Commit Graph

7005 Commits

Author SHA1 Message Date
nicolargo
effcd426fb Memray is not available on Windaube 2026-03-28 11:15:20 +01:00
nicolargo
07f345e233 Replace py-spy by memray for Flamegraph generation 2026-03-28 11:06:26 +01:00
nicolargo
dcb39c3f12 Merge branch 'advisorie/GHSA-7p93-6934-f4q7' into develop 2026-03-28 10:21:12 +01:00
nicolargo
b90a8f2a16 Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard - Mitigate CVE-2026-33533 2026-03-28 10:20:49 +01:00
nicolargo
358d76a225 Merge branch 'advisorie/GHSA-qhj7-v7h7-q4c7' into develop 2026-03-28 09:56:09 +01:00
nicolargo
36bc0216f5 Command Injection via Dynamic Configuration Values - Mitigate CVE-2026-33641 2026-03-28 09:55:51 +01:00
nicolargo
bf6fcb7a54 Format code 2026-03-28 09:37:44 +01:00
nicolargo
58b3551e4e Container plugin crashes with docker.errors.NullResource on Podman pod infra containers #3498 2026-03-28 09:23:09 +01:00
Nicolas Hennion
db0ce35d02 Merge pull request #3503 from mochafreddo/fix/webui-template-response-starlette-compat
fix(webui): support Starlette TemplateResponse signature changes
2026-03-26 16:09:23 +01:00
Jeongwoo Kim
5cf5d22d64 test(webui): mark pytest asserts as nosec for Codacy 2026-03-27 00:04:48 +09:00
Jeongwoo Kim
fe79aa43c5 test: silence pylint in template response regression tests 2026-03-27 00:01:05 +09:00
Jeongwoo Kim
0d0057c8c9 test(webui): add helper docstrings for Codacy 2026-03-26 23:36:26 +09:00
Jeongwoo Kim
25484125ee style(webui): wrap new lines for Codacy 2026-03-26 23:23:29 +09:00
Jeongwoo Kim
8a6284a66c fix(webui): support Starlette TemplateResponse signature changes 2026-03-26 23:02:44 +09:00
Nicolas Hennion
8f0f23581e Merge pull request #3501 from nicolargo/dependabot/github_actions/actions-2c0e19e160
Bump github/codeql-action from 4.33.0 to 4.34.1 in the actions group
2026-03-26 08:05:35 +01:00
dependabot[bot]
62521bcf8c Bump github/codeql-action from 4.33.0 to 4.34.1 in the actions group
Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.33.0 to 4.34.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b1bff81932...3869755554)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 05:29:12 +00:00
Nicolas Hennion
137dc03a11 Lint the code 2026-03-24 08:18:04 +00:00
Nicolas Hennion
3501b79dcc Merge pull request #3497 from s-t-e-v-e-n-k/use-sys-executable
Use sys.executable in the testsuite
2026-03-24 09:09:46 +01:00
Steve Kowalik
5badf71000 Use sys.executable in the testsuite
Rather than looking for a venv python executable, use the existing
sys.executable property to execute the modules required.
2026-03-24 11:19:11 +11:00
Nicolas Hennion
e2c5460c66 Add ClickHouse to supported databases list
Updated the list of supported databases to include ClickHouse.
2026-03-23 11:22:00 +01:00
Nicolas Hennion
cd6f82530d Potential fix for code scanning alert no. 47: Clear-text logging of sensitive information
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-03-23 11:19:21 +01:00
nicolargo
a921a1c828 Update doc 2026-03-22 10:37:22 +01:00
Nicolas Hennion
22db0da0c8 Update clickhouse.rst 2026-03-22 10:36:31 +01:00
nicolargo
d2d8aa4039 Merge branch 'feature/issue3320-clickhouse-exporter' into develop 2026-03-22 10:15:38 +01:00
nicolargo
b6a694f38f Add export to ClickHouse #3320 2026-03-22 10:15:17 +01:00
nicolargo
bf08f61c4a Preparation from PsUtil 8 migration (just add comments to code) - #3472 2026-03-21 14:18:51 +01:00
nicolargo
31da290498 Update stats site for Pypi download 2026-03-21 14:09:41 +01:00
Nicolas Hennion
2b02179bab Merge pull request #3487 from crishoj/feature/lxd-support
add unit tests for LXD container engine
2026-03-21 10:19:44 +01:00
Nicolas Hennion
b6b20aceec Merge pull request #3484 from nicolargo/dependabot/github_actions/actions-78065f0d31
Bump the actions group with 10 updates
2026-03-21 10:19:31 +01:00
Nicolas Hennion
e4116b29d4 Merge pull request #3491 from tupe12334/add-block-no-verify
feat: add block-no-verify PreToolUse hook to .claude/settings.json
2026-03-20 14:26:17 +01:00
Ofek Gabay
7be094b975 feat: add block-no-verify PreToolUse hook to .claude/settings.json
Prevents agents from bypassing git hooks via the hook-skip flag.
2026-03-20 04:11:06 +07:00
Continuous Integration
830cacd0ca Continuous Integration Build Artifacts 2026-03-19 09:30:52 +00:00
Nicolas Hennion
0920b6516e Merge pull request #3489 from nicolargo/dependabot/npm_and_yarn/glances/outputs/static/npm-ed4430d440
Bump the npm group across 1 directory with 6 updates
2026-03-19 10:26:24 +01:00
dependabot[bot]
9f782b5d26 Bump the actions group with 10 updates
Bumps the actions group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `5.0.1` | `6.0.2` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5.0.0` | `8.0.1` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.10.0` | `6.0.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.7.0` | `4.0.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.0.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.19.2` | `7.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.32.6` | `4.32.6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.3.0` |


Updates `actions/checkout` from 5.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](93cb6efe18...de0fac2e45)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](ea165f8d65...bbbca2ddaa)

Updates `actions/download-artifact` from 5.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](634f93cb29...3e5f45b2cf)

Updates `docker/metadata-action` from 5.10.0 to 6.0.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](c299e40c65...030e881283)

Updates `docker/setup-qemu-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](c7c5346462...ce360397dd)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](8d2750c68a...4d04d5d948)

Updates `docker/login-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](c94ce9fb46...b45d80f862)

Updates `docker/build-push-action` from 6.19.2 to 7.0.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](10e90e3645...d08e5c354a)

Updates `github/codeql-action` from 3.32.6 to 4.32.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](820e3160e2...0d579ffd05)

Updates `actions/setup-node` from 5.0.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](a0853c2454...53b83947a5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.32.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-19 05:28:10 +00:00
dependabot[bot]
3419b2dc92 Bump the npm group across 1 directory with 6 updates
Bumps the npm group with 6 updates in the /glances/outputs/static directory:

| Package | From | To |
| --- | --- | --- |
| [hotkeys-js](https://github.com/jaywcjlove/hotkeys-js) | `3.13.15` | `4.0.2` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.1` | `2.17.2` |
| [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) | `13.0.1` | `14.0.0` |
| [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.4.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.57.0` | `8.57.1` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.0.2` |



Updates `hotkeys-js` from 3.13.15 to 4.0.2
- [Release notes](https://github.com/jaywcjlove/hotkeys-js/releases)
- [Commits](https://github.com/jaywcjlove/hotkeys-js/compare/v3.13.15...v4.0.2)

Updates `sanitize-html` from 2.17.1 to 2.17.2
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.2/packages/sanitize-html)

Updates `copy-webpack-plugin` from 13.0.1 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/copy-webpack-plugin/compare/v13.0.1...v14.0.0)

Updates `globals` from 16.5.0 to 17.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v16.5.0...v17.4.0)

Updates `typescript-eslint` from 8.57.0 to 8.57.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/typescript-eslint)

Updates `webpack-cli` from 6.0.1 to 7.0.2
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.0.2)

---
updated-dependencies:
- dependency-name: hotkeys-js
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: sanitize-html
  dependency-version: 2.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: globals
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: typescript-eslint
  dependency-version: 8.57.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: webpack-cli
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-19 05:25:00 +00:00
Christian Rishøj
139506b109 #3480 add unit tests for LXD container engine
- TestLxdStatsFetcher: CPU delta, memory fallback, network loopback exclusion, thread lifecycle
- TestLxdExtensionGenerateStats: stopped/running instances, proxy device ports, image config
- TestLxdExtensionUpdate: running filter, all_tag, cluster node filter, cleanup of removed instances

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-15 19:09:44 +01:00
nicolargo
ea54cffd1a Add Claude skills for mainteners 2026-03-15 19:02:09 +01:00
nicolargo
56e4db91dc Make the WebUI build before the packages and Docker images build 2026-03-15 18:39:13 +01:00
nicolargo
1edaa9296e Correct issue with permissions in Github Workflows 2026-03-15 18:28:14 +01:00
nicolargo
599c193258 Harden GitHub Actions workflows: minimal permissions, SHA pins, timeouts
- Add top-level  on caller (ci.yml) and scheduled/event
    workflows (inactive_issues.yml, needs_contributor.yml)
  - Declare explicit job-level permissions across all reusable workflows
  - Pin all third-party actions to immutable commit SHAs (was using mutable
    tags, including the critical )
  - Align codeql-action on v3 across quality.yml and cyber.yml
  - Add timeout-minutes on every job to prevent runaway builds
  - Add concurrency group on ci.yml with cancel-in-progress for PRs only
  - Add .github/dependabot.yml for automated SHA and npm dependency updates
2026-03-15 18:23:06 +01:00
nicolargo
f705606283 Add Pylxd in the main README.rst file 2026-03-15 18:08:55 +01:00
nicolargo
f6bc98451e Update docs and deps 2026-03-15 16:44:28 +01:00
nicolargo
a62247aeb7 Merge branch 'crishoj-feature/lxd-support' into develop 2026-03-15 16:32:22 +01:00
nicolargo
b339c71bd3 Merge branch 'feature/lxd-support' of github.com:crishoj/glances into crishoj-feature/lxd-support 2026-03-15 16:31:56 +01:00
Christian Rishøj
c53cb847b9 #3480 fix review nits
- Remove unnecessary hasattr guard on get_refresh()
- Init _last_stats_computed_time to time.time() to avoid stale first reading
- Guard against ZeroDivisionError in IO/network rate calculations
- Use title-case status from pylxd directly
- Add trailing newline to containers.rst

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-15 14:50:48 +01:00
Christian Rishøj
d6395e8d3e #3480 address review feedback
- Split _compute_activity_stats into sub-functions per review feedback
- Pass Glances refresh interval as LXD poll interval
- Update containers docs to mention LXD/pylxd

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-15 14:44:21 +01:00
Christian Rishøj
982ed8da3a #3480 change attribution 2026-03-15 14:38:23 +01:00
nicolargo
8506809641 Update CLAUDE.md file 2026-03-15 13:36:58 +01:00
nicolargo
227e8b0d06 Add CLAUDE.md file for mainteners 2026-03-15 11:50:01 +01:00
nicolargo
4e1de1c37b [ALERTS] Sometime the top process list is not the good one #3481 2026-03-15 10:54:04 +01:00