🔒 Security

• Prevent path traversal on project file endpoints (GHSA-4g5x-hcwm-82jw)
• Scope project & project_file lookups by namespace_id to enforce tenant isolation
• Harden path, shell, and repo URL handling: extract dedicated safe_path, shell, repo_url, local_path utilities and add unit tests

✨ Features

• Fix external login callback link being intercepted; extract login callback parameter parsing utility (#148)
• Raise tag list default page size to 50 (#147)

🐛 Bug Fixes

• Fix Promise warning
• Fix notify template error (#145)
• Fix custom command parsing failures (multiple parse-error fixes)

♻️ Refactor

• Refactor element-plus usage

📦 Dependencies

• Bump golang.org/x/crypto from 0.31.0 to 0.45.0 (#154)
• Bump vue-i18n, @intlify/core, solid-js, vite/@vitejs/plugin-vue, nanoid (web)

Full Changelog: v1.17.5...v1.18.0

v1.18.0 Latest

Latest

Compare

Choose a tag to compare

Added

• support empty repo
• support codeup(云效) #142 @hujghc
• add index token for publish_trace #137 @micln

Bug fixed

• fix high CPU usage #135 @zyk3212
• fix commit dialog default value #136 @MorriosL
• fix process manager show duplicate message

1.17.5

Compare

Choose a tag to compare

Bug fixed

• ftp deploy

Bug fixed

• ftp deploy

1.17.3

Compare

Choose a tag to compare

Added

• notification template

Changed

• router order

Bug fixed

• fix unknown driver
• fix deploy page css

Added

• notification template

Changed

• router order

Bug fixed

• fix unknown driver
• fix deploy page css

1.17.2

Compare

Choose a tag to compare

Changed

• file struct
• monitor kill enable when encounter error

Bug fixed

• fix create db if not exists
• fix table monitor.target.timeout column type

Changed

• file struct
• monitor kill enable when encounter error

Bug fixed

• fix create db if not exists
• fix table monitor.target.timeout column type

1.17.1

Compare

Choose a tag to compare

Added

• custom variable
• custom login lock time

Changed

• change deploy dialog ui

Bug fixed

• fix quote in rsync remote shell

Added

• custom variable
• custom login lock time

Changed

• change deploy dialog ui

Bug fixed

• fix quote in rsync remote shell

1.17.0

Compare

Choose a tag to compare

Bug fixed

• fix ping ssh:// protocol repository
• fix win server path join
• fix echart height
• fix missing review callback
• fix required project file id

Bug fixed

• fix ping ssh:// protocol repository
• fix win server path join
• fix echart height
• fix missing review callback
• fix required project file id

1.16.3

Compare

Choose a tag to compare

Added

• support periodic update password
• support project hyperlink

Changed

• change load config publish event

Bug fixed

• fix file compare missing server id
• fix get cron logs invalid request method

Added

• support periodic update password
• support project hyperlink

Changed

• change load config publish event

Bug fixed

• fix file compare missing server id
• fix get cron logs invalid request method

1.16.2

Compare

Choose a tag to compare

Added

• add process exec time
• add manage repository
• support docker env

Changed

• change detail dialog css

Bug fixed

• fix element-plus auto import

Added

• add process exec time
• add manage repository
• add docker env

Changed

• change detail dialog css

Bug fixed

• fix element-plus auto import

1.16.1

Compare

Choose a tag to compare

Added

• project script yaml mode
• add deploy time
• create user when ldap is enabled
• add cron logs

Bug fixed

• fix element-plus locale
• fix toggle server state
• fix project set auto deploy

Bug fixed

• ldap validate password
• deploy page duplicate item

Added

• add captcha
• add predefine var ${PROJECT_LABEL}
• add predefine var ${PROJECT_ENV}
• support predefine var in transmitter
• support unbind projects in server page

Changed

• changed file structure
• optimize projectUser struct
• optimize projectServer struct

Bug fixed

• fix install agent

Added

• add user api key
• add publish progress
• add vscode extension
• add jetbrains extension

Changed

• support media login log

Bug fixed

• fix dingtalk token cache #58
• fix commit info

Added

• lark & dingtalk login #55
• support deploy finish script
• deploy project animation

Changed

• sftp open / after connected
• load namespace list when the page opened

Bug fixed

• fix missing project name in lark notify

Bug fixed

• Fix windows mkdir
• Refresh file sync project list
• Fix check monitor config
• Support sftp --delete option
• Fix monitor can not redo the task

Added

• Batch execute script

Changed

• Show server name in monitor table

Bug fixed

• Navbar dark mode
• Windows ssh connect

Changed

• Adjust commit list table column
• Refactor code
• Update Server process list UI

Bug fixed

• Server process output newline

Changed

• Support delete file via sftp

Bug fixed

• Key column 'server_id' doesn't exist in table

Changed

• Support double click for sftp directory
• Update package.json

Bug fixed

• Translation
• Dark mode

Added

• Third login
• Transfer file across server

Changed

• SFTP support mutiple server
• Server process manage

Bug fixed

• Xterm disconnect before unmount

Added

• Notify tag after deploy
• Operation log
• serial/parallel publish to server

Bug fixed

• Fix after deploy script

Added

• Server process manager
• Customize project transfer protocol

Changed

• Tag view UI
• Support more predefined vars

Bug fixed

• Fix dockerfile
• Fix bat newline
• Fix sftp dropdown

Added

• Dark mode

Changed

• Sidebar

Added

• Support after deploy script replace commit info

Bug fixed

• Fix svn commit list

Added

• Support sftp transfer files
• Show deploy detail in realtime

Bug fixed

• fix deploy list remove item failed
• fix ftp login anonymous

Changed

• show server on edit monitor item

Bug fixed

• fix ace editor not found
• fix monitor nil pointer

Added

• Monitor

Added

• Support password login ssh (only work in linux)

Bug fixed

• fix web script editor

Added

• RBAC