* fix: add NODE_VERSION build-arg and native build deps to fix Docker CI build
* fix: add NODE_VERSION build-arg and native build deps to fix Docker CI build
* fix: use native ARM runners and parallel matrix builds for Docker Hub CI
* fix: update Docker Hub CI artifact pattern to include 'linux' in filename
* Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* fix(httpSecurity.ts): flowise 453
* fix(httpSecurity.ts): ensure IP comparison uses parsed IP format
* fix(httpSecurity.ts): improve IP denial logic by using CIDR parsing and adjusting masks
* fix(httpSecurity.ts): skip malformed IPv4-mapped CIDR entries in deny list processing
* fix(httpSecurity.ts): enhance IP denial logic to handle non-canonical IPv6 addresses and improve entry comparison
* feat(database.util.ts): add function to check if column exists in table
* feat(migrations): add permission column to apikey table
* chore(services/apikey): remove auto-create default API key
* chore: remove auto-create default API key
* fix(migrations): rename permission to permissions in apikey table
* feat(services/apikey): add permissions to create and update
* feat(views/apikey): add permissions to create and update
* feat(api): use API key permissions instead of role permissions
* feat(permissions): filter by user.permissions except for ROLE type
* feat(services/apikey): filter keys by user permissions in getAllApiKeys
* feat(services/apikey): limit API key permissions to user permissions during creation/update
* fix(database.util.ts): replace non-null assertion with explicit error handling
* feat(services/apikey): log errors for malformed API key permissions
* refactor(services/apikey): extract permission validation
* feat(permission): enhance permission filtering based on user features and platform type
* chore(migrations): lower API key permission value
* Update packages/ui/src/views/apikey/APIKeyDialog.jsx
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update packages/ui/src/views/apikey/APIKeyDialog.jsx
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* refactor: remove deprecated APIKEY_PATH and APIKEY migration
* refactor(apikey): remove functionality related to import apikey
* feat(permission): filter out workspace and admin categories for non-ROLE
* feat(services/apikey): validate API key permissions during create and update
* chore(migrations): clean up role permissions values
* fix(migrations): handle corrupted permissions gracefully
* fix(server/src/index.ts): add error handling for API key permissions parsing
* fix(APIKeyDialog.jsx): handle corrupted permissions when editing API key
* fix(views/apikey/index.jsx): handle corrupted permissions in API key list
* fix(services/apikey): validate permissions JSON in API key operations
* Potential fix for code scanning alert no. 83: Clear-text logging of sensitive information
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* feat(migrations): change ApiKey.permissions column from TEXT to JSON
* Update packages/server/src/services/apikey/index.ts
Co-authored-by: Jocelyn Lin <[email protected]>
* feat(PricingDialog.jsx): handle downgrade with excessive apikey permissions
* feat(controllers\apikey): enforce permissions validation
* chore(services/apikey): remove redundant null checks
* fix(services/dataset): throw error when dataset not found before fetching rows
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Jocelyn Lin <[email protected]>
yau-wd