9f034da1d2
build(deps): bump react-router from 7.15.1 to 7.18.2 in /frontend ( #733 )
...
Closes four open Dependabot advisories, all patched in 7.18.0:
- Unauthenticated DoS via inefficient route matching
- Open redirect via backslash in <Link>/useNavigate (CVE-2025-68470 bypass)
- Arbitrary constructor injection in deserializeErrors()
- RSCErrorHandler missing protocol validation (XSS)
Supersedes #726 , which proposed the 8.3.0 major. v8 is not required for
any of these fixes and would additionally impose Node >=22.22.0,
React >=19.2.7, ESM-only distribution and an ES2022 target.
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-08 12:35:09 +01:00
2c4cb262c6
build(deps): bump vite, ws, js-yaml, esbuild, @babel/core in /frontend ( #734 )
...
* build(deps): bump vite, ws, js-yaml, esbuild, @babel/core in /frontend
Closes six Dependabot advisories that had no automated PR because all but
vite are transitive and not expressible as direct bumps:
vite 7.3.1 -> 7.3.6 3 high
ws 8.19.0 -> 8.21.3 1 high
js-yaml 4.1.1 -> 4.3.0 1 high
esbuild 0.27.3 -> 0.28.1 1 low
@babel/core 7.29.0 -> 7.29.7 1 low
storybook moves 10.2.10 -> 10.5.7 as a prerequisite: 10.2.10 caps esbuild
at ^0.27.0, so 0.28.1 was unreachable until storybook widened the range.
That is within the declared ^10.2.10, so only the vite range changed in
package.json.
Verified with npm ci, vite build and tsc --noEmit.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
* fix(frontend): give action() story callbacks a void return
storybook 10.5.7 types action() as returning any, so the concise arrow
bodies tripped @typescript-eslint/no-unsafe-return. Wrapping the calls in
block bodies discards the return value and restores the void contract the
onSelect/onClick props expect.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
---------
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-08 12:34:26 +01:00
420113cc70
build(deps): bump dompurify from 3.4.11 to 3.4.13 in /frontend ( #732 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.4.11 to 3.4.13.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.13 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.13
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:37:00 +01:00
67f029f720
build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /frontend ( #731 )
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 5.0.6 to 5.0.9.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.6...v5.0.9 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 5.0.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:36:41 +01:00
b9c7922b24
chore(package): add repository and bugs metadata fields to frontend package.json ( #719 )
2026-08-08 08:32:42 +01:00
f24c23ac4d
build(deps-dev): bump systeminformation in /frontend ( #706 )
...
Bumps [systeminformation](https://github.com/sebhildebrandt/systeminformation ) from 5.31.6 to 5.31.17.
- [Release notes](https://github.com/sebhildebrandt/systeminformation/releases )
- [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sebhildebrandt/systeminformation/compare/v5.31.6...v5.31.17 )
---
updated-dependencies:
- dependency-name: systeminformation
dependency-version: 5.31.17
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:21:45 +01:00
76373e3f5f
build(deps): bump immutable and swagger-ui-react in /frontend ( #725 )
...
Bumps [immutable](https://github.com/immutable-js/immutable-js ) to 4.3.9 and updates ancestor dependency [swagger-ui-react](https://github.com/swagger-api/swagger-ui ). These dependencies need to be updated together.
Updates `immutable` from 3.8.3 to 4.3.9
- [Release notes](https://github.com/immutable-js/immutable-js/releases )
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/immutable-js/immutable-js/compare/v3.8.3...v4.3.9 )
Updates `swagger-ui-react` from 5.32.8 to 5.32.11
- [Release notes](https://github.com/swagger-api/swagger-ui/releases )
- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.8...v5.32.11 )
---
updated-dependencies:
- dependency-name: immutable
dependency-version: 4.3.9
dependency-type: indirect
- dependency-name: swagger-ui-react
dependency-version: 5.32.11
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:21:23 +01:00
e660f73ad6
build(deps): bump postcss from 8.5.15 to 8.5.25 in /frontend ( #728 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.15 to 8.5.25.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.25 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.25
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:20:57 +01:00
cd838a7aa1
build(deps): bump brace-expansion from 1.1.14 to 1.1.18 in /frontend ( #727 )
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 1.1.14 to 1.1.18.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/commits )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 1.1.18
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 08:20:35 +01:00
2980b4f377
build(deps): bump js-yaml and swagger-ui-react in /frontend ( #702 )
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) to 4.2.0 and updates ancestor dependency [swagger-ui-react](https://github.com/swagger-api/swagger-ui ). These dependencies need to be updated together.
Updates `js-yaml` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.2.0 )
Updates `swagger-ui-react` from 5.32.1 to 5.32.8
- [Release notes](https://github.com/swagger-api/swagger-ui/releases )
- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.1...v5.32.8 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.2.0
dependency-type: indirect
- dependency-name: swagger-ui-react
dependency-version: 5.32.8
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 16:59:50 +01:00
c25ec39293
build(deps): bump dompurify from 3.4.10 to 3.4.11 in /frontend ( #699 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.4.10 to 3.4.11.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.10...3.4.11 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.11
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-21 10:08:00 +01:00
3e11cbfc09
build(deps): bump form-data from 4.0.5 to 4.0.6 in /frontend ( #696 )
...
Bumps [form-data](https://github.com/form-data/form-data ) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases )
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md )
- [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 )
---
updated-dependencies:
- dependency-name: form-data
dependency-version: 4.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 13:03:32 +01:00
5f57f57bd8
build(deps): bump dompurify from 3.4.0 to 3.4.10 in /frontend ( #697 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.4.0 to 3.4.10.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.0...3.4.10 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.10
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 12:35:33 +01:00
4420fb43f4
build(deps): bump react-router from 7.13.0 to 7.15.1 in /frontend ( #695 )
...
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router ) from 7.13.0 to 7.15.1.
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.15.1/packages/react-router )
---
updated-dependencies:
- dependency-name: react-router
dependency-version: 7.15.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 11:45:18 +01:00
09d68661c7
Merge remote-tracking branch 'origin/main'
2026-05-28 16:10:34 +01:00
0439a9b61c
chore: remove "Free" wording from UI banner and modal CTAs
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-28 16:08:34 +01:00
aed707a088
build(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /frontend ( #692 )
...
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.5 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 10:34:35 +01:00
1ef75eaab8
build(deps): bump postcss from 8.5.6 to 8.5.15 in /frontend ( #691 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.6 to 8.5.15.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.6...8.5.15 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.15
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 10:09:08 +01:00
2030dd50ce
build(deps): bump brace-expansion from 1.1.12 to 5.0.6 in /frontend ( #688 )
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 1.1.12 to 5.0.6.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v5.0.6 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 5.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 10:03:03 +01:00
eea87cf2bf
build(deps): bump axios from 1.15.0 to 1.16.1 in /frontend ( #687 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.15.0 to 1.16.1.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.15.0...v1.16.1 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.16.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 10:02:20 +01:00
0593640a52
build(deps-dev): bump systeminformation in /frontend ( #686 )
...
Bumps [systeminformation](https://github.com/sebhildebrandt/systeminformation ) from 5.31.1 to 5.31.6.
- [Release notes](https://github.com/sebhildebrandt/systeminformation/releases )
- [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sebhildebrandt/systeminformation/compare/v5.31.1...v5.31.6 )
---
updated-dependencies:
- dependency-name: systeminformation
dependency-version: 5.31.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 10:01:31 +01:00
4d6e275194
build(deps): bump uuid from 13.0.0 to 14.0.0 in /frontend ( #684 )
...
Bumps [uuid](https://github.com/uuidjs/uuid ) from 13.0.0 to 14.0.0.
- [Release notes](https://github.com/uuidjs/uuid/releases )
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/uuidjs/uuid/compare/v13.0.0...v14.0.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 14.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-23 18:01:08 +02:00
e2417bbbeb
build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /frontend ( #681 )
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.11 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-16 09:02:41 +01:00
27eeb9798f
build(deps): bump dompurify from 3.3.3 to 3.4.0 in /frontend ( #682 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.3.3 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.3...3.4.0 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-16 09:02:28 +01:00
cc14898986
build(deps): bump axios from 1.13.5 to 1.15.0 in /frontend ( #676 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.13.5 to 1.15.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.5...v1.15.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.15.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 10:07:14 +01:00
61b43f33d6
build(deps): bump lodash from 4.17.23 to 4.18.1 in /frontend ( #675 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 09:09:24 +01:00
81e982941d
fix: manifest diff shows all resources as recreated ( #672 ) ( #673 )
...
The manifests endpoint returns text/plain YAML, but fetchWithSafeDefaults
treats string responses as errors and returns the fallback value ([]).
Revert useGetReleaseManifest to use fetchWithDefaults which correctly
passes through text/plain responses.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-27 11:01:00 +00:00
0966354b7c
build(deps): bump brace-expansion from 5.0.2 to 5.0.5 in /frontend ( #671 )
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 5.0.2 to 5.0.5.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.2...v5.0.5 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 5.0.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-27 09:03:22 +00:00
5e9d1898b1
build(deps): bump picomatch in /frontend ( #670 )
...
Bumps and [picomatch](https://github.com/micromatch/picomatch ). These dependencies needed to be updated together.
Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4 )
Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 4.0.4
dependency-type: indirect
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-26 21:31:14 +02:00
79f48462a9
build(deps): bump yaml in /frontend ( #669 )
...
Bumps and [yaml](https://github.com/eemeli/yaml ). These dependencies needed to be updated together.
Updates `yaml` from 1.10.2 to 1.10.3
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v1.10.2...v1.10.3 )
Updates `yaml` from 2.8.2 to 2.8.3
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v1.10.2...v1.10.3 )
---
updated-dependencies:
- dependency-name: yaml
dependency-version: 1.10.3
dependency-type: indirect
- dependency-name: yaml
dependency-version: 2.8.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-26 21:27:56 +02:00
dd64b54800
Bump flatted from 3.3.3 to 3.4.2 in /frontend ( #668 )
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-22 20:37:23 +00:00
f12f60f0c7
fix(frontend): use unique installed package keys ( #667 )
2026-03-19 10:11:27 +00:00
58ba15e1bd
Bump dompurify and swagger-ui-react in /frontend ( #664 )
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) to 3.3.3 and updates ancestor dependency [swagger-ui-react](https://github.com/swagger-api/swagger-ui ). These dependencies need to be updated together.
Updates `dompurify` from 3.2.6 to 3.3.3
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.6...3.3.3 )
Updates `swagger-ui-react` from 5.31.2 to 5.32.1
- [Release notes](https://github.com/swagger-api/swagger-ui/releases )
- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.31.2...v5.32.1 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.3.3
dependency-type: indirect
- dependency-name: swagger-ui-react
dependency-version: 5.32.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 19:08:08 +00:00
a6b8beb25c
Cleanup
2026-03-17 18:20:01 +00:00
e44556d100
fix: resolve DOMPurify XSS vulnerabilities (GHSA-v8jm-5vwx-cfxm, GHSA-v2wj-7wpq-c8vv)
...
Add yarn resolution to pin dompurify>=3.3.2, fixing transitive dependency
from swagger-ui-react that was stuck at 3.2.6.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 18:03:09 +00:00
cfc28cf3a0
feat: add Relations tab with force-directed resource dependency graph ( #96 )
...
Add a new "Relations" tab after "Images" that visualizes resource
dependencies within a Helm release as an interactive force-directed graph.
Detects relationships via ownerReferences, *Ref fields, volumes, env refs,
service selectors, ingress backends, and RBAC bindings. External resources
appear as dashed oval ghost nodes. Color-coded by resource category.
Closes #96
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 17:58:00 +00:00
443207191d
feat: display container images summary on Images tab ( #83 )
...
Add a new "Images" tab on the release details page that extracts
and displays all container images (including init containers) from
the release manifest. Images are grouped by image string and show
the associated resource and container name.
Closes #83
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 16:47:59 +00:00
c5ae60a779
feat: add --force flag support for helm upgrade ( #505 )
...
Add a "Force upgrade" checkbox in the upgrade modal footer that passes
the --force flag to helm upgrade, causing resources to be deleted and
recreated. Also fix the version selector flashing the URL input while
loading by showing a spinner.
Closes #505
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 16:18:00 +00:00
4fb2eb099a
fix: use apiVersion to disambiguate CRDs with same kind ( #504 )
...
When multiple CRDs share the same kind but different API groups
(e.g. Traefik's Middleware under traefik.io and traefik.containo.us),
the dashboard failed to look up the correct resource. Thread apiVersion
through the resource fetch chain and use group-qualified kind
(e.g. Widget.new.example.com) for kubectl lookups.
Closes #504
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 15:55:48 +00:00
f7deda06f5
fix: pass resource name instead of chart name to describe API ( #657 )
...
The DescribeResource component was passing the chart/release name
instead of the actual resource name, causing all resources of the
same kind to show the same describe output.
Closes #657
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 13:22:22 +00:00
123f674e2f
feat: install and upgrade charts from URLs ( #663 )
...
* feat: add support for installing and upgrading charts from URLs
Adds "Install from URL" button to the repositories page, allowing users
to install charts directly from OCI registries and other URLs without
adding them as repositories first. Also adds URL mode to the upgrade
modal (via pencil/X toggle) for charts not found in any configured repo.
Closes #660
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* Alter
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-17 13:09:11 +00:00
6b07fbe242
Bump immutable from 3.8.2 to 3.8.3 in /frontend ( #661 )
...
Bumps [immutable](https://github.com/immutable-js/immutable-js ) from 3.8.2 to 3.8.3.
- [Release notes](https://github.com/immutable-js/immutable-js/releases )
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/immutable-js/immutable-js/compare/v3.8.2...v3.8.3 )
---
updated-dependencies:
- dependency-name: immutable
dependency-version: 3.8.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-08 19:35:30 +00:00
2d1fa25e7e
Bump rollup from 4.58.0 to 4.59.0 in /frontend ( #659 )
...
Bumps [rollup](https://github.com/rollup/rollup ) from 4.58.0 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases )
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rollup/rollup/compare/v4.58.0...v4.59.0 )
---
updated-dependencies:
- dependency-name: rollup
dependency-version: 4.59.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-28 16:01:09 +00:00
331925900a
Bump minimatch from 10.2.2 to 10.2.4 in /frontend ( #658 )
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 10.2.2 to 10.2.4.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v10.2.2...v10.2.4 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 10.2.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-28 14:37:59 +00:00
f91daafd4a
Improved EsLint performance + bump frontend packages ( #656 )
...
* Bump frontend packages to latest
* DropDown.stories.tsx fixed
2026-02-21 10:51:11 +00:00
a15e375105
Bump systeminformation from 5.30.7 to 5.31.1 in /frontend ( #655 )
...
Bumps [systeminformation](https://github.com/sebhildebrandt/systeminformation ) from 5.30.7 to 5.31.1.
- [Release notes](https://github.com/sebhildebrandt/systeminformation/releases )
- [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sebhildebrandt/systeminformation/compare/v5.30.7...v5.31.1 )
---
updated-dependencies:
- dependency-name: systeminformation
dependency-version: 5.31.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 18:16:30 +00:00
2b7df9cfa3
Bump FE packages to latest ( #654 )
...
* Bump FE packages to latest
* Bump eslint packages to the latest available without breaking change
2026-02-15 19:08:49 +00:00
b457be85c1
Bump axios from 1.13.2 to 1.13.5 in /frontend ( #651 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.13.2 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.2...v1.13.5 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.13.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-15 18:02:41 +00:00
c9b8fb7809
Introduced tsconfig.app.json and tsconfig.base.json + Refactored eslint.config.js to the latest structure ( #652 )
...
* Introduced tsconfig.app.json and tsconfig.base.json
* yarn.lock
* Introduced tsconfig.app.json, tsconfig.base.jsonfig.
* Refactored eslint.config.js to latest structure
* Returned previous recommended rules.
* More rules
* Force import rules
* Check
* Check
* Cleanup ESLint configuration and plugins
* Cleanup heap: "writable",DD_RUM: "writable" from ESLint configuration
* "scripts" moved to the top of package.json
2026-02-15 17:41:04 +00:00
939dd8ac0c
Bump qs from 6.14.1 to 6.14.2 in /frontend ( #653 )
...
Bumps [qs](https://github.com/ljharb/qs ) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2 )
---
updated-dependencies:
- dependency-name: qs
dependency-version: 6.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-14 14:11:29 +00:00
Andrey Pokhilko