8247 Commits

Author SHA1 Message Date
Gero Posmyk-Leinemann
9b7dd9f5c7
[dev] Use "ping" in redis-cli, which is compatible with newer versions (#20989)
* [dev] Use "-ping" in redis-cli, which is compatible with newer versions

* Fix ping invocation

Co-authored-by: iQQBot <tianshi8650@gmail.com>

---------

Co-authored-by: iQQBot <tianshi8650@gmail.com>
2025-08-01 05:52:47 -04:00
Robo Quat
0ace0a96fe
[VS Code Browser] Build stable code 1.102.3 (#20973)
* [VS Code Browser] Build stable code `1.102.3`

* Upgrade to node 22

* Update codeCommit

---------

Co-authored-by: mustard <huiwen@gitpod.io>
2025-07-31 16:06:46 -04:00
Gero Posmyk-Leinemann
266d6536e5
[server] Implement context env var validation behind context_env_var_validation ff (#20968)
Co-authored-by: Ona <no-reply@ona.com>
2025-07-24 02:23:35 -04:00
iQQBot
7137b3a8ba
[proxy] add security headers (#20970)
Co-authored-by: Ona <no-reply@ona.com>
2025-07-23 07:44:34 -04:00
iQQBot
6b9ed2c573
fix: prevent XSS in returnToPath parameter by validating protocol (#20965)
The returnToPath parameter validation was vulnerable to XSS attacks using
javascript: protocol URLs with matching hostnames (e.g., javascript://gitpod.io/).
This fix ensures only HTTPS URLs with matching hostnames are trusted.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-07-22 07:29:34 -04:00
Mirco Kater
c3d5051d5e
Update AppNotifications.tsx (#20963) 2025-07-21 07:47:32 -04:00
Robo Quat
1960e8ebef
update index (#20922) 2025-07-09 23:01:21 -04:00
iQQBot
830d9c91b0
[server] tolerate deleted users for listWorkspaceSessions (#20943)
Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2025-07-09 02:03:21 -04:00
iQQBot
b0df8ecb69
[image-builder-bob] update buildkit alpine to 3.22 (#20942) 2025-07-08 10:30:20 -04:00
mustard
e93eb6cc8c
[server] Fix mismatch collation issue in workspace instance metrics query (#20933) 2025-07-01 06:07:13 -04:00
Robo Quat
25a0a64070
[VS Code Browser] Build stable code 1.101.1 (#20920)
* [VS Code Browser] Build stable code `1.101.1`

* Update agent

* 1

* Update build agent

* Disable signature verification

---------

Co-authored-by: mustard <huiwen@gitpod.io>
Co-authored-by: Huiwen <mhqnwt@gmail.com>
2025-06-25 05:06:07 -04:00
Gero Posmyk-Leinemann
236cab0a7d
[db] Fix collation mismatch between 5.7/8.0.xx for d_b_org_env_var and d_b_workspace_instance_metrics (#20916) 2025-06-23 03:04:05 -04:00
Robo Quat
d91dfe0482
update index (#20906) 2025-06-20 00:16:02 -04:00
Gero Posmyk-Leinemann
c5a55dd02a
[claude/cline] See if it works to integrate memory-bank into Claude Code (#20913)
* [cline] Fix memory-bank rules

* [claude] Integrate with memory-bank (attempt)
2025-06-19 11:41:02 -04:00
Siddhant Khare
a0cf09dabb
Redesign login page with Ona banner & Banners in Workspace start pages (#20909)
* Add Ona banner to start page with compact and full versions

* Login page -  Ona right panel for waitlist sign-up and information for gitpod.io users only

* only send email what user submitted

* Refactor login component to use installation configuration for enterprise detection and update learn more button to a link

* improve login page

* Update Ona banner links to point to Gitpod solutions and add dismiss functionality

* improve login page

* nice keyB

* addressing review nit

* Refactor OnaBanner and AppNotifications components for improved layout and dismiss functionality

* Update OnaBanner positioning logic and adjust text alignment for improved layout

* minor improvements
2025-06-19 09:53:02 -04:00
Siddhant Khare
2946c9a0aa
Add Ona banner notification (#20908)
* Add Ona banner notification with gradient background

- Replace Gitpod Classic sunset message with Ona introduction
- Add Ona wordmark SVG import and display
- Apply gradient background for Ona banner
- Set white text color and underlined link to https://ona.com/
- Link styling with hover effect (underline disappears on hover)

* nit fix
2025-06-17 08:21:00 -04:00
mustard
a0a2dc6f99
Improve JetBrains port processing performance (#20907)
* Improve JetBrains port processing performance

Add throttling mechanism to prevent rapid successive port updates, reducing UI flicker and improving performance in the JetBrains backend plugin.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

* revert sdkman path

---------

Co-authored-by: Claude <noreply@anthropic.com>
2025-06-17 04:44:00 -04:00
Robo Quat
79b857aa31
update index (#20863) 2025-06-16 03:42:59 -04:00
Gero Posmyk-Leinemann
3b1f9888f4
[registry facade] Don't retry requests with error messages that were successful (#20889) 2025-06-09 16:16:37 -04:00
Siddhant Khare
5091a5e6d4
Ona banner in Gitpod classic (#20882)
* Add Ona banner component and track waitlist joined event

* Add success toast notification for Ona banner waitlist click
2025-06-09 03:15:36 -04:00
Gero Posmyk-Leinemann
abfbb95bd2
[supervisor] Drop feature flag supervisor_terminal_no_deadline_exceeded (#20869) 2025-06-06 10:01:14 -04:00
Gero Posmyk-Leinemann
28be3429bb
[registry-facade] Properly retry fetching mainfests/config as well (#20880) 2025-06-06 08:30:13 -04:00
Gero Posmyk-Leinemann
6428470ac3
[registry-facade] Do retry if copying a blob fails mid way (#20879) 2025-06-06 05:22:13 -04:00
Gero Posmyk-Leinemann
c568be5978
[image-builder] Introduce retry for all resolver requests (timeout 15s, up to 3 times) for all network-related issues (#20868)
* [image-builder] Fix generate.sh

* [image-builder-api] Add use_retry_client to ResolveBaseImageRequest and BuildRequest

* [image-builder] Use req.GetUseRetryClient() instead of feature flag resolved on startup

[image-builder] Drop superfluous imports

[image-builder] Switch to github.com/hashicorp/go-retryablehttp, incl. better unit tests at orchestrator level!

* [server] Pass "useRetryClient" on all requests to image-builder
2025-06-05 11:30:13 -04:00
mustard
8cdc2a1a45
[JetBrains] Make backend-plugin compatible with 2025.2 (#20871)
* Update Platform Version of JetBrains Backend Plugin (EAP) to

* 1

* Fix

* Add test cases back

* Fix stable build

* Fix build

* Fix rider latest build

---------

Co-authored-by: Robo Quat <roboquat@gitpod.io>
2025-06-04 12:21:12 -04:00
Cornelius A. Ludmann
f1dc3a5bc2
[scrubber] Scrub Git URLs in log messages (#20843) 2025-06-02 15:04:10 -04:00
Gero Posmyk-Leinemann
cf24e1c3c6
[image-builder] Avoid returning "Unknown" (#20854)
* [cline] Drop learning journal (left-over)

* [image-builder-mk3] Avoid sending "Unknown" error code in all cases

* [ws-manager-mk2] image-builder proxy: Prefix proxied gRPC services to avoid name clashes with the original service

Also, avoid sending "Unknown" errors, and wrap it into meaningfull gRPC status codes (+ additional logging)
2025-06-02 06:08:10 -04:00
Gero Posmyk-Leinemann
7d1a8eb13c
[server] Fix spicedb retry on DEADLINE_EXCEEDED & UNAVAILABLE (#20867) 2025-06-02 05:29:09 -04:00
Robo Quat
943d84b709
update index (#20820)
Co-authored-by: iQQBot <8299500+iQQBot@users.noreply.github.com>
2025-05-29 08:01:00 -04:00
iQQBot
ffe1df9740
Fix redigo package missing (#20859) 2025-05-29 06:01:00 -04:00
iQQBot
301f1b73da
upgrade golang to 1.24.3 (#20846)
* upgrade golang to 1.24.3

* fix caddy

* update go debug

* fix non-constant format string in call to fmt Format method
2025-05-28 13:32:00 -04:00
iQQBot
956ee800ca
[ws-proxy] fix leak idle connection cache (#20857) 2025-05-28 08:52:59 -04:00
Cornelius A. Ludmann
b007b1dcaa
Redact args in the logs of audit log service (#20853) 2025-05-28 04:35:59 -04:00
Robo Quat
65b0538a97
[JetBrains] Update Platform Version from JetBrains Gateway Plugin (Stable) (#20815)
* Update Platform Version of JetBrains Gateway Plugin (Stable) to

* update pluginSinceBuild

---------

Co-authored-by: mustard <huiwen@gitpod.io>
2025-05-28 02:30:59 -04:00
Robo Quat
df2cfcacc7
[JetBrains] Update IDE images to new build version (#20769) 2025-05-28 02:29:59 -04:00
Robo Quat
c917913d0a
Update Platform Version of JetBrains Gateway Plugin (EAP) to (#20675) 2025-05-28 02:06:59 -04:00
Gero Posmyk-Leinemann
175fb0bebd
[dev] Bump node 18.x to 22.15.1 (#20852)
* [node] Bump docker builder images 18.20.7 -> 22.15.1

* [dev] Bump dev image references (18.20.7 -> 22.15.1)

* [dev] Bump devcontainer nodejs to 22.15.1
2025-05-27 10:53:59 -04:00
Gero Posmyk-Leinemann
45070dd11f
[supervisor] Don't emit DeadlineExceeded if client closes connection (feature flag: supervisor_terminal_no_deadline_exceeded) (#20851) 2025-05-27 09:51:59 -04:00
mustard
3f611bf5bd
[supervisor] fix ports forwarding hangs issue (#20841)
* [supervisor] fix ports forwarding hangs issue

* fix unit tests

* Fix lock issue

* remove useless code
2025-05-27 03:36:58 -04:00
mustard
e04327e0e2
[supervisor] add new .gitpod.yml on-port option ignore-completely (#20828)
* [supervisor] add new .gitpod.yml on-port option `ignore-completely`

* fixup

* fix serve

* fixup
2025-05-26 01:53:57 -04:00
iQQBot
e5a2c823ad
[ws-manager-mk2] do cleanup of failed workspace with unknown status (#20829) 2025-05-22 07:29:06 -04:00
iQQBot
2bce70be37
[ws-manager-mk2] always update workspace pod ip (#20830) 2025-05-21 16:54:06 -04:00
iQQBot
6385d6f4c9
[ws-proxy] prevent podIP being used with many workspaces (#20826)
* [ws-proxy] prevent podIP being used with many workspaces

* Update components/ws-proxy/pkg/proxy/infoprovider.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-05-20 16:46:05 -04:00
Cornelius A. Ludmann
1f06a5330f
Update Gitpod client libraries (#20825) 2025-05-20 16:01:05 -04:00
Mirco Kater
dcdf9293c2
Update privacy policy date to May 16th, 2025 (#20823) 2025-05-19 07:37:03 -04:00
Robo Quat
7183b9e8ad
update index (#20817) 2025-05-16 09:14:01 -04:00
Gero Posmyk-Leinemann
52848de54f
[server, dashboard, db] Org-wide "maintenance mode" (#20813)
* [dashboard] Initial infra rollout page, incl. list running workspaces

* [server, db, dashboard] Allow org-owner to stop workspace on all workspaces in the organization

Also, fix maintenanceMode update

* [public-api, db, server, dashboard] Introduce MaintenanceNofitication banner that can be configured per org

* review comments: use mutation instead of callback for state mutation

* Fix workspace start prevention

* Review comments around banners and rendering

 - permissions issues
 - add banner to /new page
 - a bunch of rendering issues and alignments
 - renaming some things for clarity (dropped "Scheduled" prefixes)
 - only allow up to 255 characters in notification messages

* [dashboard] Only show Admin entry for dedicated

* [server] Fix permissions for setMaintenanceMode to "maintenance"

* [dashboard] Adjusted copy incl. default notification message

* Review coments: re-use and fix styles, and naming

Co-authored-by: Filip Troníček <filip@gitpod.io>

* Minor copy improvements

* [server] Fix bogus permission check in stopWorkspace

---------

Co-authored-by: Filip Troníček <filip@gitpod.io>
2025-05-15 09:57:00 -04:00
Robo Quat
29ed2d7312
update index (#20784) 2025-05-14 03:49:59 -04:00
Kyle Brennan
6f3319ea59
[gitpod-protocol] handle host:port:token for getGitpodImageAuth (#20806)
* [gitpod-protocol] handle host:token and host:port:token for getGitpodImageAuth

* Cleanup

* Improve readability

* Code review feedback

* Update components/gitpod-protocol/src/protocol.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* [supervisor] tests to cover insertCredentialsIntoConfig

* Fix tests

* [supervisor] handle auth token like `host:port:token`

* [image-builder-mk3] handle host:port:token for auth

* Fix

* Cleanup

* Cleanup

* Cleanup

* Cleanup

* [image-builder-bob] tolerate host:port:token

Special case is to strip port for 443

* Handle center values & code review feedback

* Remove extra/unnecessary trim

* [bob] proxy: explicit and implicit fallback for exact header matching for auth proxy

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Gero Posmyk-Leinemann <gero@gitpod.io>
2025-05-13 03:11:58 -04:00
Cornelius A. Ludmann
e62d71dde8
Create SBOMs and scan for vulnerablities (#20801)
* Add sbom.enabled=true

* Replace trivy scan in build.yml

* Only scan relevent packages

* Add vulnerability ignore rules

* Add a daily vulnerability scan

* Update dev image

* Remove not needed env vars
2025-05-08 09:42:53 -04:00