epistemophiliac/frappe_docker
1
0
Fork 0
mirror of https://github.com/frappe/frappe_docker.git synced 2026-06-17 13:55:08 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
1989 commits 1 branch 14 tags 111 MiB
Commit graph

1989 commits

This branch
This branch
All branches
Author SHA1 Message Date
dependabot[bot]
3e1e045f7a
chore(deps): bump pnpm/action-setup from 5 to 6 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 5 to 6.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v5...v6)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 08:39:38 +00:00
dependabot[bot]
526119247f
chore(deps): bump docker/bake-action from 7.0.0 to 7.1.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 08:39:30 +00:00
Daniel Radl
bb3faf8a25
Merge pull request #1867 from AMR-Mannesmann/docs/add-maintainers-file 
docs: add MAINTAINERS.md to document project maintainers
 2026-04-12 15:15:16 +02:00
Daniel Radl
adaf37dfa5 docs: add MAINTAINERS.md to document project maintainers 2026-04-12 15:12:42 +02:00
github-actions
f36bde7aca chore: Update example.env 2026-04-11 05:32:15 +00:00
Daniel Radl
9d566ecc3d
Merge pull request #1866 from AMR-Mannesmann/chore/vscode-watcher-exclude 
chore(vscode): exclude build artifacts and deps from file watcher
 2026-04-10 17:33:34 +02:00
Daniel Radl
91308ce43d chore(vscode): exclude build artifacts and deps from file watcher 2026-04-10 16:51:19 +02:00
RocketQuack
1aa7f670ad
Merge pull request #1864 from Rocket-Quack/fix/security-updates-2 
fix(docs): override vulnerable vite dependency
 2026-04-09 13:26:55 +02:00
RocketQuack
90d9d25eb3 fix(docs): override vulnerable vite dependency 2026-04-09 13:17:52 +02:00
github-actions
dfb6ee4f08 chore: Update example.env 2026-04-09 10:37:09 +00:00
github-actions
20169854f5 chore: Update example.env 2026-04-09 05:17:52 +00:00
RocketQuack
7382ba247c
Merge pull request #1862 from frappe/dependabot/pip/pytest-9.0.3 
chore(deps): bump pytest from 9.0.2 to 9.0.3
 2026-04-08 14:15:03 +02:00
dependabot[bot]
f521624b1b
chore(deps): bump pytest from 9.0.2 to 9.0.3 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-08 08:24:16 +00:00
github-actions
031d1964a1 chore: Update example.env 2026-04-07 18:26:31 +00:00
OmarElaraby26
8892908f5d docs: require Docker Engine v23+ instead of setting DOCKER_BUILDKIT=1 
BuildKit has been the default builder since Docker Engine 23.0 (Feb 2023),
so prefixing the example build commands with DOCKER_BUILDKIT=1 is redundant
on any supported install. Replace the prefix with an explicit prerequisite
note so the requirement lives with the user's environment, not the example.

The build relies on BuildKit secret mounts (--secret) to keep apps.json
tokens out of image layers, which is why a real BuildKit-default engine
is mandatory rather than merely recommended.

Addresses review feedback on PR #1861.
 2026-04-07 20:12:29 +02:00
OmarElaraby26
ae275df161 fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount 
APPS_JSON_BASE64 is stored in image layer metadata, permanently exposing
private repo tokens (GitHub PATs) to anyone with image pull access.

Replace --build-arg with --mount=type=secret so that apps.json is only
available during the RUN step and never committed to any layer.

Refs: https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
 2026-04-05 22:24:53 +02:00
RocketQuack
65d9510a2b
Merge pull request #1858 from sujaldev/patch-1 
docs: fix dead link for environment variables reference.
 2026-04-04 14:41:50 +02:00
Sujal Singh
259aa24c64 docs: fix dead link for environment variables reference 2026-04-04 06:44:45 +05:30
Daniel Radl
558c8b676c
Merge pull request #1856 from ews-pgasser/feat/add-pre-commit-postCreateCommand 
Add pre-commit to devcontainer postCreateCommand
 2026-04-03 20:08:32 +02:00
RocketQuack
44acc39d35
Merge pull request #1857 from BurningDog/fix/correct-link-to-env-vars-doc 
fix: correct links to documentation
 2026-04-03 12:40:32 +02:00
Roger Saner
563e895ad0
fix: update compose.yaml 
Correct URL for Build Setup
 2026-04-02 18:55:05 +02:00
Roger Saner
c7d61a5a6d
fix: update example.env 
Correct link to env vars doc
 2026-04-02 18:43:23 +02:00
ews-pgasser
c1236d9fcf feat: add pre-commit to devcontainer postCreateCommand 2026-04-02 16:01:41 +02:00
Daniel Radl
bc24e3190e
Merge pull request #1855 from ews-pgasser/fix/update-erpnext-to-version-16 
Update Frappe and ERPNext branches to version 16
 2026-04-02 13:49:56 +02:00
Daniel Radl
023af5214c
chore: add EOF newline 2026-04-02 13:48:10 +02:00
ews-pgasser
fc60479969 chore: update erpnext branch to version-16 2026-04-02 10:00:40 +02:00
ews-pgasser
6c05252b9f chore: update frappe branch to version-16 2026-04-02 10:00:33 +02:00
RocketQuack
1e78e56ffd
Merge pull request #1854 from Rocket-Quack/fix/docs-home-link 
fix(docs): correct single compose setup home link
 2026-04-01 19:58:07 +02:00
RocketQuack
56096de423
Merge pull request #1853 from Rocket-Quack/fix/security-updates 
Fix/security updates
 2026-04-01 19:45:08 +02:00
RocketQuack
8d83c2dd04 fix(docs): correct single compose setup home link 2026-04-01 19:44:12 +02:00
RocketQuack
3c076d0ecc fix(docs): override vulnerable minimatch and picomatch 2026-04-01 19:25:51 +02:00
RocketQuack
1b105dac84 fix(docs): override vulnerable brace-expansion dependency 2026-04-01 17:45:49 +02:00
Daniel Radl
65ab824d9e
Merge pull request #1852 from AMR-Mannesmann/fixnginx-redirects-leak-internal-port 
fix: nginx redirects leak internal port
 2026-03-31 16:45:20 +02:00
Daniel Radl
eccae398c5
fix(nginx): set absolute_redirect off 2026-03-31 16:40:41 +02:00
github-actions
40c741b751 chore: Update example.env 2026-03-30 18:30:39 +00:00
Daniel Radl
8ccccdbdd5
fix: nginx redirects leak internal port 2026-03-30 12:08:46 +02:00
RocketQuack
d1289a8604
Merge pull request #1849 from frappe/dependabot/github_actions/actions/deploy-pages-5 
chore(deps): bump actions/deploy-pages from 4 to 5
 2026-03-26 12:48:20 +01:00
dependabot[bot]
60a27952c9
chore(deps): bump actions/deploy-pages from 4 to 5 
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4 to 5.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](https://github.com/actions/deploy-pages/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 08:22:38 +00:00
RocketQuack
e5ce055690
Merge pull request #1848 from trustedcomputer/fix-snippits-permission-error 
fix: copy security_headers.conf before chown
 2026-03-25 10:06:23 +01:00
Trusted Computer
51e3fa8a46
fix: copy security_headers.conf before chown 2026-03-24 18:48:20 -07:00
RocketQuack
c1b9bf4633
Merge pull request #1844 from frappe/dependabot/github_actions/pnpm/action-setup-5 
chore(deps): bump pnpm/action-setup from 4 to 5
 2026-03-24 17:31:30 +01:00
github-actions
316c02bd88 chore: Update example.env 2026-03-23 17:02:54 +00:00
dependabot[bot]
20c040c25b
chore(deps): bump pnpm/action-setup from 4 to 5 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 5.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v4...v5)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-20 08:22:28 +00:00
RocketQuack
a1ee343f21
Merge pull request #1842 from frappe/dependabot/npm_and_yarn/docs/minimatch-10.2.4 
chore(deps): bump minimatch from 10.1.1 to 10.2.4 in /docs
 2026-03-19 13:41:09 +01:00
RocketQuack
08e97d1dd2 Merge branch 'dependabot/npm_and_yarn/docs/minimatch-10.2.4' of https://github.com/frappe/frappe_docker into dependabot/npm_and_yarn/docs/minimatch-10.2.4 2026-03-19 13:39:42 +01:00
RocketQuack
b0cd694f6e
Merge pull request #1841 from frappe/dependabot/npm_and_yarn/docs/isaacs/brace-expansion-5.0.1 
chore(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /docs
 2026-03-19 12:27:46 +01:00
RocketQuack
2c7527c121 chore(pre-commit): exclude docs pnpm lockfile from prettier 2026-03-19 12:25:24 +01:00
dependabot[bot]
625480da64
chore(deps): bump minimatch from 10.1.1 to 10.2.4 in /docs 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 10.1.1 to 10.2.4.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v10.1.1...v10.2.4)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 11:02:18 +00:00
dependabot[bot]
b314cfd60c
chore(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /docs 
Bumps @isaacs/brace-expansion from 5.0.0 to 5.0.1.

---
updated-dependencies:
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 11:02:11 +00:00
RocketQuack
ca1eac5d7c
Merge pull request #1805 from adithyaappu/docs/vitepress-docs 
Docs/vitepress docs
 2026-03-19 12:01:10 +01:00