Repository navigation
Support restricted device networks and V1 migration in v2.3.0 - #45
Merged
Merged
Conversation
added 5 commits
November 3, 2026 20:00
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Devices reachable from browsers/automation but blocked from portal HTTP access can now retain supplied favicons. Add a write-scoped supply/preview/remove API and local file picker, pin sanitised cache bytes with provenance/audit/SSE, retain them through backup restore and server retries, prioritise foreground jobs, skip orphan retries and pause repeated permanent failures.
Add opt-in direct browser images with a visible-target CSP allowlist and client/server image checks against live device URLs. Trusted HTTPS tests cover Chromium/Firefox mixed-content differences, certificate errors, non-images, timeouts and SSR image-error fallback without weakening browser security.
The matching 2.3.0 collection adds
entry_favicon, controller-based V1 image supply, configurable API delegation, managed/imported checks, favicon overrides and split tag columns. Existing arguments remain valid; public field values no longer mask result names, while legacy secrets and explicitsecret_valueremain protected. Update the required API/configuration/migration/checks/Ansible/OpenAPI/decision docs and native offline release smoke.Validation: lint, typecheck, production build; 111 app/HTTP tests; 14 browser tests (12 portal plus real HTTPS Chromium/Firefox); 13 Python tests; ansible-test sanity; complete Ansible integration (256 successful tasks, zero failures, second-run/check-mode/diff checks); 28 native automation smoke assertions. CI additionally builds without network and runs published-image smoke on both native architectures before release aliases are published.