Skip to content

Dev#678

Open
zhaojing1987 wants to merge 70 commits into
mainfrom
dev
Open

Dev#678
zhaojing1987 wants to merge 70 commits into
mainfrom
dev

Conversation

@zhaojing1987

Copy link
Copy Markdown
Contributor

Description

Upgrade deployment and fix CVE-2026-33186 and CVE-2026-1229

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Code refactoring (no functional changes)
  • Performance improvement
  • Test coverage improvement
  • CI/CD improvement

Related Issue

Fixes #(issue number)

Changes Made

Testing

  • Unit tests pass locally (pytest)
  • Code coverage maintained or improved
  • Linting checks pass (black, isort, flake8)
  • Manual testing completed
  • Integration tests pass (if applicable)

Test Evidence

# Example: pytest output

Checklist

  • My code follows the project's code style guidelines
  • I have performed a self-review of my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings or errors
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published

Screenshots (if applicable)

Additional Notes

Deployment Notes

  • Requires database migrations
  • Requires environment variable changes
  • Requires Docker image rebuild
  • Requires configuration updates
  • No special deployment steps needed

For Reviewers:

  • Code quality and style
  • Test coverage adequate
  • Documentation updated
  • Security considerations addressed
  • Performance impact acceptable

…d UX

- platform-sync-runtime-assets.py: full v2 manifest path support with
  delta/full-package detection, remove transitional fallback
- AppStoreSyncManager: default incremental sync, zombie-resistant lock,
  background wrapper with proper lock cleanup
- app-store-page.tsx: manual refresh with confirmation dialog, background
  polling, top-aligned overlay matching favorites dialog style, refined
  favorite badge positioning and button hover sizing
- Dockerfile: simplified build-time app store sync with single channel ARG
- i18n: unified Chinese/English sync labels, plain-language confirm text,
  full timestamp in confirm dialog
- crontab: add daily app store cron entry
- settings-page: minor surface alignment
- devops docs: add app store refresh upgrade design doc and release
  governance notes
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

- Add legacy-main-architecture-baseline.md (old Cockpit multi-container facts)
- Add current-product-architecture-baseline.md (new single-container facts)
- Add lifecycle-redesign.md (install/upgrade/migrate/uninstall redesign)
- Simplify install.sh and uninstall.sh to current-state stubs
- Update CI workflows, compose files, and gitignore
- Remove stale install/README.md (replaced by lifecycle-redesign entry)
…solution

- install/lib: add pull_image_with_mirrors() with mirror accelerator retry
- install/lib: check pull/up return values in install_start, upgrade paths
- apphub/src: fix files_agent helper script using target_path instead of ROOT for item path normalization
…mode search, channel version binding

- files-page: disable nav/create/upload buttons and inputs during file editing
- product-auth: skip logout after setup, navigate directly to overview
- terminal: add sx overrides for dark mode search box in Portal menu
- install.sh: auto-bind image tag to channel for non-release channels
- install_docker.sh: restore official script first, custom as fallback
…ker, and install

- console: fix auth setup spacing, remove logout after init, default to /dashboard
- console: add xterm clipboard addon, dark mode search, disable toolbar during edit
- console: auto-close editor after save, remove save success toast
- console: sidebar overflow fix, footer support link to helpdesk
- console: compose modify now advances to step 2, myapps placeholder for empty platform apps
- console: container action tooltips removed, icon spacing reduced
- backend: hybrid restic backup (local list/delete + docker backup/restore)
- backend: restore stops containers before restore and restarts after
- backend: fix app_official detection via gitConfig, external app listing
- backend: remove compose-metadata.json, use Portainer-based compose app detection
- backend: fix library asset sync fullPackage string handling
- docker: add project name websoft9, hide-label for portainer, restic binary
- docker: channel-aware build args, asset sync timeout, non-fatal sync errors
- install: channel bake in build-bundle.sh, image mirror fallback, docker install flow
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants