Skip to content

V0.17#15

Merged
KingPegasus merged 9 commits intomainfrom
v0.17
Mar 28, 2026
Merged

V0.17#15
KingPegasus merged 9 commits intomainfrom
v0.17

Conversation

@KingPegasus
Copy link
Copy Markdown
Owner

No description provided.

### Added
- Admin email notifications for new user signups and API token requests, notifying all admins listed in `XRAYRADAR_ADMIN_EMAILS`.
- New endpoint `/auth/signup-status` to check if new signups are allowed based on a daily cap (`XRAYRADAR_MAX_SIGNUPS_PER_DAY`).
- Rate limiting for signups to mitigate brute-force attacks, with a default limit of 10 signups per hour per IP.

### Changed
- Updated version to 0.16.0 in relevant files.
- Enhanced architecture documentation to include new admin notification features and signup rate limiting details.
…localhost

### Changed
- Renamed `_safe_logo_url` to `_logo_png_url` and updated the logo URL to point to `xray-logo.png`.
- Introduced a text-based logo fallback for cases where the base URL is empty or points to localhost.
- Updated tests to reflect changes in logo handling and ensure proper rendering of emails without external images.
- Added `xray-logo.png` to static file serving in the web router.
### Changed
- Updated references from `xrayradar-server` to `XrayRadar` across various files for consistent branding.
- Added `.env.example` to `.gitignore` to prevent accidental exposure of environment configuration.
- Updated `CHANGELOG.md` to include new version 0.17.0 with changes related to email templates and branding.
- Enhanced README and documentation to reflect the new project name and structure.
- Updated security audit scripts and related documentation to align with the new branding.
### Changed
- Updated project version to 0.17.0 in `pyproject.toml`, `main.py`, and web package files.
- Added `requests` dependency with version constraint `>=2.33.0,<3.0` in `pyproject.toml` and `uv.lock`.
- Updated `requests` version to 2.33.0 in `uv.lock` to align with the new dependency requirement.
### Changed
- Introduced a new section in the README for the user dashboard, detailing the signed-in experience for project management and issue triaging.
- Added multiple screenshots showcasing the user dashboard, project list, project issues view, and team access configuration.
- Updated the description of additional assets in the documentation.
### Changed
- Added `requests>=2.33.0,<3.0` dependency in `CHANGELOG.md` and `pyproject.toml` for CVE-2026-25645.
- Updated `pygments` to be installed from a specific git commit to address CVE-2026-4539, with a note to revert to PyPI once a patched version is available.
- Enhanced README and landing page descriptions to clarify the open-source nature of the project and its SDKs.
- Added a new section in the README for Client SDKs, detailing available libraries and their sources.
- Updated various meta descriptions in `index.html` to reflect the project's branding and offerings more accurately.
### Changed
- Updated `pip-audit` integration in CI and local scripts to include `--ignore-vuln CVE-2026-4539` due to Pygments being installed from git while awaiting a patched PyPI release.
- Adjusted documentation in `SECURITY.md` and `DEVELOPERS.md` to reflect the new auditing process and the handling of Pygments.
- Updated `CHANGELOG.md` to document the changes related to security auditing and dependency updates.
- Added new dependencies in `pyproject.toml` and `uv.lock`, including `pip-audit` and `boolean-py`, along with their respective versions.
@KingPegasus KingPegasus merged commit 7ca72b9 into main Mar 28, 2026
5 checks passed
@KingPegasus KingPegasus deleted the v0.17 branch March 28, 2026 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant