Owen Schwartz
4d831effe1
Merge pull request #3180 from fosrl/dependabot/npm_and_yarn/prod-patch-updates-203742b32f
...
Bump the prod-patch-updates group across 1 directory with 5 updates
2026-05-28 12:06:08 -07:00
dependabot[bot]
80f4dd0e60
Bump the prod-patch-updates group across 1 directory with 5 updates
...
Bumps the prod-patch-updates group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server ) | `13.3.0` | `13.3.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) | `5.100.10` | `5.100.14` |
| [nodemailer](https://github.com/nodemailer/nodemailer ) | `8.0.7` | `8.0.9` |
| [resend](https://github.com/resend/resend-node ) | `6.12.3` | `6.12.4` |
| [semver](https://github.com/npm/node-semver ) | `7.8.0` | `7.8.1` |
Updates `@simplewebauthn/server` from 13.3.0 to 13.3.1
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases )
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.1/packages/server )
Updates `@tanstack/react-query` from 5.100.10 to 5.100.14
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.100.14/packages/react-query )
Updates `nodemailer` from 8.0.7 to 8.0.9
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.7...v8.0.9 )
Updates `resend` from 6.12.3 to 6.12.4
- [Release notes](https://github.com/resend/resend-node/releases )
- [Commits](https://github.com/resend/resend-node/compare/v6.12.3...v6.12.4 )
Updates `semver` from 7.8.0 to 7.8.1
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1 )
---
updated-dependencies:
- dependency-name: "@simplewebauthn/server"
dependency-version: 13.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: "@tanstack/react-query"
dependency-version: 5.100.14
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: nodemailer
dependency-version: 8.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: resend
dependency-version: 6.12.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
- dependency-name: semver
dependency-version: 7.8.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: prod-patch-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-28 19:02:31 +00:00
Owen Schwartz
eafa3076d8
Merge pull request #3137 from fosrl/dependabot/npm_and_yarn/qs-6.15.2
...
Bump qs from 6.15.1 to 6.15.2
2026-05-28 12:01:50 -07:00
Owen Schwartz
fef3cd8354
Merge pull request #2908 from fosrl/dependabot/github_actions/actions/setup-node-6.4.0
...
Bump actions/setup-node from 6.3.0 to 6.4.0
2026-05-28 12:00:48 -07:00
Owen Schwartz
36ada0705e
Merge pull request #3044 from fosrl/dependabot/github_actions/sigstore/cosign-installer-4.1.2
...
Bump sigstore/cosign-installer from 4.1.1 to 4.1.2
2026-05-28 12:00:38 -07:00
Owen Schwartz
8ae3c06df7
Merge pull request #3143 from fosrl/dependabot/github_actions/actions/stale-10.3.0
...
Bump actions/stale from 10.2.0 to 10.3.0
2026-05-28 12:00:25 -07:00
dependabot[bot]
ba127a8536
Bump qs from 6.15.1 to 6.15.2
...
Bumps [qs](https://github.com/ljharb/qs ) from 6.15.1 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.15.1...v6.15.2 )
---
updated-dependencies:
- dependency-name: qs
dependency-version: 6.15.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-28 18:59:36 +00:00
Owen Schwartz
5c024f3a3a
Merge pull request #3142 from fosrl/dependabot/github_actions/docker/login-action-4.2.0
...
Bump docker/login-action from 4.1.0 to 4.2.0
2026-05-28 11:57:53 -07:00
Owen Schwartz
4fdb8583f6
Merge pull request #3178 from fosrl/sec-updates
...
Advance security updates to main
2026-05-28 11:56:57 -07:00
Owen Schwartz
2946df3b8e
Merge pull request #3085 from marcschaeferger-org/security-updates
...
Normalize request parameters and update dependencies for Security
2026-05-28 11:54:23 -07:00
Owen Schwartz
ddabfb5ca1
Merge pull request #3154 from RitwijParmar/codex/pangolin-refresh-live-log-window
...
fix(logs): refresh default end time
2026-05-26 11:52:10 -07:00
Owen Schwartz
ec0666a612
Merge pull request #3151 from shleeable/patch-1
...
Installer: Handle both Maxmind Country and ASN databases.
2026-05-26 09:50:08 -07:00
Shlee
bbf42c5802
Update main.go
2026-05-26 17:14:06 +09:30
Ritwij Aryan Parmar
6aa1d3b094
fix(logs): refresh default end time
2026-05-26 01:26:53 -04:00
Shlee
f1ec1a2fb1
Update docker-compose.yml
2026-05-26 13:49:06 +09:30
Shlee
32fcf90467
Update docker-compose.yml
2026-05-26 13:48:00 +09:30
Shlee
5a53f88fd6
Update main.go
2026-05-26 13:37:28 +09:30
Shlee
51971c7ef2
Update config.yml
2026-05-26 13:36:01 +09:30
Shlee
491096109a
Update main.go
2026-05-26 13:31:07 +09:30
Shlee
802a41b1bd
Update main.go
2026-05-26 13:25:53 +09:30
Shlee
f59fbabede
Update main.go
2026-05-26 13:12:48 +09:30
Shlee
5a7d54058e
Update main.go
2026-05-26 13:06:35 +09:30
Owen Schwartz
5ef4490692
Merge pull request #3148 from bishnubista/fix-audit-log-replica-routing
...
fix(audit-logs): route request audit log reads through logsDb
2026-05-25 12:02:24 -07:00
bishnubista
817e848d08
fix(audit-logs): route request audit log reads through logsDb
...
Route the read paths in queryRequestAuditLog.ts and
queryRequestAnalytics.ts through `logsDb` instead of
`primaryLogsDb`, matching the existing private audit log routes
(queryActionAuditLog, queryAccessAuditLog, queryConnectionAuditLog
all already use `logsDb`). In PostgreSQL deployments configured
with a read replica via `withReplicas` (see server/db/pg/logsDriver.ts),
this keeps high-volume audit log reads off the primary. No-op
in OSS-SQLite where `logsDb === primaryDb`.
Investigated rewriting `queryUniqueFilterAttributes` per the
in-line TODO ("SOMEONE PLEASE OPTIMIZE THIS!!!!!"). A candidate
rewrite using UNION ALL with six GROUP BY...LIMIT 500 arms
benchmarked 48-61% slower than the current SELECT DISTINCT
LIMIT 501 approach on SQLite (100k/300k/1M rows, 20 runs each):
each grouped arm materializes a temp B-tree before applying LIMIT,
while DISTINCT short-circuits via hash dedup with early exit.
A materialized facets table is likely the right long-term fix,
not a query-shape rewrite.
2026-05-25 10:37:47 -07:00
dependabot[bot]
166c8326c5
Bump actions/stale from 10.2.0 to 10.3.0
...
Bumps [actions/stale](https://github.com/actions/stale ) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](b5d41d4e1d...eb5cf3af3a )
---
updated-dependencies:
- dependency-name: actions/stale
dependency-version: 10.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-25 01:52:46 +00:00
dependabot[bot]
673f1e93f4
Bump docker/login-action from 4.1.0 to 4.2.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](4907a6ddec...650006c6eb )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-25 01:52:42 +00:00
Owen Schwartz
35ad235f49
Merge pull request #3129 from fosrl/fix-site-delete
...
Improve delete function speed & order of ops
2026-05-21 12:06:18 -07:00
Owen
834672c846
Improve delete function speed & order of ops
2026-05-21 12:05:16 -07:00
Owen Schwartz
b8180d848a
Merge pull request #3118 from Adityakk9031/#3105
...
Fix public resource health with unknown WireGuard targets
2026-05-20 16:20:25 -07:00
Owen Schwartz
fef7563e14
Merge pull request #3125 from fosrl/fix-3104
...
Fix #3104
2026-05-20 16:15:21 -07:00
Owen
6337cf4359
Fix #3104
2026-05-20 16:14:47 -07:00
Owen Schwartz
b3cfe82dff
Merge pull request #3124 from fosrl/fix-logoUrl
...
Fix logo url
2026-05-20 14:19:29 -07:00
Owen
d65128671c
Fix logo url
2026-05-20 14:18:55 -07:00
Owen Schwartz
41fdd5de74
Merge pull request #3122 from fosrl/button-to-rebuild-association
...
Add button to rebuid cache
2026-05-20 12:08:47 -07:00
Owen
2704202ba9
Add button to rebuid cache
2026-05-20 12:08:20 -07:00
Owen Schwartz
72ef0ae020
Merge pull request #3121 from fosrl/patch-rebuild-sites
...
patch rebuild sites
2026-05-20 11:48:33 -07:00
Owen
1442faa740
Prevent concurrent rebuilds
2026-05-20 11:46:59 -07:00
Owen
6aa589e612
Block adds to clients in jit mode
2026-05-20 11:35:15 -07:00
Owen
4b1a8e14c4
Put long running into the background to end transaction
2026-05-20 11:18:47 -07:00
Owen
1a0db10b1a
Verify button to verify cache
2026-05-20 11:15:15 -07:00
Owen
b7634086db
Just accept any url for now
2026-05-20 10:47:37 -07:00
Aditya kumar singh
a6469e67a8
Fix public resource health with unknown WireGuard targets
2026-05-20 09:05:05 +05:30
Owen Schwartz
1ba75092f9
Merge pull request #3113 from fosrl/dev
...
derived only from roles that the user holds AND are assigned to the target resource
2026-05-19 10:56:30 -07:00
Owen
08a08e73b3
derived only from roles that the user holds AND are assigned to the target resource
2026-05-19 10:53:54 -07:00
Owen Schwartz
82745c701a
Merge pull request #3094 from fosrl/dev
...
Sync dev
2026-05-16 20:46:12 -07:00
Owen
68e775659b
Merge branch 'main' into dev
2026-05-16 20:45:39 -07:00
Owen
1c5e3000b6
Merge branch 'dev' of github.com:fosrl/pangolin into dev
2026-05-16 20:45:31 -07:00
Owen
3b93fd99a1
Remove workflows
2026-05-16 20:44:36 -07:00
dependabot[bot]
e4fd2b656d
Bump sigstore/cosign-installer from 4.1.1 to 4.1.2
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.1.1...6f9f17788090df1f26f669e9d70d6ae9567deba6 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-16 21:55:15 +00:00
Owen Schwartz
159e91a07c
Merge pull request #3090 from fosrl/github-action-cosign
...
Upgrade cosign installer to v4.1.2 and pin cosign version
2026-05-16 14:53:24 -07:00