All pull requests

Pull requests

• fix(backup): don't pass the user id as databaseId when restoring a web-server backup

  #5955·mrpythonist opened Nov 10, 2026·

  ·
  1

• fix(webhooks): skip GitHub push events that delete a branch or tag

  #5954·AryaKesharwani opened Nov 10, 2026·2 of 3 tasks·

  ·

• Add Neon Object Storage to destination constants

  #5951·rishi-raj-jain opened Nov 10, 2026·3 tasks done·

  ·

• feat(servers): route remote server domains through the main server's Traefik

  #5950·Collert opened Nov 10, 2026·1 of 3 tasks·

  ·
  1

• feat(preview): resolve ${{app.DOKPLOY_DEPLOY_URL}} to sibling preview URLs

  #5948·Kosai106 opened Nov 9, 2026·3 tasks done·

  ·
  1

  6

• fix: write generated .env files readable by their owner only

  #5944·Ahmad-b1995 opened Nov 9, 2026·3 tasks done·

  ·
  3

• feat: manage Docker Swarm secrets

  #5943·brahimrizq opened Nov 8, 2026·4 tasks done·

  ·
  1

  1

• feat(dns): add Hetzner DNS provider

  #5940·outeiroDev opened Nov 7, 2026Contributor·2 of 3 tasks·

  ·
  1

  4

• fix(ui): stack paragraphs in multi-line tooltips

  #5937·gentslava opened Nov 7, 2026Contributor·2 of 3 tasks·

  ·
  1

• fix(docker): remove and inspect images Swarm pulled by digest

  #5934·gentslava opened Nov 7, 2026Contributor·2 of 3 tasks·

  ·
  1

• fix: disable backup file search until a destination is selected

  #5933·veqzo opened Nov 7, 2026·3 tasks done·

  ·
  1

• fix: pull the volume backup helper before stopping the service

  #5932·veqzo opened Nov 7, 2026·3 tasks done·

  ·
  1

  2

• fix: show all replicas in application monitoring

  #5931·veqzo opened Nov 7, 2026·3 tasks done·

  ·
  1

  2

• fix(security): stored XSS via whitelabeling customCss sanitizer bypass

  #5930·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): volume backups can target volumes the service does not own

  #5929·Siumauricio opened Nov 7, 2026Contributor·

  ·
  3

• fix(security): path traversal via appName on the docker stats websocket

  #5928·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): services can use another organization's git providers, SSH keys and registries

  #5927·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): vault provider masked secret can be sent to a new endpoint

  #5926·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): sshKey.all/one disclose private keys to read-only roles

  #5922·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): schedule create/update can target unauthorized services and servers

  #5921·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): restrict bind mounts to owner/admin (member → host root)

  #5919·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): domain path injected unvalidated into Traefik router rule

  #5918·Siumauricio opened Nov 7, 2026Contributor·

  ·
  1

• fix(security): compose composePath command injection

  #5912·Siumauricio opened Nov 7, 2026Contributor·

  ·
  2

• fix(security): application build fields command injection (member → root)

  #5911·Siumauricio opened Nov 7, 2026Contributor·

  ·
  2

• fix(security): volume backup prefix/serviceName/appName command injection (member → root)

  #5909·Siumauricio opened Nov 7, 2026Contributor·

  ·
  3