MHSanaei 039d05a743 fix(ci): bump Go to 1.26.4 and exempt /panel/groups SPA route from api-docs test ...

- Bump go directive to 1.26.4 to pick up stdlib security fixes in
  crypto/x509, mime and net/textproto flagged by govulncheck
- Add /panel/groups to the api_docs_test SPA-page allowlist so the
  UI page route is not treated as an undocumented API endpoint
- go.sum carries pgx/v5 v5.10.0 bump

2026-06-03 15:38:44 +02:00

..

api_docs_test.go

fix(ci): bump Go to 1.26.4 and exempt /panel/groups SPA route from api-docs test

2026-06-03 15:38:44 +02:00

api.go

refactor(clients): coherent group management — rename, split, extract

2026-05-28 12:59:20 +02:00

base.go

v3

2026-05-10 02:13:42 +02:00

client.go

fix(online): scope online status per node instead of a global union

2026-06-02 18:33:21 +02:00

custom_geo.go

v3

2026-05-10 02:13:42 +02:00

dist.go

feat(postgres): in-panel backup/restore and consistent CLI backend

2026-05-31 17:53:34 +02:00

group.go

refactor(clients): coherent group management — rename, split, extract

2026-05-28 12:59:20 +02:00

inbound.go

feat(inbounds): add multi-select and bulk delete

2026-05-31 00:29:24 +02:00

index.go

fix(auth): invalidate sessions when 2FA is enabled, fix dev 401 loop

2026-05-13 14:08:16 +02:00

login_limiter_test.go

refactor(websocket): split controller into service + thin controller

2026-05-08 00:00:44 +02:00

login_limiter.go

Implement CSRF protection and security hardening across the application (#4179)

2026-05-07 23:36:11 +02:00

node.go

fix(node): fix "invalid input" on save and gate save on connectivity

2026-06-02 13:57:02 +02:00

server.go

feat(dashboard): more System History metrics, persistence & localized labels

2026-06-03 12:16:31 +02:00

setting.go

feat: complete Zod migration of frontend + bulk client batching (#4599)

2026-05-27 04:26:50 +02:00

util_test.go

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

util.go

Client/inbound resilience + Postgres pool tuning + schema fixes (#4607)

2026-05-27 22:51:37 +02:00

websocket.go

v3

2026-05-10 02:13:42 +02:00

xray_setting.go

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

xui.go

fix(panel): register /groups SPA route so hard refresh returns index.html

2026-06-03 02:17:56 +02:00