build: publish

build: trigger build image
build: release
2026-10-25 10:04:07 +08:00 · 2026-10-22 15:43:26 +08:00 · 2026-10-22 15:43:16 +08:00 · 2026-10-22 15:37:12 +08:00 · 2026-10-22 15:30:12 +08:00 · 2026-10-22 15:24:34 +08:00
39 changed files with 345 additions and 71 deletions
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+### Bug Fixes
+
+* 非企业模式下禁止API密钥指定项目ID并校验权限【安全加强】 ([f50651e](https://github.com/certd/certd/commit/f50651ef91813b529b8498ddefe0f66b8b7946da))
+* **authority:** 修复权限校验时角色值错误的问题 ([5326d7d](https://github.com/certd/certd/commit/5326d7dff3967974d70090b45f8580a155c1a032))
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+### Bug Fixes
+
+* **docker:** 将构建和运行镜像的 Node.js 固定到 22.23.4 安全版本 ([#817](https://github.com/certd/certd/issues/817)) ([113c96b](https://github.com/certd/certd/commit/113c96b866e2ec5c85e37e42150445ed8b0eefbe))
+* **pipeline:** 修复定时触发器cron归一化截取位置错误导致日期字段被吃掉的问题 ([#813](https://github.com/certd/certd/issues/813)) ([7ac9101](https://github.com/certd/certd/commit/7ac9101266f2821fb13ff68ea6d36969c9485675))
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+### Bug Fixes
+
+* 修复修改密码时校验表单字段的错误 ([28e4f70](https://github.com/certd/certd/commit/28e4f70e494f7c56202a8ca4708718c836fff702))
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 ### Bug Fixes
@@ -3,6 +3,39 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+### Bug Fixes
+
+* 非企业模式下禁止API密钥指定项目ID并校验权限【安全加强】 ([f50651e](https://github.com/certd/certd/commit/f50651ef91813b529b8498ddefe0f66b8b7946da))
+* **authority:** 修复权限校验时角色值错误的问题 ([5326d7d](https://github.com/certd/certd/commit/5326d7dff3967974d70090b45f8580a155c1a032))
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+### Bug Fixes
+
+* **docker:** 将构建和运行镜像的 Node.js 固定到 22.23.4 安全版本 ([#817](https://github.com/certd/certd/issues/817)) ([113c96b](https://github.com/certd/certd/commit/113c96b866e2ec5c85e37e42150445ed8b0eefbe))
+* **pipeline:** 修复定时触发器cron归一化截取位置错误导致日期字段被吃掉的问题 ([#813](https://github.com/certd/certd/issues/813)) ([7ac9101](https://github.com/certd/certd/commit/7ac9101266f2821fb13ff68ea6d36969c9485675))
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+### Bug Fixes
+
+* 修复修改密码时校验表单字段的错误 ([28e4f70](https://github.com/certd/certd/commit/28e4f70e494f7c56202a8ca4708718c836fff702))
+
+## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)
+
+### Bug Fixes
+
+* 修复腾讯云CLB部署证书逻辑 ([a67d5bc](https://github.com/certd/certd/commit/a67d5bca2dd12e157e45ec1b8abff54efcbdfa84))
+
+### Performance Improvements
+
+* 为PEM输入组件添加文件拖拽上传功能 ([cfd3844](https://github.com/certd/certd/commit/cfd384485f212cdea0b08e4b35a3f19a1acfe026))
+* 新增更新金山云KCM SLB证书插件 ([62751be](https://github.com/certd/certd/commit/62751bee7a5e00245bb4dd840a5f4ea35565616a))
+* 支持ikuai部署证书 ([5f83693](https://github.com/certd/certd/commit/5f83693423ec5ccd08d7bb03e4fb8315dbb8b931))
+* **baota:** 宝塔站点全自动部署插件支持部署docker站点 ([61ef971](https://github.com/certd/certd/commit/61ef971518eeccbc31b09c06ec1b48589929d6bb))
+
 ## [1.45.1](https://github.com/certd/certd/compare/v1.45.0...v1.45.1) (2026-10-14)

 ### Bug Fixes
@@ -9,5 +9,5 @@
    }
  },
  "npmClient": "pnpm",
-  "version": "1.45.2"
+  "version": "1.45.5"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/publishlab/node-acme-client/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.45.4](https://github.com/publishlab/node-acme-client/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.45.3](https://github.com/publishlab/node-acme-client/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/acme-client
+
 ## [1.45.2](https://github.com/publishlab/node-acme-client/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/acme-client
@@ -3,7 +3,7 @@
    "description": "Simple and unopinionated ACME client",
    "private": false,
    "author": "nmorsman",
-    "version": "1.45.2",
+    "version": "1.45.5",
    "type": "module",
    "module": "./dist/index.js",
    "main": "./dist/index.js",
@@ -18,7 +18,7 @@
        "types"
    ],
    "dependencies": {
-        "@certd/basic": "^1.45.2",
+        "@certd/basic": "^1.45.5",
        "@peculiar/x509": "^1.11.0",
        "asn1js": "^3.0.5",
        "axios": "^1.9.0",
@@ -77,5 +77,5 @@
    "bugs": {
        "url": "https://github.com/publishlab/node-acme-client/issues"
    },
-    "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+    "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/basic
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 ### Performance Improvements
@@ -1 +1 @@
-21:07
+15:24
@@ -1,7 +1,7 @@
 {
  "name": "@certd/basic",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -54,5 +54,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/pipeline
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 ### Performance Improvements
@@ -1,7 +1,7 @@
 {
  "name": "@certd/pipeline",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -21,8 +21,8 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/basic": "^1.45.2",
-    "@certd/plus-core": "^1.45.2",
+    "@certd/basic": "^1.45.5",
+    "@certd/plus-core": "^1.45.5",
    "dayjs": "^1.11.7",
    "lodash-es": "^4.17.21",
    "reflect-metadata": "^0.2.2"
@@ -51,5 +51,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/lib-huawei
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-huawei",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
  "types": "./dist/d/index.d.ts",
@@ -31,5 +31,5 @@
    "prettier": "3.3.3",
    "tslib": "^2.8.1"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/lib-iframe
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-iframe",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -37,5 +37,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/jdcloud
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/jdcloud
@@ -1,6 +1,6 @@
 {
  "name": "@certd/jdcloud",
-  "version": "1.45.2",
+  "version": "1.45.5",
  "description": "jdcloud openApi sdk",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
@@ -63,5 +63,5 @@
      "fetch"
    ]
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/lib-k8s
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-k8s",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -21,7 +21,7 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/basic": "^1.45.2",
+    "@certd/basic": "^1.45.5",
    "@kubernetes/client-node": "0.21.0"
  },
  "devDependencies": {
@@ -38,5 +38,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-server
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/lib-server
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/lib-server
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/lib-server
@@ -1,6 +1,6 @@
 {
  "name": "@certd/lib-server",
-  "version": "1.45.2",
+  "version": "1.45.5",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -29,11 +29,11 @@
  ],
  "license": "AGPL",
  "dependencies": {
-    "@certd/acme-client": "^1.45.2",
-    "@certd/basic": "^1.45.2",
-    "@certd/pipeline": "^1.45.2",
-    "@certd/plugin-lib": "^1.45.2",
-    "@certd/plus-core": "^1.45.2",
+    "@certd/acme-client": "^1.45.5",
+    "@certd/basic": "^1.45.5",
+    "@certd/pipeline": "^1.45.5",
+    "@certd/plugin-lib": "^1.45.5",
+    "@certd/plus-core": "^1.45.5",
    "@midwayjs/cache": "3.14.0",
    "@midwayjs/core": "3.20.11",
    "@midwayjs/i18n": "3.20.13",
@@ -69,5 +69,5 @@
    "typeorm": "^0.3.20",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/midway-flyway-js
@@ -1,6 +1,6 @@
 {
  "name": "@certd/midway-flyway-js",
-  "version": "1.45.2",
+  "version": "1.45.5",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -52,5 +52,5 @@
    "typeorm": "^0.3.20",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/plugin-cert
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-cert",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -20,7 +20,7 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/plugin-lib": "^1.45.2"
+    "@certd/plugin-lib": "^1.45.5"
  },
  "devDependencies": {
    "@types/chai": "^4.3.12",
@@ -38,5 +38,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 **Note:** Version bump only for package @certd/plugin-lib
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-lib",
  "private": false,
-  "version": "1.45.2",
+  "version": "1.45.5",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -17,9 +17,9 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/acme-client": "^1.45.2",
-    "@certd/basic": "^1.45.2",
-    "@certd/pipeline": "^1.45.2",
+    "@certd/acme-client": "^1.45.5",
+    "@certd/basic": "^1.45.5",
+    "@certd/pipeline": "^1.45.5",
    "dayjs": "^1.11.7",
    "jszip": "^3.10.1",
    "lodash-es": "^4.17.21",
@@ -45,5 +45,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "e9b9839d79532e4961dc0de5c097f81235e557f6"
+  "gitHead": "5e3958f67a1249b372ebebf45540a655a12a4824"
 }
@@ -1,13 +1,13 @@
 ARG base_type=alpine

 # 根据 base_type 参数选择基础镜像系列
-FROM --platform=linux/amd64 node:22-alpine AS base-amd64-alpine
-FROM --platform=linux/arm64 node:22-alpine AS base-arm64-alpine
-FROM --platform=linux/arm/v7 node:22-alpine AS base-arm-v7-alpine
+FROM --platform=linux/amd64 node:22.23.4-alpine AS base-amd64-alpine
+FROM --platform=linux/arm64 node:22.23.4-alpine AS base-arm64-alpine
+FROM --platform=linux/arm/v7 node:22.23.4-alpine AS base-arm-v7-alpine

-FROM --platform=linux/amd64 node:22-trixie-slim AS base-amd64-slim
-FROM --platform=linux/arm64 node:22-trixie-slim AS base-arm64-slim
-FROM --platform=linux/arm/v7 node:22-alpine AS base-arm-v7-slim
+FROM --platform=linux/amd64 node:22.23.4-trixie-slim AS base-amd64-slim
+FROM --platform=linux/arm64 node:22.23.4-trixie-slim AS base-arm64-slim
+FROM --platform=linux/arm/v7 node:22.23.4-alpine AS base-arm-v7-slim

 FROM base-${TARGETARCH}${TARGETVARIANT:+-}${TARGETVARIANT}-${base_type} AS builder

@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+**Note:** Version bump only for package @certd/ui-client
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+**Note:** Version bump only for package @certd/ui-client
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+### Bug Fixes
+
+* 修复修改密码时校验表单字段的错误 ([28e4f70](https://github.com/certd/certd/commit/28e4f70e494f7c56202a8ca4708718c836fff702))
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 ### Bug Fixes
@@ -1,6 +1,6 @@
 {
  "name": "@certd/ui-client",
-  "version": "1.45.2",
+  "version": "1.45.5",
  "private": true,
  "scripts": {
    "dev": "vite --open",
@@ -104,8 +104,8 @@
    "zod-defaults": "^0.1.3"
  },
  "devDependencies": {
-    "@certd/lib-iframe": "^1.45.2",
-    "@certd/pipeline": "^1.45.2",
+    "@certd/lib-iframe": "^1.45.5",
+    "@certd/pipeline": "^1.45.5",
    "@rollup/plugin-commonjs": "^25.0.7",
    "@rollup/plugin-node-resolve": "^15.2.3",
    "@types/chai": "^4.3.12",
@@ -35,7 +35,7 @@ const validatePass1 = async (rule: any, value: any) => {
  }
  const formData = passwordFormRef.value.getFormData();
  if (formData.confirmNewPassword !== "") {
-    passwordFormRef.value.formRef.formRef.validateFields(["confirmNewPassword"]);
+    passwordFormRef.value.formRef.value.formRef.validateFields(["confirmNewPassword"]);
  }
  if (formData.password === formData.newPassword) {
    throw new Error(t("certd.auth.newPasswordNotSameOld"));
@@ -3,6 +3,23 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.45.5](https://github.com/certd/certd/compare/v1.45.4...v1.45.5) (2026-10-22)
+
+### Bug Fixes
+
+* 非企业模式下禁止API密钥指定项目ID并校验权限【安全加强】 ([f50651e](https://github.com/certd/certd/commit/f50651ef91813b529b8498ddefe0f66b8b7946da))
+* **authority:** 修复权限校验时角色值错误的问题 ([5326d7d](https://github.com/certd/certd/commit/5326d7dff3967974d70090b45f8580a155c1a032))
+
+## [1.45.4](https://github.com/certd/certd/compare/v1.45.3...v1.45.4) (2026-10-22)
+
+### Bug Fixes
+
+* **pipeline:** 修复定时触发器cron归一化截取位置错误导致日期字段被吃掉的问题 ([#813](https://github.com/certd/certd/issues/813)) ([7ac9101](https://github.com/certd/certd/commit/7ac9101266f2821fb13ff68ea6d36969c9485675))
+
+## [1.45.3](https://github.com/certd/certd/compare/v1.45.2...v1.45.3) (2026-10-19)
+
+**Note:** Version bump only for package @certd/ui-server
+
 ## [1.45.2](https://github.com/certd/certd/compare/v1.45.1...v1.45.2) (2026-10-18)

 ### Bug Fixes
@@ -1,6 +1,6 @@
 {
  "name": "@certd/ui-server",
-  "version": "1.45.2",
+  "version": "1.45.5",
  "description": "fast-server base midway",
  "private": true,
  "type": "module",
@@ -43,20 +43,20 @@
    "lint1": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/acme-client": "^1.45.2",
-    "@certd/basic": "^1.45.2",
-    "@certd/commercial-core": "^1.45.2",
+    "@certd/acme-client": "^1.45.5",
+    "@certd/basic": "^1.45.5",
+    "@certd/commercial-core": "^1.45.5",
    "@certd/cv4pve-api-javascript": "^8.4.2",
-    "@certd/jdcloud": "^1.45.2",
-    "@certd/lib-huawei": "^1.45.2",
-    "@certd/lib-k8s": "^1.45.2",
-    "@certd/lib-server": "^1.45.2",
-    "@certd/midway-flyway-js": "^1.45.2",
-    "@certd/pipeline": "^1.45.2",
-    "@certd/plugin-cert": "^1.45.2",
-    "@certd/plugin-lib": "^1.45.2",
-    "@certd/plugin-plus": "^1.45.2",
-    "@certd/plus-core": "^1.45.2",
+    "@certd/jdcloud": "^1.45.5",
+    "@certd/lib-huawei": "^1.45.5",
+    "@certd/lib-k8s": "^1.45.5",
+    "@certd/lib-server": "^1.45.5",
+    "@certd/midway-flyway-js": "^1.45.5",
+    "@certd/pipeline": "^1.45.5",
+    "@certd/plugin-cert": "^1.45.5",
+    "@certd/plugin-lib": "^1.45.5",
+    "@certd/plugin-plus": "^1.45.5",
+    "@certd/plus-core": "^1.45.5",
    "@koa/cors": "^5.0.0",
    "@midwayjs/bootstrap": "3.20.11",
    "@midwayjs/cache": "3.14.0",
@@ -62,8 +62,8 @@ export class RoleController extends CrudController<RoleService> {
    @Query("id")
    id: number
  ) {
-    if (id === 1) {
-      throw new Error("不能删除默认的管理员角色");
+    if (id <= 3) {
+      throw new Error("不能删除系统默认角色");
    }
    const res = await super.delete(id);
    await this.auditLog({
@@ -1,5 +1,5 @@
 import { ALL, Body, Controller, Inject, Post, Provide, Query } from "@midwayjs/core";
-import { Constants, CrudController } from "@certd/lib-server";
+import { Constants, CrudController, isEnterprise } from "@certd/lib-server";
 import { AuthService } from "../../../modules/sys/authority/service/auth-service.js";
 import { OpenKeyService } from "../../../modules/open/service/open-key-service.js";
 import { ApiTags } from "@midwayjs/swagger";
@@ -60,6 +60,10 @@ export class OpenKeyController extends CrudController<OpenKeyService> {
    const { projectId, userId } = await this.getProjectUserIdRead();
    body.projectId = projectId;
    body.userId = userId;
+    if (!isEnterprise()) {
+      //如果是非企业模式，禁止指定projectId
+      delete body.projectId;
+    }
    const res = await this.service.add(body);
    this.auditLog({
      content: `新增了API密钥(ID:${res.id}, scope:${body.scope}, remark:${body.remark})`,
@@ -1,7 +1,7 @@
 import { Init, Inject, MidwayWebRouterService, Provide, Scope, ScopeEnum } from "@midwayjs/core";
 import { IMidwayKoaContext, IWebMiddleware, NextFunction } from "@midwayjs/koa";
 import jwt from "jsonwebtoken";
-import { Constants, SysPrivateSettings, SysSettingsService } from "@certd/lib-server";
+import { Constants, isEnterprise, SysPrivateSettings, SysSettingsService } from "@certd/lib-server";
 import { logger } from "@certd/basic";
 import { AuthService } from "../modules/sys/authority/service/auth-service.js";
 import { OpenKeyService } from "../modules/open/service/open-key-service.js";
@@ -183,11 +183,18 @@ export class AuthorityMiddleware implements IWebMiddleware {
    if (!openKey) {
      return null;
    }
-
    //校验 openKey
    const openKeyRes = await this.openKeyService.verifyOpenKey(openKey);
-    let roles = [1];
-    if (!openKeyRes.projectId || openKeyRes.projectId <= 0) {
+    let roles = []
+    if (isEnterprise()) {
+      if (!openKeyRes.projectId || openKeyRes.projectId <= 0) {
+        throw new Error("projectId不能为空");
+      }
+      roles = [3]
+    }else {
+      if (openKeyRes.projectId !=null) {
+        throw new Error("对不起，您无权进行此操作");
+      }
      roles = await this.roleService.getRoleIdsByUserId(openKeyRes.userId);
    }
    ctx.user = { id: openKeyRes.userId, roles, projectId: openKeyRes.projectId };
@@ -83,4 +83,50 @@ describe("PipelineService", () => {
    };
    assert.doesNotThrow(() => (service as any).checkTriggers(pipeline));
  });
+
+  describe("registerCron normalizes every-minute cron like the client editor does", () => {
+    function createService() {
+      const service = new PipelineService();
+      const registered: any[] = [];
+      service.cron = {
+        remove() {},
+        register(req: any) {
+          registered.push(req);
+        },
+        getTaskSize() {
+          return registered.length;
+        },
+      } as any;
+      return { service, registered };
+    }
+
+    it('normalizes "* * 15 * *" to "0 0 15 * *" without eating the first digit of the day field', () => {
+      //与客户端 cron-editor 的归一化结果保持一致：分钟与小时均为 * 时，置为 0 0，其余字段原样保留
+      const { service, registered } = createService();
+      service.registerCron(1, 1, { id: "t1", type: "timer", props: { cron: "* * 15 * *" } });
+      assert.equal(registered.length, 1);
+      assert.equal(registered[0].cron, "0 0 15 * *");
+    });
+
+    it('keeps registration for "* * 1 * *" (single-digit day must not be dropped)', () => {
+      const { service, registered } = createService();
+      service.registerCron(1, 1, { id: "t1", type: "timer", props: { cron: "* * 1 * *" } });
+      assert.equal(registered.length, 1);
+      assert.equal(registered[0].cron, "0 0 1 * *");
+    });
+
+    it('normalizes "* * * * *" to "0 0 * * *"', () => {
+      const { service, registered } = createService();
+      service.registerCron(1, 1, { id: "t1", type: "timer", props: { cron: "* * * * *" } });
+      assert.equal(registered.length, 1);
+      assert.equal(registered[0].cron, "0 0 * * *");
+    });
+
+    it('keeps the existing correct normalization for "* 12 * * *"', () => {
+      const { service, registered } = createService();
+      service.registerCron(1, 1, { id: "t1", type: "timer", props: { cron: "* 12 * * *" } });
+      assert.equal(registered.length, 1);
+      assert.equal(registered[0].cron, "0 12 * * *");
+    });
+  });
 });
@@ -590,7 +590,8 @@ export class PipelineService extends BaseService<PipelineEntity> {
    }
    cron = cron.trim();
    if (cron.startsWith("* * ")) {
-      cron = "0 0 " + cron.substring(5);
+      // "* * " 为4个字符，需要跳过整个前缀，否则会吃掉第3个字段（日）的首字符
+      cron = "0 0 " + cron.substring(4);
    }
    if (cron.startsWith("* ")) {
      cron = "0 " + cron.substring(2);
@@ -1 +1 @@
-22:55
+15:43
@@ -1 +1 @@
-23:23
+15:37
Author	SHA1	Message	Date
xiaojunnuo	289028859c	build: publish	2026-10-22 15:43:26 +08:00
xiaojunnuo	e2da200ddb	build: trigger build image	2026-10-22 15:43:16 +08:00
xiaojunnuo	7d285840f9	build: release	2026-10-22 15:37:12 +08:00
xiaojunnuo	5e3958f67a	v1.45.5	2026-10-22 15:30:12 +08:00
xiaojunnuo	0898e2bad9	build: prepare to build	2026-10-22 15:24:34 +08:00
xiaojunnuo	4539c10404	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-10-22 15:24:19 +08:00
xiaojunnuo	e01a84cc7f	chore: 1	2026-10-22 15:24:13 +08:00
xiaojunnuo	32f65bce9f	chore: 修改角色删除的限制条件和提示信息	2026-10-22 15:17:49 +08:00
xiaojunnuo	29201d1cf3	Merge branch 'v2-dev' of https://github.com/certd/certd into v2-dev	2026-10-22 15:14:32 +08:00
xiaojunnuo	5326d7dff3	fix(authority): 修复权限校验时角色值错误的问题将无有效项目ID时的角色值从0改为3，修正权限判断逻辑	2026-10-22 15:14:19 +08:00
xiaojunnuo	cc1c9c7fe7	chore: 降低api token的权限	2026-10-22 15:13:07 +08:00
xiaojunnuo	b601b503e2	chore: 企业版鉴权时校验projectId非空	2026-10-22 15:09:01 +08:00
xiaojunnuo	f50651ef91	fix: 非企业模式下禁止API密钥指定项目ID并校验权限【安全加强】	2026-10-22 15:08:26 +08:00
xiaojunnuo	9f18453d2b	v1.45.4	2026-10-22 14:15:31 +08:00
xiaojunnuo	9eb22d3150	build: prepare to build	2026-10-22 14:09:50 +08:00
Zephyr Jin	7ac9101266	fix(pipeline): 修复定时触发器cron归一化截取位置错误导致日期字段被吃掉的问题 (#813 ) registerCron 中 "* * " 前缀长4个字符却使用 substring(5)，多跳的字符吃掉了日期字段首字符：* * 15 * * 被归一化为 0 0 5 * （15号变5号）， * 1 * * 等则产出4字段非法cron，被解析器抛错后静默跳过注册，定时任务不创建。改用 substring(4)，与同函数第二分支及客户端 cron-editor 的字段替换语义保持一致，并补充回归测试。	2026-10-22 14:03:35 +08:00
Aomsir	113c96b866	fix(docker): 将构建和运行镜像的 Node.js 固定到 22.23.4 安全版本 (#817 )	2026-10-22 14:03:21 +08:00
xiaojunnuo	3f118d9c21	build: release	2026-10-19 10:38:58 +08:00
xiaojunnuo	646a009832	build: publish	2026-10-19 10:35:20 +08:00
xiaojunnuo	bacb141b3b	build: trigger build image	2026-10-19 10:35:09 +08:00
xiaojunnuo	9b1cf353b9	v1.45.3	2026-10-19 10:34:11 +08:00
xiaojunnuo	2b66faef90	build: prepare to build	2026-10-19 10:19:13 +08:00
xiaojunnuo	28e4f70e49	fix: 修复修改密码时校验表单字段的错误修复了修改密码功能中，访问表单实例的属性路径错误，导致无法正确校验确认新密码字段的问题。	2026-10-19 10:13:10 +08:00
xiaojunnuo	93031e7f53	build: release	2026-10-18 21:42:30 +08:00
xiaojunnuo	d60635f766	build: publish	2026-10-18 21:20:24 +08:00
xiaojunnuo	f5df69fbc9	build: trigger build image	2026-10-18 21:20:13 +08:00
@@ -1 +1 @@
 :07
 :24
@@ -1 +1 @@
 :55
 :43
@@ -1 +1 @@
 :23
 :37