Administrator/Xen-Orchestra-xen-orchestra-MIRROR
1
0
Fork 1
mirror of https://github.com/vatesfr/xen-orchestra.git synced 2026-11-09 17:06:13 -06:00
Code Issues Packages Projects Releases Wiki Activity
17,218 Commits 514 Branches 930 Tags
e0ae3db34191da00a090286f364aa2eed158eade
Commit Graph

550 Commits

Author SHA1 Message Date
Pierre Brunet
abbdfe6cb7 fix(xo-web): update sanitize-html (#9851) 
dependabot alert : https://github.com/vatesfr/xen-orchestra/security/dependabot/484
 2026-05-18 16:19:13 +02:00
Pierre Brunet
100f11308a refactor(backups): rewrite and test cleanVm (#9765) 
the cleanVm script was a monolith in charge of cleaning the backup, 
detecting any corrupted data, deleting the irrecoverable one, removing
and merging older backups 

this PR do a complete rewrite, using the RemoteDisk abstraction and add
tests
 2026-05-18 15:15:56 +02:00
spacotte-vates
d810ea0c46 feat(rest-api): refactor registerRestApi (#9553) 2026-05-13 17:53:15 +02:00
OlivierFL
8c00ccefd4 chore(xo-stack): update Vite, Typescript and Vue related libs (#9703) 2026-05-13 09:49:29 +02:00
OlivierFL
ef1fe13667 feat(xo-stack): update system pages layout (#9746) 2026-05-05 09:26:19 +02:00
Florent BEAUCHAMP
c6ccd987e2 fix(xo-server): TLSSocket memory leak — stoppable + http-server-plus incompatibility (#9725) 
xo-server uses two libraries for its web server:

    http-server-plus — a multi-protocol server facade that multiplexes HTTP and HTTPS listeners behind a single EventEmitter interface ( introduced here JsCommunity/http-server-plus@ec63f3f )
    stoppable — wraps the server to track open connections for graceful shutdown, using an internal reqsPerSocket Map (server._pendingSockets) (introduced here : 782505b )


Fix

@vates/http-server-plus (fork of JsCommunity/http-server-plus): add 'secureConnection' to the forwardedEvents list so that webServer.on('secureConnection', handler) is propagated to underlying https.Server instances at listen() time.

xo-server/src/index.mjs: register the missing handler that stoppable was supposed to add but never did:
 2026-04-20 14:38:37 +02:00
Bastien Nollet
fbba05bbde feat(backups): use XO Tasks (#9734) 
Change the backups so they stop using their own task system, and use the same system as XO Tasks.

For the moment, it shouldn't affect the users, but when the previous backup logs will be old enough to be erased, this will allow us to have shorter loading times for backup logs.

XO-52
 2026-04-17 17:49:18 +02:00
Mathieu
3e21edad4e chore: upgrade dependencies with known security vulnerabilities (#9640) 
* chore: upgrade dependencies with known security vulnerabilities

* Update Node.js version in CI workflow

* chore: upgrade additional security dependencies

* chore: stabilize yarn.lock path-to-regexp entry

* chore: bump minimum version ranges for security-patched dependencies

* chore: update CHANGELOG.unreleased.md with security upgrades

* chore: revert vite upgrade to 6.4.1 (6.4.2 breaks vue-tsc)

* chore: fix vite upgrade and pin vue to 3.5.28
 2026-04-15 16:56:43 +02:00
Florent BEAUCHAMP
598ab85446 feat(vmware-explorer): make V2V import cancellable (#9552) 2026-03-17 18:17:08 +01:00
Mathieu
438a7cc746 feat(mcp): add @xen-orchestra/mcp package (#9519) 
This PR adds the new @xen-orchestra/mcp package — an MCP (Model Context Protocol) server that enables AI assistants (Claude Desktop, Claude Code, or any MCP-compatible client) to query a Xen Orchestra infrastructure in read-only mode.
 2026-02-24 17:10:32 +01:00
OlivierFL
0866a5db81 feat(xo-stack): implement Query Builder (#9488) 2026-02-23 15:35:23 +01:00
Pierre Brunet
c6c31524e1 build: bump all dependencies (#9481) 2026-02-10 14:42:37 +01:00
Pierre Brunet
263059be22 fix: update node-tar to handle CVE-2026-23745 (#9406) 
* fix: update node-tar to handle https://github.com/advisories/GHSA-8qq5-rm4j-mr97

* chore: update changelog
 2026-01-20 11:42:57 +01:00
Mathieu
980e4b5887 Feature openmetrics (#9323) 2025-12-17 17:17:53 +01:00
Pierre Brunet
f24952f967 chore(xo-web): update marked to more recent version (#9227) 
Fix https://github.com/vatesfr/xen-orchestra/security/dependabot/27
 2025-11-24 14:36:08 +01:00
Pierre Brunet
566b210d1e chore(xo-web): update ansi_up (#9226) 2025-11-24 13:55:45 +01:00
Pierre Brunet
53c1a33106 security: update nodemailer (#9217) 
Fix Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict: https://github.com/vatesfr/xen-orchestra/security/dependabot/246
 2025-11-18 09:23:27 +01:00
Pierre Brunet
2a5b0ffd1a security: update package xml2js in xo-web and xo-vmdk-to-vhd (#9216) 
Update xml2js in xo-web and xo-vmdk-to-vhd for security purpose
Fix https://github.com/vatesfr/xen-orchestra/security/dependabot/84
 2025-11-18 09:04:54 +01:00
Pierre Brunet
e494007b2a security: update cookie package (#9220) 
Update cookie package in xo-server for security
Fix https://github.com/vatesfr/xen-orchestra/security/dependabot/167

Proxy check tested
 2025-11-18 09:03:48 +01:00
Florent BEAUCHAMP
87df162944 chores(all): remove jest (#8956) 
jest test are unmaintained and flacky, they increase the dependencies surface
 2025-10-17 14:24:05 +02:00
OlivierFL
3d29348337 feat(xo-6/collections): implement virtual lists for Treeview, QuickTasks and Alarms collections in dashboards (#9077) 2025-10-15 17:17:32 +02:00
Pierre Brunet
86f3096c1b chore: update packages (#9042) 
- passport-saml -> @node-saml/passport-saml
- connect-flash -> typed-flash
 2025-10-06 10:42:44 +02:00
Pierre Donias
0d481ffb18 chore: update dependencies (#8888) 2025-09-09 16:48:09 +02:00
Bastien Nollet
6a08b82d86 chore(packages): remove unused xo-server-test (#8945) 
remove unused xo-server-test
 2025-09-09 10:18:06 +02:00
Thierry Goettelmann
e0b9bc2004 feat(web): introducing defineRemoteResource (Web Core) and useXoCollectionState (XO 6) to handle XO API resources (#8855) 2025-08-13 10:28:40 +02:00
Thierry Goettelmann
13f406fe70 feat(web-stack): introducing defineRequest + convert site dashboard (#8839) 2025-07-29 17:59:27 +02:00
Julien Fontanet
9373909581 feat(xo-server): show buid commit 2025-07-23 11:50:46 +02:00
Pierre Brunet
7994fc52c3 feat: technical release (#8745) 
* feat(xo-remote-parser): 0.10.0

* feat(@xen-orchestra/fs): 4.6.0

* feat(vhd-lib): 4.13.0

* feat(xen-api): 4.7.2

* feat(@vates/task): 0.6.2

* feat(@vates/types): 1.5.0

* feat(@xen-orchestra/backups): 0.61.2

* feat(@xen-orchestra/backups-cli): 1.1.0

* feat(@xen-orchestra/web-core): 0.21.0

* feat(@xen-orchestra/rest-api): 0.9.0

* feat(@xen-orchestra/web): 0.19.0

* feat(vhd-cli): 0.9.4

* feat(xo-web): 5.177.0

* feat(xo-server): 5.179.0

* feat(xo-server-auth-oidc): 0.3.3

* feat(xo-server-backup-reports): 1.6.0

* feat(xo-server-load-balancer): 0.10.2

* feat(xo-server-transport-nagios): 1.0.3

* chore(changelog): update next

* feat(@xen-orchestra/proxy): 0.29.22

* feat(xo-server-perf-alert): 0.6.3

* fix(chore): update changelog

* fix: fix yarn.lock
 2025-06-23 17:27:36 +02:00
Thierry Goettelmann
b6083b214c feat(web-core): new icon management library (#8607) 2025-06-17 09:07:32 +02:00
NadineYasser1
8add75a41d feat(fs): add azure blob storage (#8415) 
implement azure backup storage on the backend
 2025-06-11 11:58:58 +02:00
Mathieu
0c1947aba2 feat(@xen-orchestra/rest-api): expose dashboard endpoint (#8580) 2025-06-10 14:41:05 +02:00
Florent BEAUCHAMP
41e5a33cfe feat(backups): use generator instead of streams for backup and replication (#8432) 
use generators instead of stream for backup and replication
 2025-05-16 14:24:09 +02:00
Bastien Nollet
b9fc6cbbee feat(xo-server-auth-oidc): update dependency (#8555) 
* feat(xo-server-auth-oidc): update dependency

* changelog
 2025-05-12 17:25:42 +02:00
Florent BEAUCHAMP
34e8ff6bae fix: update following dependabot (#8509) 2025-04-25 15:05:11 +02:00
Bastien Nollet
d7e64028ec feat(xo-server-audit): audit import (#8474) 2025-04-23 11:03:29 +02:00
Florent BEAUCHAMP
e71c17bde3 chore: update dependencies (#8508) 
chore: update dependencies
 2025-04-15 13:49:15 +02:00
Mathieu
b32dcc2dcb feat(@xen-orchestra/rest-api): swagger interface qol (#8484) 2025-04-08 11:40:17 +02:00
Thierry Goettelmann
ac2f4e9f32 chore(web-stack): update deps (#8428) 2025-03-13 11:54:36 +01:00
Pierre Donias
695b3d76e8 fix(xo-web): empty list of options in selects (#8363) 
Introduced by a386680d90
Fixes #8361
See https://github.com/bvaughn/react-virtualized/issues/1871

react-virtualized@9.22.6 seems to be breaking old versions of React
Error in browser console: `TypeError: p.createRef is not a function`
 2025-02-20 17:08:52 +01:00
Mathieu
6f5b97f7f3 feat(@xen-orchestra/rest-api): setup simple auth middleware (#8327) 
Configure dependency injection + configure authentication middleware for openapi (copy of what actually exists in the current REST API. Will be improved later when implementing ACL/resource set)
 2025-02-20 16:07:09 +01:00
OlivierFL
db3f702235 fix(web-stack): rollback vue-tsc version (#8362) 
Rollback `vue-tsc` version to `2.1.10`, to fix broken `yarn type-check` and CI.
 2025-02-20 13:04:43 +01:00
Florent BEAUCHAMP
9723075253 feat(generator): create a toolbox (#8295) 2025-02-18 17:23:51 +01:00
Julien Fontanet
a386680d90 chore: update dev deps 2025-02-18 11:05:22 +01:00
Mathieu
877ca82600 feat(@xen-orchestra/rest-api): initial setup for swagger (#8316) 2025-02-12 14:09:22 +01:00
b-Nollet
832634f284 chore(xo-server): upgrade hashy version (#8304) 2025-02-11 15:50:07 +01:00
Mathieu
0ef95d9911 feat(@vates/types): create @vates/types lib (#8308) 2025-02-10 10:16:39 +01:00
Sebastian CZECH
42f205e473 feat(xo-6): switch to language based on xo5 cookie (#8242) 2025-01-22 14:55:01 +01:00
Julien Fontanet
11a4ceddce chore: update dev deps 2025-01-15 14:46:20 +01:00
Julien Fontanet
fd9c9b214a chore: update dev deps 2024-12-31 12:17:18 +01:00
Thierry Goettelmann
708b9b5bc8 feat(web-core): new menu management system (#8123) 2024-12-09 10:02:54 +01:00