* feat(vm): enable community virtual machines and migrate xpack data
* fix(vm): stop ISO download polling on failure or cancellation
* fix(vm): respect deleteFile when deleting failed ISO imports
Set multipathtcp=0 in the core and agent module defaults so Linux listeners use standard TCP without requiring service environment changes.
Co-authored-by: zhengkunwang223 <31820853+zhengkunwang223@users.noreply.github.com>
* fix: correct 1pctl password complexity validation
`isValidPassword("newPassword")` passed a literal string and the condition was inverted, so the complexity check never ran. Extract the validation into a testable helper and cover both the enabled and disabled paths.
Refs #12640
* Delete core/cmd/server/cmd/update_test.go
---------
Co-authored-by: ssongliu <sloooop1x@gmail.com>
Replace database rule synchronization with native rule operations and file-based backup, import, and recovery. Update firewall management views, descriptions, whitelist handling, and translations.
Include terminal reconnect fixes and xpack build tags for Darwin build targets. Remove temporary regression test files before committing.
Update pending Go and frontend dependencies, including gRPC, OpenTelemetry
and SVGO security fixes. Raise the minimum Go version to 1.26.6 and update
x/image and x/mod to patched versions.
Use moby/go-archive directly for image build contexts so its vulnerable
v0.1.0 replacement can be removed and v0.3.0 used. Regenerate Go module
checksums with go mod tidy and refresh the npm lockfile.
Validation: Linux amd64 builds, existing Go tests and go mod verify pass
for core and agent; frontend production build passes; npm audit reports
zero vulnerabilities. Frontend type-check reports the same nine errors
with the original and updated lockfiles.
Go scanning still flags two advisories in the legacy Docker SDK, which
has no patched release on its current module path. A separate SDK
migration and host Docker daemon updates remain necessary.
Use net.IPNet.Contains to check CIDR membership directly and remove the address increment loop. Large authorized subnets no longer cause per-request address enumeration and excessive CPU usage.
* feat: Remote download supports server file name options and improves error handling
* feat: Remote download supports server file name options and improves error handling
ssongliu
Yuki Guo
王贺andzhengkunwang223
guoyuqi
蘭
Woolsenandssongliu