Stefan AgnerandClaude Fable 5.1 64ea3be432 Keep "!secret" references when persisting app options (#7237) ...

Since #6203 the set-options endpoint stores the value returned by the
options validator. The validator replaces "!secret x" with the resolved
secret before type-checking, so the plaintext secret ended up in the
persisted app options instead of the reference (#7152).

Make the validator non-destructive on request instead of restoring the
references afterwards: AppOptions gains a resolve_secrets flag. When it
is False, a "!secret x" value is still validated against the resolved
secret (including the pwned hash and type coercion) but the reference is
returned. The set-options endpoint validates with resolve_secrets=False,
while write_options and the self options config endpoint keep resolving
secrets for the container.

Fixes #7152

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-17 15:27:39 +02:00

..

api

Keep "!secret" references when persisting app options (#7237)

2026-09-17 15:27:39 +02:00

apps

Keep "!secret" references when persisting app options (#7237)

2026-09-17 15:27:39 +02:00

backups

Fix supervisor config restore from encrypted backups (#7218)

2026-09-14 16:59:37 +02:00

dbus

Add /time API for setting NTP servers on HAOS (#7181)

2026-09-02 17:22:20 +02:00

dbus_service_mocks

Don't leave rejected AppArmor profile files in the store directory (#7229)

2026-09-17 09:34:46 +02:00

discovery

Migrate persisted 'addon' field to 'app' in config files (#6786)

2026-05-05 11:18:47 +02:00

docker

Add feature flag to drop MKNOD, AUDIT_WRITE and SETFCAP from apps (#7233)

2026-09-17 10:21:41 +02:00

fixtures

Fix supervisor config restore from encrypted backups (#7218)

2026-09-14 16:59:37 +02:00

hardware

Report storage usage per mount (#7146)

2026-08-19 11:09:06 +03:00

homeassistant

Forward Core API proxy paths byte-for-byte and match deny rules on decoded path (#7225)

2026-09-15 13:11:08 +02:00

host

Don't leave rejected AppArmor profile files in the store directory (#7229)

2026-09-17 09:34:46 +02:00

jobs

Evaluate synchronous job conditions before awaiting ones (#7210)

2026-09-15 14:35:00 +02:00

misc

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

mounts

Use systemd automount units for network mounts (#7167)

2026-08-31 20:30:23 +02:00

os

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

plugins

Add one-shot mode and docker-given totals to stats API (#7168)

2026-08-31 17:11:38 +02:00

resolution

Skip redundant inspect calls when constructing Docker container handles (#7175)

2026-09-01 00:52:00 +02:00

security

Remove Codenotary integrity check (#6236)

2025-11-03 20:13:15 +01:00

services

Migrate persisted 'addon' field to 'app' in config files (#6786)

2026-05-05 11:18:47 +02:00

store

Strip whitespace from repository URLs in store validation (#7161)

2026-08-24 15:48:48 +02:00

utils

Add unhealthy reasons for fsck failures and issues for other systemd failures (#6976)

2026-06-30 14:49:08 +02:00

__init__.py

Rename Hass.io -> Supervisor (#1522)

2020-02-21 17:55:41 +01:00

common.py

Use systemd automount units for network mounts (#7167)

2026-08-31 20:30:23 +02:00

conftest.py

Fix OOM/memory growth in tests/api by clearing aiohttp's middleware cache (#7196)

2026-09-04 16:23:42 -04:00

const.py

Improve connection settings tests (#5278)

2024-08-30 16:07:04 +02:00

test_arch.py

Drop unsupported architectures and machines, create issue for affected apps (#6607)

2026-03-04 10:59:14 +01:00

test_auth.py

tests: enable flake8-pytest-style (PT) ruff rules (#6857)

2026-05-20 22:17:54 +02:00

test_bootstrap.py

Use systemd automount units for network mounts (#7167)

2026-08-31 20:30:23 +02:00

test_bus.py

Replace fixed-duration sleeps after bus events with gather (#6803)

2026-05-06 12:02:28 +02:00

test_core.py

Rename Core port reservation units to drop the hassio prefix (#7173)

2026-09-01 16:41:38 +02:00

test_coresys.py

Recreate aiohttp ClientSession after DNS plug-in load (#5862)

2025-05-06 16:23:40 +02:00

test_ingress.py

Fix typos repo-wide and add codespell pre-commit hook (#6949)

2026-06-16 14:09:16 +02:00

test_main.py

Bump pre-commit ruff to 0.5.7 and reformat (#5242)

2024-08-13 20:53:56 +02:00

test_supervisor.py

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

test_updater.py

Start the Supervisor auto update on every version reload (#7201)

2026-09-14 15:56:21 +02:00

test_validate.py

Parse image references using Docker's domain splitting logic (#7139)

2026-08-19 09:50:00 +02:00