 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 19:59:22 +03:00
d933ff3905
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 ( #1076 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stavros <steveiliop56@gmail.com >
2026-08-18 19:58:15 +03:00
e993202a0b
chore(deps): bump docker/setup-docker-action from 5.3.0 to 5.4.0 ( #1075 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stavros <steveiliop56@gmail.com >
2026-08-18 19:58:02 +03:00
275a63a942
chore(deps): bump the minor-patch group across 1 directory with 5 updates ( #1083 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 19:57:43 +03:00
a0a10cbc70
chore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 ( #1082 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 19:56:42 +03:00
Stavros and GitHub
0c47e68c09
feat: do not show oidc consent screen every time ( #989 )
2026-08-17 02:44:48 +03:00
Stavros and GitHub
61f65cfaa7
docs: add agents.md file ( #1071 )
2026-08-13 17:34:17 +03:00
Stavros and GitHub
46c8c58f45
fix: preserve query parameters for login ( #1068 )
2026-08-13 17:30:53 +03:00
Stavros and GitHub
5f03ccbcc8
feat: add simple e2e tests ( #1014 )
2026-08-13 17:30:38 +03:00
Stavros and GitHub
03841cf838
New Crowdin updates ( #1058 )
2026-08-13 15:55:25 +03:00
Stavros
ContreandClaude Sonnet 4.6