ssongliu
f5b47cf74d
fix: fix ClamAV scan failure issue ( #12892 )
2026-05-28 18:04:29 +08:00
王贺
4f78060d35
fix: tighten rbac and release resources ( #12886 )
2026-05-28 11:09:00 +08:00
ssongliu
adb97730c1
fix: fix wildcard file copy issue. ( #12883 )
2026-05-28 10:30:38 +08:00
ssongliu
d0e3914a29
fix: resolve ssh service startup failure after enable ( #12874 )
2026-05-27 16:42:30 +08:00
蘭 and copilot-swe-agent[bot]
462a3bbc83
feat: add node selection reports ( #12871 )
...
* feat: add node selection reports
* Merge dev-v2 and resolve PR conflicts
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-05-27 14:09:50 +08:00
崔健壮
612e67e4cc
fix(ssl): keep panel certificate in sync after auto-renew ( #12858 )
...
The auto-renew flow in obtainSSL returned early when OpenResty was not
installed or `nginx -s reload` failed, skipping reloadSystemSSL. The new
certificate was persisted to the DB and written into website Nginx
configs, but the panel's own server.crt / server.key on disk and the
in-memory constant.CertStore were left pointing at the old material.
Because the cert was now fresh, subsequent cron ticks did not retry the
renewal, so the panel kept serving the stale cert until a user manually
re-applied it from 面板设置 → SSL.
Two changes:
1. agent/app/service/website_ssl.go
reloadSystemSSL is now called unconditionally after a successful
renewal, regardless of whether OpenResty is present or nginx reload
succeeded. The function already short-circuits for non-panel SSLs,
so this is safe.
2. agent/app/service/website_ssl.go + agent/cron/job/ssl.go
Add SyncSystemSSL, invoked at the start of every renew cron tick.
It compares the panel's on-disk cert/key with the WebsiteSSL row
referenced by the SSLID setting and rewrites the files + notifies
core when they diverge. This recovers existing installs that are
already in the "DB ahead of disk" state and self-heals any future
drift introduced by transient failures.
https://github.com/1Panel-dev/1Panel/issues/12472
2026-05-27 11:58:40 +08:00
glmgbj233 and ssongliu
8ed33fd06a
feat: validate generated terminal commands ( #12826 )
...
* Fix taint path 1 detected by Codex
Repository: 1Panel-dev_1Panel
Result: /home/hejunjie/llm_web_serve/find_github_project/codex_find_taint/batch_results_go_llm_full_mini/1Panel-dev_1Panel.json
Sink kind: command_exec
* Fix taint path 0 detected by Codex
Repository: 1Panel-dev_1Panel
Result: /home/hejunjie/llm_web_serve/find_github_project/codex_find_taint/batch_results_go_llm_full_mini/1Panel-dev_1Panel.json
Sink kind: command_exec
* Validate generated terminal commands
Keep generated output behind the intended trust boundary while preserving the normal safe workflow.
Add regression coverage for the unsafe flow and the expected safe behavior.
* Narrow terminal AI input validation
* refine terminal ai command validation
---------
Co-authored-by: ssongliu <sloooop1x@gmail.com >
2026-05-27 11:08:52 +08:00
CityFun
7307b9d6fb
feat: Upgrade some dependencies. ( #12854 )
2026-05-26 15:25:08 +08:00
ssongliu
c2971812a5
fix: align user list model and local dev config ( #12853 )
2026-05-26 14:31:24 +08:00
Rowan Chen
176a4bd34c
Merge pull request #12829 from rowanchen-com/feat/lego-v5-and-dynadot
...
feat: upgrade lego to v5.1.0 and add Dynadot DNS provider
2026-05-26 14:18:17 +08:00
ssongliu
4a01726058
feat: guard file editor save and refresh ops report docs ( #12852 )
2026-05-26 13:48:19 +08:00
ssongliu
979c1588e1
fix: improve command output handling ( #12837 )
2026-05-26 09:33:41 +08:00
mei2jun1
4443ed1b7f
fix: nil pointer dereference when os.OpenFile fails ( #12808 )
2026-05-25 14:11:10 +08:00
ssongliu
81f11f13fe
chore: remove unused docker compose dependency ( #12835 )
2026-05-25 11:38:42 +08:00
王贺
4fa14f055d
fix: harden command execution helpers ( #12834 )
2026-05-25 11:38:31 +08:00
王贺
0fe9033d23
fix: update community edition auth defaults ( #12828 )
2026-05-23 21:17:28 +08:00
ssongliu
d005e61c72
fix: update go sum ( #12825 )
2026-05-23 10:45:45 +08:00
王贺
9328a79b37
fix: update agent go sum ( #12824 )
2026-05-23 10:15:51 +08:00
CityFun
0cefe8f6ad
feat: Update some dependencies ( #12820 )
2026-05-22 22:37:08 +08:00
CityFun
8dd27a3e7b
feat: Update some dependencies ( #12811 )
2026-05-22 15:17:59 +08:00
CityFun
c91769e364
feat: add some translate ( #12806 )
2026-05-21 18:20:06 +08:00
ssongliu
023040a814
fix: improve ssh log parsing ( #12803 )
2026-05-21 15:26:41 +08:00
CityFun
46986fba24
fix: Resolve the agent upgrade issue ( #12780 )
2026-05-21 12:39:50 +08:00
王贺
bec23f793a
fix: harden agent socket and permission checks ( #12771 )
...
* fix: harden agent socket and permission checks
* chore: remove agent socket test
* chore: remove redundant comments
2026-05-21 12:39:49 +08:00
ssongliu
540be68adf
chore: update website log docs ( #12762 )
2026-05-21 12:39:49 +08:00
ssongliu
956bf0992a
feat: split website log APIs ( #12761 )
2026-05-21 12:39:49 +08:00
ssongliu and CityFun
d0faee4eeb
feat: improve frontend permission handling ( #12760 )
...
* feat: change isProductPro logic (#12712 )
* fix: tighten frontend RBAC permission guards (#12717 )
* fix: tighten frontend RBAC permission guards
* feat: add permission directive coverage
* refactor frontend global store usage
* fix: harden file access and fallback handling
* feat: improve frontend permission handling
---------
Co-authored-by: CityFun <31820853+zhengkunwang223@users.noreply.github.com >
2026-05-21 12:39:49 +08:00
王贺
4517ae2f81
feat: support enterprise local skills hub ( #12758 )
2026-05-21 12:39:49 +08:00
CityFun
c77260193f
feat: Modify the model provider loading logic when creating an agent ( #12757 )
2026-05-21 12:39:49 +08:00
ssongliu and CityFun
d57c998047
fix: serve frontend routes with fallback ( #12752 )
...
* feat: change isProductPro logic (#12712 )
* fix: tighten frontend RBAC permission guards (#12717 )
* fix: tighten frontend RBAC permission guards
* feat: add permission directive coverage
* refactor frontend global store usage
* serve frontend routes with fallback
---------
Co-authored-by: CityFun <31820853+zhengkunwang223@users.noreply.github.com >
2026-05-21 12:39:49 +08:00
ssongliu
e5b2b5d5dc
fix: pass context to rar extraction and simplify sidebar message entry ( #12697 )
2026-05-21 12:37:33 +08:00
ssongliu
2c21bd7286
fix: handle stream auth responses ( #12693 )
2026-05-21 12:37:33 +08:00
CityFun
811ddcc26c
fix: Fixed issue with install openclaw plugin failed ( #12690 )
2026-05-21 12:37:33 +08:00
ssongliu
11771b2b53
fix: improve ai benchmark i18n ( #12686 )
2026-05-21 12:37:33 +08:00
ssongliu
1896aed973
feat: update host tools and settings APIs ( #12674 )
2026-05-21 12:37:32 +08:00
ssongliu
6dc5deb6d3
feat: support enterprise resource urls ( #12669 )
2026-05-21 12:37:32 +08:00
ssongliu
d7242d526c
feat: update mfa permissions and panel settings ( #12665 )
2026-05-21 12:37:32 +08:00
zhengkunwang223
22c3fc8c40
feat: add ai benchmark
2026-05-21 12:37:32 +08:00
ssongliu
8fb8d97dcf
feat: add offline environment setting ( #12637 )
2026-05-21 12:37:31 +08:00
ssongliu
5c61217c78
chore: update xpack integration references ( #12628 )
2026-05-21 12:35:10 +08:00
ssongliu
d55982bde0
refactor: update agent and core utilities ( #12621 )
2026-05-21 12:35:09 +08:00
zhengkunwang223
84a27de792
feat: add ai-proxy
2026-05-21 12:32:54 +08:00
ssongliu
a917ca00a1
feat: refactor auth and xpack integration
2026-05-21 12:32:52 +08:00
ssongliu
69906046e8
feat: add xpackee permission-aware settings flow
2026-05-21 11:34:08 +08:00
ssongliu
d9cedeca09
feat: update xpack integration behavior
2026-05-21 11:34:08 +08:00
ssongliu
0e28f27819
feat: Support multi-user login and node management
2026-05-21 11:34:06 +08:00
CityFun
7159aca226
fix: Fix the issue where deleting the host mapping in the runtime environment causes an error." ( #12779 )
2026-05-20 14:58:35 +08:00
ssongliu
defb40702c
fix snapshot recover tar extraction ( #12777 )
2026-05-20 14:12:54 +08:00
ssongliu
b476df3b61
chore: update pro edition copy ( #12776 )
2026-05-20 13:55:04 +08:00
蘭
4bbd9b6f06
fix: Fix the issue of deleting project directories caused by failed creation of the running environment ( #12756 )
2026-05-18 18:08:13 +08:00