Skip to content
Ordermatic Docs

Changelog

[Unreleased] - 2024-01-XX

Section titled “[Unreleased] - 2024-01-XX”

⚠️ Breaking Changes

Section titled “⚠️ Breaking Changes”
  • ERP Connection Management: Changed authorization requirements for all ERP connection endpoints from requireAuth to requireAdmin, enforcing admin-only access:
    • Affected Endpoints:
      • GET /api/erp/connections - List connections
      • POST /api/erp/connections - Create connection
      • GET /api/erp/connections/[id] - Get connection details
      • PUT /api/erp/connections/[id] - Update connection
      • DELETE /api/erp/connections/[id] - Delete connection
      • POST /api/erp/connections/[id]/sync - Sync connection data
      • GET /api/erp/connections/[id]/access - List connection access
      • POST /api/erp/connections/[id]/access - Grant connection access
      • DELETE /api/erp/connections/[id]/access/[targetUserId] - Remove connection access
      • GET /api/erp/connections/test - Test connection endpoints
    • Previous Behavior: Any authenticated user could manage ERP connections
    • New Behavior: Only admin users can manage ERP connections
    • Impact: Non-admin users can no longer create, update, delete, sync, or manage access to ERP connections
    • Migration: Ensure users who need to manage ERP connections have admin roles
    • Documentation: See detailed migration guide for complete instructions

Fixed

Section titled “Fixed”

  • GitHub Actions JSON Parsing Error: Fixed incorrect use of fromJson() with string literals in deployment workflows. Changed from fromJson(needs.build.outputs.web-built || 'false') to needs.build.outputs.web-built == 'true' for proper boolean evaluation.

  • Workflow Version Consistency: Standardized all GitHub Actions to latest stable versions across all workflows:

    • Node.js & Package Managers: Updated to Node.js v20 and pnpm v10.11.1 consistently
    • Core Actions: Updated to actions/checkout@v4, actions/setup-node@v4, actions/setup-python@v5
    • Artifact Actions: Updated to actions/upload-artifact@v4, actions/download-artifact@v4
    • Docker Actions: Updated to docker/setup-buildx-action@v3, docker/build-push-action@v6
    • Specialized Actions: Updated to dorny/paths-filter@v3, cloudflare/pages-action@v1.3.0
    • Security Actions: Updated to aquasecurity/trivy-action@0.30.0, github/codeql-action/upload-sarif@v3
    • pnpm Action: Updated to pnpm/action-setup@v4 across all workflows

  • Coolify CLI Issue: Replaced non-existent @coolify/cli package with webhook-based deployment approach:

    • Removed CLI installation and authentication steps
    • Implemented webhook triggers for each service deployment
    • Updated required secrets from authentication credentials to webhook URLs

Updated

Section titled “Updated”
  • Documentation: Updated GitHub README and deployment guides to reflect webhook-based approach
  • Secrets Configuration: Changed required secrets from Coolify credentials to webhook URLs:
    • COOLIFY_STAGING_WEBHOOK_WEB, COOLIFY_STAGING_WEBHOOK_PDF_API, COOLIFY_STAGING_WEBHOOK_PDF_WORKER
    • COOLIFY_PRODUCTION_WEBHOOK_WEB, COOLIFY_PRODUCTION_WEBHOOK_PDF_API, COOLIFY_PRODUCTION_WEBHOOK_PDF_WORKER

Technical Details

Section titled “Technical Details”
  • Fixed conditional deployment logic in deploy-staging.yml and deploy-production.yml
  • Standardized GitHub Actions versions across branch-protection.yml and ci-cd-pipeline.yml
  • Implemented proper webhook-based deployment pattern for Coolify integration
  • Updated troubleshooting documentation to reflect webhook approach