d739dcbaa4
Merge pull request #35 from MengMengCode/dependabot/npm_and_yarn/docs/postcss-8.5.23
...
build(deps-dev): bump postcss from 8.5.15 to 8.5.23 in /docs
2026-07-26 04:25:22 +08:00
9eaf5002df
build(deps-dev): bump postcss from 8.5.15 to 8.5.23 in /docs
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.15 to 8.5.23.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.23 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.23
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-25 20:23:42 +00:00
73433c035d
release: v1.1.28
2026-07-26 04:22:32 +08:00
5474991a6d
feat: implement safe HTTP client and URL validation for secure downloads
2026-07-26 04:19:38 +08:00
37b16b83a5
Merge branch 'main' of https://github.com/MengMengCode/CLICD
2026-07-26 04:04:52 +08:00
38debab1aa
Add custom image handling and access policy management
...
- Implement tests for custom KVM and LXC image creation, ensuring invalid sources and architecture mismatches are rejected.
- Introduce access policy management in CLI, allowing configuration of allowed sources and trusted proxies.
- Add NAT network configuration with validation for RFC1918 compliance and subnet parsing.
- Create panel access policy management, including normalization and evaluation of access decisions based on client IPs and forwarded headers.
- Develop middleware for enforcing access policies in the server, returning appropriate responses for allowed and denied requests.
- Enhance custom image downloading and validation, ensuring integrity and security of downloaded root filesystem archives.
- Include comprehensive tests for all new functionalities to ensure reliability and correctness.
2026-07-26 04:04:45 +08:00
24204609a1
Merge pull request #34 from MengMengCode/dependabot/npm_and_yarn/frontend/multi-92d8ff70db
...
build(deps): bump react-router and react-router-dom in /frontend
2026-07-24 19:21:40 +08:00
deedf86c22
build(deps): bump react-router and react-router-dom in /frontend
...
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router ) to 7.18.1 and updates ancestor dependency [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom ). These dependencies need to be updated together.
Updates `react-router` from 6.30.4 to 7.18.1
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/react-router@7.18.1/packages/react-router/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.18.1/packages/react-router )
Updates `react-router-dom` from 6.30.4 to 7.18.1
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom )
---
updated-dependencies:
- dependency-name: react-router
dependency-version: 7.18.1
dependency-type: indirect
- dependency-name: react-router-dom
dependency-version: 7.18.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 11:03:57 +00:00
8283b88ded
release: v1.1.27
2026-07-24 19:00:12 +08:00
6c9f24bb24
FIX port setting
2026-07-24 18:51:52 +08:00
f2fa2449e9
release: v1.1.26
2026-07-22 17:02:23 +08:00
53d56be8f9
fix #33
2026-07-22 16:57:44 +08:00
ec38ab9136
Merge branch 'main' of https://github.com/MengMengCode/CLICD
2026-07-21 21:26:09 +08:00
fdcd7df9e9
Update API endpoint.
2026-07-21 21:26:04 +08:00
d6d46296fe
Merge pull request #32 from MengMengCode/dependabot/npm_and_yarn/frontend/axios-1.18.0
...
build(deps): bump axios from 1.17.0 to 1.18.0 in /frontend
2026-07-21 15:13:02 +08:00
3f44c7565f
build(deps): bump axios from 1.17.0 to 1.18.0 in /frontend
...
Bumps [axios](https://github.com/axios/axios ) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.17.0...v1.18.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.18.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-20 20:30:35 +00:00
61d842d94c
Fix star history image link in README.md
...
Updated the star history image link in the README.
2026-07-20 12:52:40 +08:00
ca303d33f6
Replace star history section with new embed link
2026-07-19 20:08:13 +08:00
6bdeafccf2
修复剩余 CodeQL 高危告警
2026-07-18 21:31:31 +08:00
04cefe0cf1
release: v1.1.25
2026-07-18 21:18:54 +08:00
f28117bc5e
修复了一些已知问题
2026-07-18 21:16:29 +08:00
2324494dd7
优化了机器创建流程
2026-07-18 20:45:23 +08:00
ebba97f1d6
· 修复了一些已知问题
...
· 增加了局域网DHCP IP分配适配
· 完善了多盘兼容支持 #17
2026-07-18 19:44:32 +08:00
3dabd93d2f
Fix some problem.
2026-07-17 00:44:47 +08:00
8bad52bd9e
FIX ##30
2026-07-17 00:27:31 +08:00
d05ca8cc4c
release: v1.1.24
2026-07-16 23:28:28 +08:00
48fa14f8a7
FIX #18
2026-07-16 23:27:26 +08:00
5c6d6eafc9
Support Debian 13.
...
#29
and fix useage chart data display problem, storage on database instead of localstorage.
2026-07-16 21:24:28 +08:00
2ecdb5c26f
fix Dependabot alerts
2026-07-16 21:01:27 +08:00
ae02241370
KVM的端口转发_ 失效修复
2026-07-16 20:57:07 +08:00
fdd83977fc
支持限制用户可选择的系统
2026-07-16 20:47:26 +08:00
58d86b5d08
release: v1.1.23
2026-07-16 18:57:49 +08:00
7307255130
FIX #28
2026-07-16 18:57:15 +08:00
0e3c059236
ci: fix release workflow checkout
2026-07-16 16:58:19 +08:00
61137b837d
release: v1.1.22
2026-07-16 16:58:19 +08:00
596bf86477
Merge pull request #27 from MengMengCode/dependabot/go_modules/backend/golang.org/x/crypto-0.52.0
...
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /backend
2026-07-16 15:15:39 +08:00
47a09aa177
release: v1.1.21
2026-07-16 15:13:53 +08:00
2456b65ce2
Merge branch 'main' of https://github.com/MengMengCode/CLICD
2026-07-16 15:13:40 +08:00
292686a19a
Fix some problems.
2026-07-16 15:13:35 +08:00
9eb7c322cf
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /backend
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.45.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.45.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 11:56:11 +00:00
5ec62ca732
Merge pull request #26 from StarVM-OpenSource/main
...
从UTF8-BOM转UTF8以修复魔方财务使用此模块后无法正常被下游拉取信息的问题
2026-06-29 09:06:10 +08:00
a79df0d2dd
Merge branch 'MengMengCode:main' into main
2026-06-26 22:20:52 +08:00
cc8fdbfede
从UTF8-BOM转UTF8以修复魔方财务使用此模块后无法正常被下游拉取信息的问题
2026-06-26 20:44:29 +08:00
702d6975e5
release: v1.1.20
2026-06-17 21:08:13 +08:00
84d98e40c6
FIX #16
2026-06-17 21:06:58 +08:00
fd974d95b9
Merge branch 'main' of https://github.com/MengMengCode/CLICD
2026-06-17 20:41:14 +08:00
cd258fd6ac
FIX #20
2026-06-17 20:41:11 +08:00
0c2dd457d4
Merge pull request #22 from MengMengCode/dependabot/npm_and_yarn/frontend/form-data-4.0.6
...
build(deps): bump form-data from 4.0.5 to 4.0.6 in /frontend
2026-06-17 20:03:18 +08:00
92e846eecc
IPV6 fix
2026-06-17 19:56:09 +08:00
a1d9ce8b1c
build(deps): bump form-data from 4.0.5 to 4.0.6 in /frontend
...
Bumps [form-data](https://github.com/form-data/form-data ) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases )
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md )
- [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 )
---
updated-dependencies:
- dependency-name: form-data
dependency-version: 4.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 11:22:14 +00:00
Meng Meng