Pull Request Explorer

Summary

Remove stale cloak after Livewire navigation

Fixes navigation glitch where pages remain hidden after Livewire navigation, improving user experience by ensuring content loads correctly.

Health Assessment

• • Quick fix with minimal changes, resolved within minutes, indicating low complexity and high confidence.

Summary

Fix password field tab order

Ensures keyboard navigation reaches password inputs before visibility toggles, improving accessibility and user experience.

Health Assessment

• • Quick, small change with added tests, merged within minutes.

Summary

Persist Railpack Buildx metadata across deployments

Ensures the Railpack Buildx metadata is stored on the host, allowing the builder to be reused and cleaned up properly, improving Docker cleanup efficiency and deployment reliability.

Health Assessment

• • Quick fix with minimal changes, AI-assisted review helped catch issues early.

Summary

Update team invitation flow

Ensures each invitation link is unique and validated before login, preventing stale or duplicate invitations. This enhances security and user experience during team onboarding.

Health Assessment

• • Fast cycle time with minimal rework; single review and quick fix indicates low complexity.

Summary

Add Healthchecks service integration

Adds Healthchecks.io as a one‑click service, enabling monitoring via magic link and superuser setup.

Health Assessment

• • PR introduced a new one‑click service with minimal code changes, but the merge took over 11 days, suggesting scheduling delays rather than technical complexity.

Summary

Fix Garage RPC secret length issue

Corrects the RPC secret length for Garage, ensuring services start reliably.

Health Assessment

• • Long review and cycle times suggest limited urgency; minimal code changes reduce risk.

Summary

Update Gitea runner image to version 1.0.7

Updates the Gitea runner container image to the latest patch, ensuring compatibility and security fixes.

Health Assessment

• • Quick image update with minimal changes, fast review and merge.

Summary

Improve deployment input handling

Enhances deployment security by tightening input validation and adding regression tests for command injection and Postgres tuning, reducing risk of malicious payloads and configuration errors.

Health Assessment

• • Quick cycle time but required multiple merges from the next branch, indicating integration with ongoing work. AI review helped identify actionable security issues, leading to a focused fix.

Summary

Improve application image validation for consistency

Ensures application images meet naming standards, reducing deployment errors and improving reliability. Adds comprehensive tests to catch regressions.

Health Assessment

• • Completed in 20 hours with minimal review iterations, indicating efficient implementation and thorough testing.

Summary

Improve Application Branch Validation

Tighten validation for application branch fields to prevent security issues and ensure consistency with application creation flows.

Health Assessment

• • The PR was merged quickly, indicating low review friction and a straightforward fix.

Summary

Enhance proxy config validation and regression tests

Improves reliability and security of proxy configurations, reducing misconfiguration risk and ensuring safer deployments.

Health Assessment

• • PR completed in under 20 hours with minimal rework, indicating efficient review and straightforward changes.

Summary

Validate API token team context

Ensures API and MCP tokens are scoped to the current team, improving security and preventing cross‑team token misuse.

Health Assessment

• • PR was merged in under 20 hours with only a single review round, adding comprehensive security tests and token cleanup logic.

Summary

Bump ws dependency to 8.20.1

Updates the ws WebSocket library to address a memory disclosure bug, improving security for real‑time services.

Health Assessment

• • Automated dependency update with minimal code changes, merged quickly with no review friction.

Summary

Add mobile shell controls to terminal

Adds a mobile toolbar for terminal navigation and improves fullscreen sizing to avoid overlap.

Health Assessment

• • Merged within 42 minutes with no review comments, indicating a straightforward change with minimal risk.

Summary

Validate S3 storage before scheduling backups

Ensures scheduled database backups only use valid, team‑owned S3 storage, preventing misconfigurations and improving reliability.

Health Assessment

• • The PR had a long cycle time but a quick review and minimal rework, indicating a focused validation fix with moderate risk due to its large code changes.

Summary

Fix terminal disconnections

Prevents long-running terminal sessions from disconnecting due to timeouts, improving user experience.

Health Assessment

• • The PR was reviewed and merged quickly, indicating a smooth development process.

Summary

Configure standalone database health checks

Adds configurable health check settings for standalone databases, enabling/disabling and customizing intervals, applied to Docker Compose services, improving reliability and observability.

Health Assessment

• • The PR was reviewed quickly and required only two additional commits after the initial review, indicating efficient collaboration. Despite the large scope of 574 added lines across 20 files, the process remained streamlined with minimal friction.

Summary

Preserve self-hosted server IPs during cleanup

Prevents self-hosted unreachable server cleanup from overwriting server IPs, disabling instead and preserving the address for recovery while maintaining cloud cleanup behavior.

Health Assessment

• • Quick fix with minimal changes, low review friction, minimal risk.

Summary

Fix GitLab SSH repo matching with custom ports

Ensures webhook deployments correctly match GitLab repositories even when custom SSH ports are used, preventing deployment failures.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Skip preview deployments for fork PRs

Prevents untrusted fork pull requests from triggering preview deployments, enhancing security. Ensures only trusted contributors can deploy previews.

Health Assessment

• • Merged within minutes with no rework, indicating a straightforward bug fix.

Summary

prevent 500 when deleting current team

Fixes 500 error when deleting the current team by clearing stale session and cache, ensuring graceful fallback to root team.

Health Assessment

• • Long review cycle indicates delayed feedback; small change but took over 7 days to review and merge.

Summary

Bump ws dependency in coolify-realtime

Updates the ws WebSocket library to address a memory disclosure bug, improving security for the realtime service.

Health Assessment

• • Automated dependency bump merged quickly with no review friction.

Summary

chore(deps): bump symfony/polyfill-intl-idn from 1.37.0 to 1.38.1

Updates a PHP polyfill to address a security vulnerability, ensuring safer domain name handling for the application.

Health Assessment

• • Fast, automated dependency update resolved a security issue with minimal human intervention.

Summary

Add Chatwoot Support for Private API Inbox Webhooks

Self-hosted installations can now opt into private-network access after SSRF hardening, with the default remaining unchanged.

Health Assessment

• • The PR was reviewed and merged quickly, indicating a smooth process.

Summary

Set correct image tag for hermes-agent-with-webui

Fixes image tag mismatch to ensure service deploys correctly, preventing deployment failures.

Health Assessment

• • Quick fix with minimal changes, merged within the same day, indicating low complexity and risk.

Summary

Fix Livewire broadcast handlers to preserve form state

Ensures user input in Livewire forms is not overwritten by broadcast events, improving reliability of database configuration and import forms.

Health Assessment

• • Large-scale Livewire refactor with AI assistance; review required to guard against regressions; moderate review friction due to many comments; high risk due to scope and critical form functionality.

Summary

Add service templates and security hardening

Introduces Cloudflare DDNS, EMQX, OpenObserve, and Hermes Agent templates while tightening team‑based restrictions on source, environment, and server selection, enhancing security and user experience.

Health Assessment

• • The PR had a long cycle time and multiple review rounds, indicating complex changes and significant rework.

Summary

Pin service images to static versions

Ensures services use fixed image tags, improving stability and reproducibility.

Health Assessment

• • PR took 14 days to merge after a quick review, with multiple small commits to adjust service compose files, indicating a straightforward maintenance task with minimal risk.

Summary

Add OpenObserve one-click service template

Adds OpenObserve as a one-click service template, enabling self-hosted observability for logs, metrics, traces, RUM, and session replay. This expands Coolify's catalog with a self-hosted alternative to Elasticsearch, Splunk, and Datadog.

Health Assessment

• • Fast review and single commit indicate a straightforward change with minimal risk and small scope.

Summary

Bump gitea-runner version

Updates the Gitea runner service to the latest patch, ensuring compatibility and security.

Health Assessment

• • The PR was a minimal configuration change that was reviewed quickly, but the merge was delayed by several days, likely due to scheduling or other unrelated work.

Summary

Add Hermes Agent + WebUI one-click service

Provides a ready‑to‑deploy two‑container stack for Hermes Agent and WebUI, enabling instant deployment with auto‑generated domain and password, simplifying user onboarding.

Health Assessment

• • The PR was reviewed quickly and required minimal rework, indicating a straightforward addition of a new service template.

Summary

Improve UI modal values, colors, spacing

Enhances user experience by making configuration change modal clearer and more readable across light and dark themes, reducing confusion and improving usability.

Health Assessment

• • The PR took over 3 days to merge with no recorded review, indicating a slow review process and potential bottlenecks. The change is moderate in scope and involves UI improvements, but the lack of review comments suggests limited scrutiny.

Summary

Improve GitHub App setup and installation flow

Ensures reliable GitHub App installation, supports re‑installation, and protects against token expiration, improving user experience and reducing support overhead.

Health Assessment

• • Quick fix with minimal iterations, indicating straightforward issue resolution.

Summary

Fix webhook repository matching logic

Ensures webhook deployments target the correct application, preventing accidental deployments to unintended environments.

Health Assessment

• • Quick, single‑commit fix with minimal rework; cycle time under 1 hour indicates efficient review and merge process.

Summary

Refine service resource routing

This refines service routing to ensure service pages are correctly scoped to their project and environment, improving navigation consistency and reducing user confusion. It also adds component-level checks and tests for routing behavior.

Health Assessment

• • PR completed in a single commit with no review, indicating a straightforward refactor with minimal risk.

Summary

Harden token permission handling

Improves security by enforcing stricter server‑side permission checks for API tokens, preventing client‑side tampering, and adding comprehensive regression tests to ensure robust token handling.

Health Assessment

• • PR merged in 6 minutes with minimal changes, indicating a straightforward security enhancement with low complexity.

Summary

Fix source selection flow

Improves reliability of repository setup by tightening source selection logic and adding tests for edge cases, reducing configuration errors for users.

Health Assessment

• • PR merged immediately with minimal changes, indicating a straightforward bug fix with no review needed.

Summary

Fix DeleteEnvironment to enforce team scoping

Ensures environment deletion requests are restricted to the current team, preventing cross-team data leaks and improving security.

Health Assessment

• • Quick fix merged within minutes, minimal changes, low complexity.

Summary

Scope server and network selection to current team

Ensures server and network operations are restricted to the current team, preventing cross-team access and improving security.

Health Assessment

• • PR merged within minutes with no review iterations, indicating a straightforward bug fix with minimal risk.

Summary

Scope private key and source selection to current team

Ensures that private keys and Git sources are scoped to the current team, preventing cross‑team resource selection and enhancing security.

Health Assessment

• • Fast merge with minimal changes, indicating a straightforward bug fix with clear test coverage.

Summary

Track application configuration diffs

Enables precise detection of configuration changes, reducing unnecessary redeploys and improving deployment efficiency.

Health Assessment

• • Rapid iteration with a single review round and minimal comments indicates high confidence in the changes, though the large code churn warrants careful monitoring.

Summary

Persist API token expiration warning state

Adds a persisted marker to personal access tokens to prevent duplicate expiration warning emails, improving notification reliability.

Health Assessment

• • Quick fix with minimal rework, AI-assisted review streamlined the process.

Summary

Decode custom nginx API payloads

Ensures custom nginx configurations are correctly decoded and stored, allowing clients to clear settings and preventing double‑encoding errors, thereby improving API reliability and user control.

Health Assessment

• • Merged within minutes with no review, indicating a straightforward, low‑risk fix.

Summary

Add commit to preview image tags

Ensures each preview deployment uses a unique Docker image tag that includes the commit hash, preventing tag collisions and improving deployment reliability.

Health Assessment

• • Quick merge with minimal review, indicating a straightforward bug fix.

Summary

Add Gitea Runner Service Template

Provides a one‑click Gitea runner service for users, simplifying CI/CD integration.

Health Assessment

• • Fast review and minimal changes indicate low complexity and quick integration.

Summary

Disable Litequeen Service

Disables the Litequeen one‑click service by adding an ignore flag to its compose configuration, ensuring it no longer deploys.

Health Assessment

• • Quick change with no review needed, minimal risk.

Summary

Remove axios dependency from realtime server

Eliminates header injection risk by replacing axios with Node's native HTTP client and updates Docker build for reproducibility.

Health Assessment

• • PR merged immediately with no review, indicating a straightforward security fix with minimal friction.

Summary

Bump phpseclib dependency to 3.0.52

Updates the phpseclib library to address security and functionality improvements, ensuring compatibility with the latest OpenSSL and better OID handling.

Health Assessment

• • Automated dependency bump with minimal changes, merged quickly after creation.

Summary

Add v5 upgrade maintenance notification

Adds a styled email notification to inform cloud users of the v5 upgrade, improving communication and reducing confusion.

Health Assessment

• • PR merged after 12 days with minimal rework, indicating a straightforward but sizable change.

Summary

Use HTTPS for nginx APK repository

Updates the development Docker image to use secure HTTPS for the nginx package repository, ensuring all package installs use a secure transport.

Health Assessment

• • PR merged immediately with only two added lines, indicating a straightforward, low‑risk update.