Jonathan Miller
ea66ad4b4a
security: hide MokoWaaS from plugin list for non-master users
...
Injects JS on com_plugins that removes the MokoWaaS row from the
plugin table. Combined with the edit/save block, non-master users
cannot see, edit, or save the plugin settings.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-22 05:53:14 -05:00
Jonathan Miller
48cb040505
security: restrict plugin settings to master user + rename Gitea to MokoGitea
...
- Non-master users blocked from editing MokoWaaS plugin config
- isOurPlugin() helper checks extension_id against our plugin
- Blocks both edit view and save task for non-master users
- Renamed bare 'Gitea' references to 'MokoGitea' in docs
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-22 05:51:20 -05:00
gitea-actions[bot]
aec849c9ae
chore: update development channel 02.01.38 [skip ci]
2026-05-22 09:57:19 +00:00
gitea-actions[bot]
d3281066dc
chore(version): bump to 02.01.38 [skip ci]
2026-05-22 09:57:18 +00:00
Jonathan Miller
b17b36e02e
security: make plugin hard to disable + block uninstall
...
- enforceLocked() runs every page load — re-enables, re-locks, re-protects
if someone tampers with the database flags
- preflight() blocks uninstall attempts with error message
- Logs tampering attempts to mokowaas log category
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-22 04:56:48 -05:00
gitea-actions[bot]
5020b58da1
chore: update development channel 02.01.37 [skip ci]
2026-05-22 09:41:24 +00:00
gitea-actions[bot]
c97432495b
chore(version): bump to 02.01.37 [skip ci]
2026-05-22 09:41:23 +00:00
Jonathan Miller
b22842f302
refactor: replace Grafana API with heartbeat receiver provisioning
...
Remove all Grafana API code (630 lines), obfuscated tokens, SA tokens,
ensureGrafanaPlugin, provisionGrafanaDatasource, buildDashboardModel.
Replace with simple HTTP POST to heartbeat receiver on bench server.
Receiver writes Grafana provisioning YAML and restarts Grafana container.
No API tokens or RBAC permissions needed.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-22 04:40:51 -05:00
gitea-actions[bot]
42d530bfbf
chore: update development channel 02.01.36 [skip ci]
2026-05-22 04:02:26 +00:00
gitea-actions[bot]
307dc37d47
chore(version): bump to 02.01.36 [skip ci]
2026-05-22 04:02:25 +00:00
Jonathan Miller
2e4fdcb07e
fix: new Grafana SA token with datasource:create + visible heartbeat errors
...
- New service account token with correct RBAC permissions
- script.php postflight now shows success/failure messages to admin
- Logs all heartbeat attempts with HTTP code and cURL errors
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-21 23:01:33 -05:00
Jonathan Miller
0ec18b9868
Merge remote-tracking branch 'origin/dev'
Universal: Cascade Main → Dev / Cascade main → branches (push) Successful in 3s
2026-05-21 22:52:14 -05:00
Jonathan Miller
e3f4890e5d
docs: update CHANGELOG for production release 02.01.35 [skip ci]
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-21 22:51:13 -05:00
jmiller
6e81585177
chore: sync updates.xml 02.01.35 from dev [skip ci]
2026-05-22 03:49:22 +00:00
gitea-actions[bot]
ff69e1d7fd
chore: update development channel 02.01.35 [skip ci]
2026-05-22 03:49:21 +00:00
gitea-actions[bot]
eefe9d134a
chore(version): bump to 02.01.35 [skip ci]
2026-05-22 03:49:20 +00:00
Jonathan Miller
bfb159d0f0
fix: add SSL bypass and error logging to Grafana provisioning
...
- Add CURLOPT_SSL_VERIFYPEER=false for shared hosting environments
- Add CURLOPT_FOLLOWLOCATION to handle redirects
- Log all Grafana heartbeat attempts with HTTP code and cURL errors
- Helps debug provisioning failures on DreamHost and similar hosts
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-21 22:48:49 -05:00
jmiller
fc47aee5ba
chore: sync updates.xml 02.01.34 from dev [skip ci]
2026-05-22 03:43:18 +00:00
gitea-actions[bot]
6b95c0aef9
chore: update development channel 02.01.34 [skip ci]
2026-05-22 03:43:18 +00:00
gitea-actions[bot]
047e296ee3
chore(version): bump to 02.01.34 [skip ci]
2026-05-22 03:43:17 +00:00
Jonathan Miller
47faa1b289
fix: update Grafana API token (Admin SA) [skip ci]
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-21 22:42:49 -05:00
jmiller
48372e2f4f
chore: sync updates.xml 02.01.33 from dev [skip ci]
2026-05-22 03:36:20 +00:00
gitea-actions[bot]
155a8b92b0
chore: update development channel 02.01.33 [skip ci]
2026-05-22 03:36:19 +00:00
gitea-actions[bot]
ba0029e286
chore(version): bump to 02.01.33 [skip ci]
2026-05-22 03:36:18 +00:00
jmiller
b46506cdb7
fix: updates.xml download URL tag dev -> development [skip ci]
2026-05-22 03:34:46 +00:00
jmiller
ebbac5760c
fix: updates.xml download URL tag dev -> development [skip ci]
2026-05-22 03:34:46 +00:00
jmiller
aa72835288
fix(ci): pre-release php-curl + continue-on-error + CLI updates.xml [skip ci]
2026-05-22 03:31:14 +00:00
jmiller
479a6c03f8
chore: sync updates.xml 02.01.32 from dev [skip ci]
2026-05-22 03:29:13 +00:00
gitea-actions[bot]
55219d758c
chore: update development channel 02.01.32 [skip ci]
2026-05-22 03:29:12 +00:00
gitea-actions[bot]
27db3762ad
chore(version): bump to 02.01.32 [skip ci]
2026-05-22 03:29:11 +00:00
jmiller
a2f34db524
fix(ci): add php-curl [skip ci]
2026-05-22 03:28:41 +00:00
gitea-actions[bot]
37aa2bd854
chore: update development channel 02.01.31 [skip ci]
2026-05-22 03:25:43 +00:00
gitea-actions[bot]
ccbd1dc2d5
chore(version): bump to 02.01.31 [skip ci]
2026-05-22 03:25:42 +00:00
jmiller
59f0d1c166
fix(ci): pre-release continue-on-error + CLI updates.xml [skip ci]
2026-05-22 03:25:15 +00:00
jmiller
72cf207f76
chore: sync updates.xml 02.01.30 [skip ci]
2026-05-22 03:20:57 +00:00
gitea-actions[bot]
8a66abc711
chore: update development channel 02.01.30 [skip ci]
2026-05-22 03:19:38 +00:00
gitea-actions[bot]
c2f5ca7754
chore(version): bump to 02.01.30 [skip ci]
2026-05-22 03:19:37 +00:00
jmiller
1a6dfee74e
fix(ci): zip_name/zip_path for upload [skip ci]
2026-05-22 03:19:12 +00:00
gitea-actions[bot]
25f8baf58b
chore(version): bump to 02.01.29 [skip ci]
2026-05-22 03:14:30 +00:00
jmiller
8c60927bbf
fix(ci): clean pre-release.yml [skip ci]
2026-05-22 03:14:01 +00:00
jmiller
f80bf700ca
fix(ci): clean pre-release.yml control chars [skip ci]
2026-05-22 03:10:40 +00:00
jmiller
717d81d80e
fix(ci): sync auto-release.yml to dev [skip ci]
2026-05-22 02:59:00 +00:00
jmiller
be4a0888c0
fix(ci): sync pre-release.yml to dev [skip ci]
2026-05-22 02:59:00 +00:00
gitea-actions[bot]
37a96bafa9
chore: update development channel 02.01.28 [skip ci]
2026-05-22 02:56:55 +00:00
gitea-actions[bot]
9ccd27e809
chore(version): bump 02.01.27 → 02.01.28 [skip ci]
2026-05-22 02:56:54 +00:00
jmiller
1a9815d96e
refactor(ci): sync auto-release.yml — CLI-based workflow [skip ci]
2026-05-22 02:56:16 +00:00
jmiller
326277010d
refactor(ci): pre-release uses CLI tools [skip ci]
2026-05-22 02:49:41 +00:00
jmiller
3f78570267
fix(ci): sync pre-release.yml — CLI-based updates.xml sync [skip ci]
2026-05-22 02:40:09 +00:00
jmiller
ea2ed31cb4
fix(ci): sync pre-release.yml — updates.xml API sync ( #34 ) [skip ci]
2026-05-22 02:35:55 +00:00
jmiller
57c259f951
chore: sync updates.xml from dev (02.01.27 development) [skip ci]
2026-05-22 02:31:27 +00:00