MHSanaei 039d05a743 fix(ci): bump Go to 1.26.4 and exempt /panel/groups SPA route from api-docs test ...

- Bump go directive to 1.26.4 to pick up stdlib security fixes in
  crypto/x509, mime and net/textproto flagged by govulncheck
- Add /panel/groups to the api_docs_test SPA-page allowlist so the
  UI page route is not treated as an undocumented API endpoint
- go.sum carries pgx/v5 v5.10.0 bump

2026-06-03 15:38:44 +02:00

..

controller

fix(ci): bump Go to 1.26.4 and exempt /panel/groups SPA route from api-docs test

2026-06-03 15:38:44 +02:00

entity

fix(settings): allow pagination size of 0 to disable pagination

2026-06-02 14:54:11 +02:00

global

Feat/multi inbound clients (#4469)

2026-05-19 12:20:24 +02:00

job

fix(online): scope online status per node instead of a global union

2026-06-02 18:33:21 +02:00

locale

v3

2026-05-10 02:13:42 +02:00

middleware

feat: complete Zod migration of frontend + bulk client batching (#4599)

2026-05-27 04:26:50 +02:00

network

docs: add comments for all functions

2025-09-20 09:35:50 +02:00

runtime

feat(nodes): bulk panel self-update with live online indicator

2026-06-01 07:03:06 +02:00

service

fix(panel-proxy): route custom geo and http(s) Telegram through panelProxy

2026-06-03 14:57:49 +02:00

session

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

translation

feat(inbounds): per-proxy Pinned Peer Cert SHA-256 + labeled External Proxy form

2026-06-03 13:46:54 +02:00

websocket

fix(websocket): order register/unregister via single ops channel

2026-05-19 12:34:53 +02:00

web.go

feat(dashboard): more System History metrics, persistence & localized labels

2026-06-03 12:16:31 +02:00