Repository navigation

merge upstream develop while preserving fork security contracts - #82

Merged

mangyan1 merged 81 commits into

fix/security-refresh-20261016from

fix/upstream-sync-20261016

Oct 17, 2026

Merged

merge upstream develop while preserving fork security contracts#82
mangyan1 merged 81 commits into
fix/security-refresh-20261016from
fix/upstream-sync-20261016

Commits on Sep 25, 2026
- fix: only chown /data/keys.json if necessary
  xJayMorex
  committed
  4725153
- fix: omit certificate_key from certificate API responses
  Amitind
  committed
  a54b73f
Commits on Sep 26, 2026
- Merge pull request #5886 from xJayMorex/fix-chown
  jc21
  authored
  de65105
- Merge pull request #5891 from Amitind/fix/5128-hide-certificate-key
  jc21
  authored
  5dcaf28
Commits on Sep 29, 2026
- build(deps): bump ip-address from 10.5.0 to 10.7.2 in /backend
  dependabot[bot]
  authored
  c699dc9
- Merge pull request #5910 from NginxProxyManager/dependabot/npm_and_yarn/backend/ip-address-10.7.2
  jc21
  authored
  2dfd691
Commits on Oct 1, 2026
- Don't start IP ranges renewal timer when fetching is disabled
  PrassanthVG
  committed
  77dfc3d
- Merge pull request #5913 from PrassanthVG/fix/ip-ranges-timer
  jc21
  authored
  f64d43b
Commits on Oct 4, 2026
- build(deps): bump serialize-javascript from 7.1.1 to 7.1.2 in /test
  dependabot[bot]
  authored
  092d212
Commits on Oct 5, 2026
Commits on Oct 6, 2026
Commits on Oct 8, 2026
- Update docker/dockerfile Docker tag to v1.28.0
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  eac1e97
- Update caddy Docker tag to v2.11.7
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  d526c21
- dep updates
  Zoey2936
  committed
  e5b5c61
- update aws-lc version to v5.11.0
  Zoey2936
  committed
  22007fc
- update nextcloud aio defaults
  Zoey2936
  committed
  fd40672
- small fixes
  Zoey2936
  committed
  ebae809
- remove not needed gso fix patch
  Zoey2936
  committed
  1b9b5e1
- add toggle to skip auth request if mtls successeded #3964
  Zoey2936
  committed
  3ce647e
- Merge remote-tracking branch 'upstream/develop' into develop
  Zoey2936
  committed
  fbd3a53
- merge upstream
  Zoey2936
  committed
  33fb449
- sort hosts by enabled state
  Zoey2936
  committed
  ac19efb
- Merge branch 'develop' into fix/5919-access-list-render
  jc21
  authored
  1454252
Commits on Oct 9, 2026
- Fix flakey cypress test
  jc21
  committed
  717877d
- Merge pull request #5935 from NginxProxyManager/fix/5919-access-list-render
  jc21
  authored
  56ab784
Commits on Oct 10, 2026
- dep updates
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  c874001
- experimental testing: apply nginx "QUIC performance optimization" PR
  Zoey2936
  committed
  4d2c725
- Revert "experimental testing: apply nginx "QUIC performance optimization" PR"
  Zoey2936
  committed
  73c13b4
- do not soft delete
  Zoey2936
  committed
  56fac48
- add more transactions
  Zoey2936
  committed
  85b0cb4
- add german translatioms
  Zoey2936
  committed
  0eaf315
- small ui changes (navbar)
  Zoey2936
  committed
  18773e9
- Merge remote-tracking branch 'upstream/develop' into develop
  Zoey2936
  committed
  40a3e9b
- merge upstream
  Zoey2936
  committed
  30ed0bd
- fix navbar with some permission combinations
  Zoey2936
  committed
  87d6454
- add satisfy any warning
  Zoey2936
  committed
  cb73eda
- use hooks for inital values
  Zoey2936
  committed
  406b1ea
Commits on Oct 11, 2026
- frontend: code cleanups
  Zoey2936
  committed
  7df378a
- add default for custom locations
  Zoey2936
  committed
  5ab361c
- Add missing FR translations
  Alexis-Loskoutoff
  committed
  06b02f7
- Improve existing french translations
  Alexis-Loskoutoff
  committed
  4171371
Commits on Oct 12, 2026
- Merge pull request #5938 from Alexis-Loskoutoff/Update-FR-translations
  jc21
  authored
  d780474
- support cu_ for auth request upstreams
  Zoey2936
  committed
  0c99566
- skip unkown dns providers
  Zoey2936
  committed
  a38ebcf
Commits on Oct 13, 2026
- fix(certbot): update Akamai Edge DNS plugin and credentials for v0.3.0
  jeezat
  committed
  8c5b4d8
- Require certificates:create permission to validate certificates
  Alexis-Loskoutoff
  committed
  82529d6
- Add test for unauthenticated certificate validation
  Alexis-Loskoutoff
  committed
  6acf346
- Add test for certificate validation with view-only permission
  Alexis-Loskoutoff
  committed
  f1bd157
- dep updates
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  3211afe
- many small fixes
  Zoey2936
  committed
  7cb0e3c
- convert locations into theier own table
  Zoey2936
  committed
  fdaa3cc
- Merge remote-tracking branch 'upstream/develop' into develop
  Zoey2936
  committed
  6cd39b3
- merge upstream
  Zoey2936
  committed
  5d47858
- Merge pull request #5946 from Alexis-Loskoutoff/require-authentication-to-validate-certificates
  jc21
  authored
  556738f
- Merge pull request #5944 from jeezat/develop
  jc21
  authored
  1aca775
- hide rtl langs since they are broken
  Zoey2936
  committed
  8f32220
- add files created by an LLM explaining an LLM how to convert upstreams lang files
  
  Zoey2936
  and
  claude
  committed
  57b1ef6
- allow downloading all certificate types (#3992)
  
  gadget78
  and
  Zoey2936
  committed
  e94bf90
- Merge remote-tracking branch 'upstream/develop' into develop
  Zoey2936
  committed
  c175558
Commits on Oct 14, 2026
- Update caddy:2.11.7 Docker digest to 685ae3d
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  1cd62f1
Commits on Oct 15, 2026
- dep updates
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  ace6b63
- don't send Content-Type header to auth request upstreams
  Zoey2936
  committed
  c936773
- more small fixes
  Zoey2936
  committed
  8a64a88
- use more modern js
  Zoey2936
  committed
  abbe264
- make sure emails are lowercase
  Zoey2936
  committed
  24e8c0e
- block totp/mfa codes/tokens create before bakcend start
  Zoey2936
  committed
  fe9c78d
- simplify more code
  Zoey2936
  committed
  febd069
- simplify more code again
  Zoey2936
  committed
  950cfcc
- update nginx version to release-1.31.7 and njs version to 1.0.2
  Zoey2936
  committed
  9dc7f2a
- update openresty patches version to 1.31.7
  Zoey2936
  committed
  360f556
Commits on Oct 16, 2026
- Update dependency objection to v4
  
  renovate[bot]
  authored and
  Zoey2936
  committed
  5ba8fe1
Commits on Oct 17, 2026
- merge upstream develop while preserving fork security contracts
  mangyan1
  committed
  5f3fbd8
- merge validated security runtime refresh
  mangyan1
  committed
  faaaa4e
- await session refresh after MFA changes
  mangyan1
  committed
  2c8f4b6
- preserve deny-all access policies during upstream sync
  mangyan1
  committed
  558fe32

Commits

Commits on Sep 25, 2026

Commits on Sep 26, 2026

Commits on Sep 29, 2026

Commits on Oct 1, 2026

Commits on Oct 4, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026

Commits on Oct 8, 2026

Commits on Oct 9, 2026

Commits on Oct 10, 2026

Commits on Oct 11, 2026

Commits on Oct 12, 2026

Commits on Oct 13, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 17, 2026